Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
File:                     m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json)
Hash identifier:          eDh9nNQGqCqRSsJEsT4Gt3Wp3gmntiLvEjdAruL//Gs=
Subject key identifier:   18:10:55:7D:2D:D7:93:07:8F:1E:BF:CF:38:EB:CA:87:09:DE:DF:FA
Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
Certificate issuer:       /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
Manifest number:          DC
Signing time:             Wed 29 Jul 2026 08:01:42 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:42 +0000
Manifest next update:     Wed 05 Aug 2026 08:01:42 +0000
Files and hashes:         1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: 2XUx4AQnR6WsCMIOW1XNJhW2wkaO+X7hFGrylag5NYE=)
                          2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: hIbDeET3/by6fmctG3leWRRbgYMUPeaZ9EUswNqsz3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
        Validity
            Not Before: Jul 29 08:01:42 2026 GMT
            Not After : Aug  5 08:01:42 2026 GMT
        Subject: CN=6a69b366-d54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:29:67:9b:d2:ca:eb:da:bb:d4:63:d9:cf:
                    52:b9:58:61:de:17:06:80:af:6a:5e:82:56:83:58:
                    48:78:f7:54:c2:b6:55:ed:cf:72:35:3d:17:ad:5b:
                    32:da:08:1f:d8:72:0b:dc:c3:38:91:22:b1:7b:b1:
                    5d:3b:50:25:ab:53:e9:0e:5d:ad:66:d3:eb:6a:b3:
                    60:8a:d8:57:40:c7:fd:c4:db:f6:d2:35:b8:b5:79:
                    ed:b1:97:6c:50:0c:08:51:92:e7:bf:6a:37:38:72:
                    fe:0b:f4:0a:be:3e:36:62:33:a3:16:07:e1:38:10:
                    4f:10:50:3e:1e:88:3d:03:8f:0f:7d:92:22:f8:f8:
                    a7:c1:16:bd:35:95:fb:49:6e:a9:86:09:3c:a9:a4:
                    60:d5:02:42:ce:36:ee:a3:08:25:0f:88:cc:e8:bb:
                    63:35:83:44:44:d1:c9:bd:19:d8:c3:38:72:b8:76:
                    1e:02:8e:78:e1:50:ec:3a:a0:75:3b:61:e6:7e:c6:
                    f1:4d:e6:70:ea:59:2e:05:0f:69:5c:96:65:33:97:
                    55:c0:b6:d2:5c:71:35:62:d5:0d:be:7d:8f:da:29:
                    f1:dd:79:19:ae:38:23:84:5e:8a:7e:1c:08:6a:47:
                    cc:de:6a:66:52:c1:8f:f8:64:51:33:c9:09:95:b1:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:55:7D:2D:D7:93:07:8F:1E:BF:CF:38:EB:CA:87:09:DE:DF:FA
            X509v3 Authority Key Identifier:
                keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:ac:f8:85:c6:10:76:90:63:de:63:85:af:50:2e:d7:e5:
         c7:f1:99:9b:1e:80:39:2f:79:e0:05:e5:a8:e0:34:d8:57:c4:
         fc:cd:96:20:35:01:e2:c3:23:d1:8a:53:9a:1a:c9:ac:2f:ec:
         b3:22:ca:a8:7f:12:49:6f:c0:e5:bd:8b:42:7a:f1:55:c7:3e:
         ed:f1:34:10:af:e0:3c:e0:27:cd:b5:45:32:ca:57:5d:0b:1a:
         e3:f6:ba:b3:72:01:d6:f6:48:5d:c4:cd:3a:3f:0c:43:14:1d:
         8e:a8:e7:50:3b:26:3d:a8:d1:37:b6:b2:36:8c:62:d1:51:65:
         72:84:60:d5:2d:50:e0:e0:77:d8:26:14:8f:3f:4f:9e:9a:c5:
         14:5a:35:c9:1d:a4:0d:93:ea:dc:71:cc:05:92:be:3b:8c:31:
         8b:ca:d8:c6:05:cf:0b:a2:89:7f:66:db:bf:8c:4c:e3:05:ea:
         e0:48:bc:7e:61:61:12:5b:e1:c2:7d:a3:ce:b6:9f:35:24:b9:
         a8:0b:d5:fb:b2:84:b0:7a:78:e2:89:2f:af:a3:fd:a7:cf:ac:
         0e:12:7b:39:ed:e3:7f:6b:a7:78:7a:13:4f:e2:23:cb:04:73:
         62:9c:14:bf:26:a1:ea:4f:2c:31:46:52:8b:f4:fc:0b:ff:1c:
         b3:c9:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:12:39 2026 by rpki-client