Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
File:                     eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json)
Hash identifier:          RE2L88bpLmiCsQ+U4g/LW1bV89KJBaGsLftDVMBjK4I=
Subject key identifier:   4A:44:B9:CD:9C:F7:A0:FC:2A:AA:FF:EA:46:97:66:1D:9F:0F:DE:57
Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
Certificate issuer:       /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
Manifest number:          0102
Signing time:             Mon 27 Jul 2026 08:15:05 +0000
Manifest this update:     Mon 27 Jul 2026 08:15:05 +0000
Manifest next update:     Mon 03 Aug 2026 08:15:05 +0000
Files and hashes:         1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: O9nZgiZKpzNz4PJk/i1ibVfu/V7Jj6QSIseKjUR3HKY=)
                          2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: b/gx6jE3ztiTlC5Eac5TsfJ6NWxaMyjyfxR8HfsCYbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
                          rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
        Validity
            Not Before: Jul 27 08:15:05 2026 GMT
            Not After : Aug  3 08:15:05 2026 GMT
        Subject: CN=6a671389-0c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:40:10:b1:bf:b0:93:c8:ae:6f:de:ea:04:
                    03:78:b3:0e:54:7c:2f:63:ce:0f:44:53:78:0c:62:
                    eb:8b:eb:e0:f9:58:b8:c9:17:44:66:cf:ae:41:c5:
                    a0:23:fc:b9:0c:36:b4:04:5a:4b:a3:a0:04:16:ff:
                    ac:4b:09:d7:9e:ed:e6:0a:ce:6d:00:bf:53:9a:e3:
                    14:55:3c:c9:cd:16:b7:9d:8c:00:1b:7e:26:f4:d9:
                    bc:da:75:be:03:aa:13:83:5a:41:dc:b9:7e:d1:2c:
                    fe:e5:df:76:e4:74:a5:3a:64:ec:4d:3c:29:d5:12:
                    8f:5c:f8:aa:7f:cc:57:f0:4f:c6:e5:80:e2:25:bd:
                    18:51:d7:5b:a1:bf:b9:08:cd:c0:c4:0d:13:1e:11:
                    65:65:57:ed:aa:59:4e:44:5a:6e:99:e1:85:ee:21:
                    80:1b:74:86:ec:73:49:9d:9e:0e:1a:b3:16:2e:9a:
                    f6:ae:00:65:42:42:b6:e4:e4:8c:05:50:bb:7f:0b:
                    91:4a:e2:a0:f5:1f:59:fa:bb:e1:2e:b4:6c:c9:c5:
                    13:a7:f7:02:0f:32:7c:40:94:9c:d5:97:4b:ee:da:
                    ba:db:fa:0f:08:3c:88:bc:b5:cd:58:b7:08:c6:a1:
                    4b:c0:6e:db:97:64:31:e9:36:c1:70:46:47:c6:91:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:44:B9:CD:9C:F7:A0:FC:2A:AA:FF:EA:46:97:66:1D:9F:0F:DE:57
            X509v3 Authority Key Identifier:
                keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:d3:32:ec:31:b2:0c:4d:5b:df:33:fd:c8:19:41:6c:62:65:
         a1:19:46:16:5f:7b:4a:65:26:38:43:34:43:c6:54:c1:86:02:
         65:8c:6e:c1:cb:13:81:83:67:d3:e1:e8:96:e5:89:af:d6:ab:
         cc:5f:2f:c0:70:ad:c1:7b:c6:74:91:c2:17:08:c9:ef:e9:f9:
         85:4c:06:99:02:13:cb:cd:d4:73:4e:55:1a:39:7b:cb:f2:83:
         65:b2:0f:d5:66:74:40:02:c5:d7:4d:97:79:8c:14:02:cc:05:
         3f:2b:c2:03:3c:48:47:0a:27:51:bd:b2:0c:35:be:b2:0e:89:
         87:db:ae:46:b3:c0:95:8a:98:8e:66:a7:7e:15:b4:0d:4f:cd:
         af:c7:40:d4:33:f6:66:81:52:90:2f:1c:b8:bd:96:f4:b6:af:
         cc:1e:f9:4a:4a:46:8c:54:e6:98:45:6e:7e:94:f7:5f:44:07:
         2f:fa:c7:44:29:3f:6e:fc:54:8f:c8:92:a9:0c:95:17:74:2e:
         94:90:e9:41:f0:02:5b:b0:c4:d4:98:03:17:d6:11:8c:80:70:
         05:d5:ad:51:69:c0:c6:ea:08:4f:8d:b7:b2:cd:fc:d7:76:46:
         ea:e3:ff:59:f7:e3:cf:17:44:16:fb:f2:8d:9a:53:cb:b1:9e:
         b9:96:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:02 2026 by rpki-client