Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
File:                     IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json)
Hash identifier:          pKrBIui2jHC1b8U25RCSwVr39rRaNmYFBEqD99GHsS0=
Subject key identifier:   82:6E:54:B0:C2:10:B2:F8:3B:3A:90:51:6E:B4:0A:18:4D:C9:88:64
Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0
Certificate issuer:       /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
Manifest number:          73
Signing time:             Mon 27 Jul 2026 10:05:29 +0000
Manifest this update:     Mon 27 Jul 2026 10:05:29 +0000
Manifest next update:     Mon 03 Aug 2026 10:05:29 +0000
Files and hashes:         1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: fM3QZX6x4ShZvGy8lHVrRvvae040Wen2m9TRMCk++p4=)
                          2: 78211876DA3811F080F82F148DD3641D.roa (hash: iQuCstGoIK1MPnU6/cDDIt+974fe7iZAlTkSxssvjXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl
                          rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0
        Validity
            Not Before: Jul 27 10:05:29 2026 GMT
            Not After : Aug  3 10:05:29 2026 GMT
        Subject: CN=6a672d69-ae84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:83:ec:61:d1:0a:90:04:56:8b:af:66:a2:
                    bd:28:f9:c6:6c:21:53:8b:64:67:1b:6f:4d:38:86:
                    a2:bd:55:f7:30:64:90:74:cc:7b:e5:96:67:4f:51:
                    92:fc:32:44:49:2e:e2:84:b0:43:cd:8b:9e:d2:de:
                    ca:10:5f:13:2f:a4:00:30:2c:62:0a:0c:37:aa:02:
                    c5:0b:3c:a2:c1:9b:11:f5:f3:1d:0f:33:cf:25:90:
                    36:7c:46:5a:d7:14:5c:48:48:7e:37:93:91:bd:13:
                    ee:d3:84:51:5b:3e:69:e1:e9:e3:60:42:13:26:d6:
                    62:d5:fc:61:75:86:e7:84:32:b6:9b:49:99:16:09:
                    58:1a:3a:43:60:6f:75:5b:bd:1a:84:6c:66:ac:0a:
                    70:80:c9:85:c3:d4:47:b1:02:8c:04:fb:75:15:b7:
                    00:b8:8b:36:7c:a3:da:6c:19:65:58:fb:98:82:c7:
                    8b:d6:d3:76:da:4a:97:e9:15:5b:f2:6f:e2:05:42:
                    52:c0:21:e8:69:41:35:5c:5a:06:7c:26:c3:eb:e6:
                    07:8d:34:27:4b:7d:95:df:64:5c:49:a4:cb:ac:80:
                    a3:fc:08:d8:ad:48:d2:ce:7f:90:86:14:f2:c6:a6:
                    f9:9c:1f:3d:2a:18:6c:ce:cb:84:88:27:da:4a:76:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6E:54:B0:C2:10:B2:F8:3B:3A:90:51:6E:B4:0A:18:4D:C9:88:64
            X509v3 Authority Key Identifier:
                keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1a:07:71:3f:93:e8:1f:71:d5:3c:5b:1e:60:e9:48:d7:1c:
         98:28:71:91:d4:48:41:a2:1d:bb:ea:3c:73:4b:54:96:20:00:
         e2:03:0d:30:9d:b9:12:73:2a:52:e0:4d:27:e7:d1:e5:a7:d1:
         6d:93:14:b3:78:cb:45:d7:7d:e8:8e:c0:26:c2:f7:09:df:3f:
         49:a9:e0:1f:54:9d:04:f2:c8:72:ca:78:fc:4c:3c:af:c4:65:
         a0:a3:93:50:f6:4b:98:ea:e2:17:34:8d:e9:c5:69:04:a9:67:
         e2:0b:f1:2b:e1:ba:bc:a5:e3:2c:53:e2:95:4b:a6:69:fd:91:
         1f:fb:5c:bf:9f:31:39:1a:6b:36:93:97:9a:8a:76:18:8c:45:
         76:a4:57:73:6c:fe:0a:d6:dd:11:49:68:e4:2f:09:8f:10:05:
         04:e1:50:bb:19:89:25:46:7e:f0:17:fe:12:44:2e:7a:9d:76:
         bc:64:e7:93:90:fd:b5:cf:39:15:0d:c8:ca:37:71:2c:3d:ad:
         2c:95:3c:70:0f:fc:b7:23:33:da:1d:28:20:32:b6:60:ed:09:
         cb:fa:f0:0a:11:2d:61:b7:03:67:99:65:5e:59:1e:77:f5:bd:
         5d:35:90:49:4a:24:6f:93:e8:44:66:c0:0f:13:90:08:a2:24:
         ff:26:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:21 2026 by rpki-client