Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File:                     fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier:          fBWxLqoK5OVniPq8oSg0RCL3er9Qd/WOYZqowqW5CFc=
Subject key identifier:   42:6C:43:D9:49:76:6D:95:E5:02:CC:76:DE:BF:FE:F7:4C:98:5D:91
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0A4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number:          09D3
Signing time:             Tue 28 Jul 2026 20:28:35 +0000
Manifest this update:     Tue 28 Jul 2026 20:28:34 +0000
Manifest next update:     Tue 04 Aug 2026 20:28:34 +0000
Files and hashes:         1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: YbdU1yxfvB+qRjWJozSBb6SrLiv1pevYMT9Dw38HLzc=)
                          2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: BA6BStVHLf0gWqOgSoCGPU3bB5SibBkTMzQMt8U7qXE=)
                          3: 9672E862793811EE92C54834C4F9AE02.roa (hash: OrBLnxyiNzVNe59mG2m2meLOUn+J0nEWcAm3/0ePWkk=)
                          4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: T8baqypAJteFawFWQo7rv2BFEthoLxlG1JlHYcEv8qI=)
                          5: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: Fii/PTphWom/Flz+7QBuofT8Hy3WHpjWFmH/cbhMzx0=)
                          6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: R42xxi5mdGNkiu+sa7XDeJwjkUsIZrW52b4ix+87OCY=)
                          7: 781C64FAF58611ED89273159C4F9AE02.roa (hash: OvH3fzPSveQwg1LNsqvZ4qweGuIQ/2uXhGIvOjFVfYA=)
                          8: 501941C093F211EEA029A113C4F9AE02.roa (hash: v1jk6rruixfhBRtAc/yiJjYi/r2A011KiMAemeWbZ4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2638 (0xa4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Jul 28 20:28:34 2026 GMT
            Not After : Aug  4 20:28:34 2026 GMT
        Subject: CN=6a6910f3-c1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:b3:e6:2c:2e:5b:dd:06:47:40:71:2f:99:
                    ee:ce:2d:64:69:39:dd:a2:62:24:ba:3a:5c:80:c8:
                    71:45:b5:b4:a9:5e:c6:af:ed:bb:ea:68:73:54:55:
                    70:19:2f:75:6d:f3:d1:70:0a:7e:10:52:31:6f:91:
                    92:db:9d:cc:3e:9b:a5:fe:01:41:c9:63:94:d0:af:
                    de:08:c4:4e:89:41:0d:d2:bf:1b:e9:95:4f:2e:93:
                    c2:78:66:62:d7:48:1a:2b:28:89:7c:ed:a8:00:57:
                    40:46:c0:e4:66:a9:ee:f7:83:f7:1e:84:d6:a5:35:
                    50:c4:30:86:42:b2:db:c3:c4:fd:f5:08:b8:5f:b6:
                    23:fe:47:89:9a:cf:63:1e:b5:7f:f1:d5:09:77:0a:
                    fd:71:6d:63:98:d3:bf:94:b4:35:fd:ba:24:db:8c:
                    49:01:e6:8c:bf:81:36:2d:be:01:b9:07:07:89:e6:
                    70:58:7f:22:0f:d4:3b:4f:3c:9a:a9:bc:06:47:3d:
                    30:a6:9a:bc:13:0a:1c:08:2f:d2:cf:1e:1e:25:b2:
                    4c:85:04:02:e4:32:a1:27:98:68:e1:50:83:9c:16:
                    2e:31:93:be:bb:1f:0a:59:56:52:26:48:06:b4:5f:
                    98:32:77:74:3c:e9:c2:08:0c:c5:a6:fd:80:57:59:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6C:43:D9:49:76:6D:95:E5:02:CC:76:DE:BF:FE:F7:4C:98:5D:91
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:93:19:a3:f0:0b:a5:08:30:20:59:cd:ba:e2:23:1c:3b:3b:
         92:72:da:bf:09:f6:6c:65:55:6e:79:da:99:e6:31:9d:f0:db:
         9b:eb:09:34:66:c0:ed:f6:10:c4:7a:b5:a4:dc:b8:0a:41:38:
         c1:eb:68:c6:b7:32:84:21:6f:a1:14:5f:f7:cf:31:f5:95:0f:
         68:10:18:b8:ef:3d:8c:3d:51:46:59:eb:36:7c:5c:ea:38:c5:
         0f:c4:5a:9b:c9:1f:81:7f:e8:04:96:b6:1a:54:cb:5f:80:43:
         69:8e:c4:8d:f6:00:47:b4:18:65:58:e9:c0:ed:7e:f3:b2:c6:
         3d:55:e1:58:62:49:c1:dc:0c:de:99:68:a6:ea:44:5e:20:61:
         da:81:cd:c2:c9:a5:22:0a:02:e6:79:de:f9:17:cd:7c:5f:a6:
         14:bb:37:aa:27:78:19:a9:34:df:03:b3:1f:b8:55:c3:5d:6e:
         78:70:37:a9:e9:c7:8f:d9:ed:29:ff:db:22:c3:86:03:d5:45:
         cb:a9:6b:d0:39:2d:56:5e:d7:d8:7b:f7:f1:e6:90:f6:ad:75:
         3f:d4:00:40:27:c1:70:01:92:7b:7b:97:47:c6:d6:d1:3b:68:
         3f:5d:c6:a4:a5:c1:6f:1d:7b:cd:f8:c0:3f:fa:f9:18:9b:31:
         cb:f4:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:49 2026 by rpki-client