Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
File:                     _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json)
Hash identifier:          I2uvJWR4s5n337qXQOps5xPbIA9L3wwIJcOx3F6sjdc=
Subject key identifier:   AF:1D:AF:F3:E8:6E:19:7C:7F:6A:22:D0:2E:07:34:BF:2F:91:83:E4
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Certificate issuer:       /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial:       0804
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
Manifest number:          07FB
Signing time:             Sun 26 Jul 2026 21:56:53 +0000
Manifest this update:     Sun 26 Jul 2026 21:56:53 +0000
Manifest next update:     Sun 02 Aug 2026 21:56:53 +0000
Files and hashes:         1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: dBADtwkRdVeIxaf2wnwy3B1KPjXZJ95rjEy7EH/3G/8=)
                          2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: TnSaLf+xgZHXFIsS72cUr6qVZqPyupzxKL+9myIDylQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
                          rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
        Validity
            Not Before: Jul 26 21:56:53 2026 GMT
            Not After : Aug  2 21:56:53 2026 GMT
        Subject: CN=6a6682a5-e3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:25:69:99:8d:f6:90:55:50:e9:ed:67:2c:
                    2f:4e:b6:6c:35:58:36:71:dd:10:26:8e:b4:1f:28:
                    8c:87:69:76:f5:64:01:e7:d4:88:47:9c:eb:6a:e9:
                    16:91:37:14:15:33:e8:20:bd:86:e0:46:29:02:78:
                    2a:bf:61:8c:d7:48:b1:9e:3f:dc:61:18:c5:46:c1:
                    2e:a4:49:c3:38:cf:4b:e8:04:86:85:f1:f5:fd:26:
                    6f:ca:8c:88:e7:ca:4c:1c:e0:8b:99:3a:56:24:6d:
                    cc:db:5d:bc:64:24:f2:f5:2c:31:3c:0a:b2:85:94:
                    30:37:bc:4b:75:2a:f1:5d:c1:aa:4e:fc:dc:61:1f:
                    5d:30:20:43:4c:c8:36:31:d0:dc:27:dc:5f:8e:45:
                    71:b7:8d:d8:cf:7f:31:a7:16:04:94:55:d2:08:8a:
                    06:45:04:0e:cf:c5:b7:8f:39:dc:34:f0:e1:85:2a:
                    44:b3:ed:ed:86:03:6e:56:56:f1:bc:34:d9:1c:49:
                    80:8c:82:96:df:bc:83:b8:5f:b9:52:f3:07:0a:6b:
                    0f:10:9f:25:e3:19:eb:81:bb:d5:41:f5:50:2b:bd:
                    4d:8f:cf:09:22:4b:cd:73:d0:e2:b3:98:12:8a:6a:
                    9e:30:ad:b8:4c:28:16:21:20:b0:c3:ac:52:34:d7:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1D:AF:F3:E8:6E:19:7C:7F:6A:22:D0:2E:07:34:BF:2F:91:83:E4
            X509v3 Authority Key Identifier:
                keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:71:24:b8:7e:a2:42:b1:dd:6a:39:c7:6a:d5:7b:f0:6b:a3:
         c6:6b:c1:a9:59:c7:a6:35:3b:9c:81:63:45:8d:ce:bf:df:0c:
         f0:30:ad:45:ef:cc:81:77:45:27:51:7c:5e:18:9c:08:49:38:
         4e:3c:db:c5:c5:0a:9b:2c:d1:37:ce:6c:7e:4c:89:38:10:39:
         8a:78:1c:da:92:6d:61:ab:51:2d:ae:d2:78:b0:31:af:f2:0f:
         77:ee:0f:b4:6b:ee:45:73:79:7f:d5:23:22:48:db:f6:a9:44:
         92:78:a1:09:27:1f:82:a3:5d:68:b4:03:01:b9:ad:03:bd:8c:
         29:ec:9a:5f:1a:87:5d:df:fa:1d:4e:3d:bd:00:bd:af:5d:b5:
         91:4e:20:ea:b4:b7:54:3b:cd:b1:72:6e:81:91:a6:ef:6f:1c:
         5d:f7:dd:fe:88:97:37:f2:38:fd:43:27:23:85:b3:55:9e:66:
         d4:86:12:5c:8d:69:8a:57:a9:12:09:c2:45:27:a4:26:c9:a1:
         98:97:f7:b7:0e:b1:a5:72:73:e2:94:6c:3a:aa:df:4c:5c:cf:
         1d:ed:ce:99:f7:2d:ec:7b:5e:79:01:41:f8:89:ca:d2:28:d9:
         02:b9:1f:ce:2b:29:62:34:08:1c:6a:4e:c8:ec:5e:58:a0:d9:
         34:0d:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:45:00 2026 by rpki-client