Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File:                     cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier:          jlz6dGFFlyYZkoUJ6fJxwJJp6S1SJXAdZ3XkQaM13Mo=
Subject key identifier:   B1:A3:95:73:2D:6E:D8:53:F8:F0:85:41:00:5E:E5:9A:FC:10:27:AA
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer:       /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number:          0689
Signing time:             Tue 28 Jul 2026 23:07:18 +0000
Manifest this update:     Tue 28 Jul 2026 23:07:18 +0000
Manifest next update:     Tue 04 Aug 2026 23:07:18 +0000
Files and hashes:         1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: JURjNoD5ed2C76k8HjoCIdN6f/lDB5WYn9qULVsM21c=)
                          2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: 4mnGG9mctkzjRMjeZiJm8EP2Ry3MqPxpfShzQMCXH5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
        Validity
            Not Before: Jul 28 23:07:18 2026 GMT
            Not After : Aug  4 23:07:18 2026 GMT
        Subject: CN=6a693626-29c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:d5:6c:83:ed:17:7b:c3:94:90:58:c9:8a:
                    e0:e0:c7:b2:40:3d:93:07:6f:f2:af:f7:04:e2:e6:
                    55:f5:ee:49:d2:16:d3:53:bf:30:4f:9b:c0:57:8a:
                    d4:68:78:49:0c:3c:7b:2a:92:7b:1c:9f:59:b2:1e:
                    c7:78:24:01:33:c0:ce:88:b3:f7:da:53:b9:81:78:
                    9e:32:28:98:9e:15:b4:76:6c:f6:84:74:12:d6:44:
                    5d:50:73:c5:8f:28:ea:c0:43:a6:b3:e1:3c:47:b9:
                    c6:c5:0f:ba:e6:2f:3a:97:f5:42:13:b9:73:3d:93:
                    ad:66:c1:e9:65:d5:03:f6:e5:80:92:43:c8:cc:9f:
                    6a:07:43:56:05:2c:4d:3b:f4:f3:19:1f:03:8a:b1:
                    b1:4c:ac:d7:fb:84:f5:7b:d7:65:ca:9f:47:b4:8a:
                    54:30:a0:32:c9:05:d0:51:a0:05:d6:ba:91:af:80:
                    6e:e2:aa:85:b7:40:5e:42:23:1b:e0:0c:70:b2:2d:
                    ce:a9:0a:2e:45:57:38:93:9f:84:45:c8:d9:27:77:
                    e2:bb:c6:68:7f:1a:44:9f:ca:ef:b8:82:85:77:2d:
                    30:2b:e0:47:08:0a:74:9f:db:e5:61:51:23:de:89:
                    5a:41:8c:ed:a1:53:65:2d:eb:93:ff:34:df:1a:b2:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A3:95:73:2D:6E:D8:53:F8:F0:85:41:00:5E:E5:9A:FC:10:27:AA
            X509v3 Authority Key Identifier:
                keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:5b:74:d8:4d:20:a5:07:af:da:29:d7:00:d7:cb:62:02:d9:
         24:85:08:8f:7a:4d:96:7f:30:32:89:ff:42:d8:ae:9e:72:90:
         2e:9e:41:3d:cb:2d:19:fd:ea:37:d4:25:d8:e1:cb:c8:62:3d:
         6d:91:8c:2f:6c:6c:e3:1e:48:21:93:74:83:74:13:18:dc:bc:
         76:3a:8b:3a:64:32:db:41:6d:28:9d:e7:f1:98:9f:08:54:b0:
         0e:f6:d9:cf:d2:09:bb:b3:d2:12:60:4c:3c:44:36:55:d3:5c:
         fa:59:71:cb:d8:74:e4:6e:22:39:4d:5c:7c:dd:1f:d6:30:4c:
         27:40:e1:69:bb:33:9e:32:6b:ca:44:e7:48:eb:2a:f3:ad:db:
         8f:18:c5:26:d0:1f:d8:74:f4:3b:99:ca:89:83:00:76:a2:f5:
         60:47:e2:6c:a5:ec:ce:b9:89:94:9d:11:a9:db:19:3a:8f:ef:
         d7:39:7b:61:40:75:c7:d9:05:4a:c0:de:d5:43:85:08:b7:5f:
         cf:20:89:43:60:7f:50:62:ce:c9:ea:d9:4d:19:90:f4:07:7a:
         6e:b0:67:f8:79:26:94:b7:da:ea:87:f4:9a:4e:fa:5a:90:18:
         53:cc:86:2d:19:5e:4d:64:f8:b5:2e:f1:e4:30:0a:1c:76:b7:
         e5:52:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:13 2026 by rpki-client