Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File:                     b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier:          1bHMMEcZ04QMiVrXQILskIngMXrlMKiLuxREaBfp/e8=
Subject key identifier:   3D:79:81:ED:F8:10:A0:9E:67:15:30:B9:1A:3A:A9:71:A3:E1:A4:86
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer:       /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial:       0C18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number:          0C0C
Signing time:             Tue 28 Jul 2026 19:02:47 +0000
Manifest this update:     Tue 28 Jul 2026 19:02:47 +0000
Manifest next update:     Tue 04 Aug 2026 19:02:47 +0000
Files and hashes:         1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: O4ZDIuklk42loe5CNEgq0Sy6uF63w/99Z0R2APQRL9Y=)
                          2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: j3+FqbIbEZA5ldhomHT9hdMFU4oqErbqw6qxTyWi9S0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3096 (0xc18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
        Validity
            Not Before: Jul 28 19:02:47 2026 GMT
            Not After : Aug  4 19:02:47 2026 GMT
        Subject: CN=6a68fcd7-f907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:ce:ac:d5:f8:42:bf:99:34:d1:b0:bf:b5:
                    67:f3:54:67:1b:73:e7:f9:1d:1a:8d:53:c3:52:98:
                    b0:cd:e4:f4:96:9d:9d:f4:49:f9:83:1f:91:45:e8:
                    4b:de:3d:dd:0a:3d:21:e3:02:e1:c0:64:fe:7f:d3:
                    ac:11:c9:9c:1a:98:6f:05:da:4c:4f:34:dc:a8:e4:
                    d6:21:bb:b7:2d:45:3e:d7:ed:6f:82:2a:ea:8c:c5:
                    e9:f3:b6:40:a7:fe:13:53:1a:49:15:6e:f3:fb:7c:
                    fb:22:8c:dd:b3:56:94:a2:90:d6:b2:ba:71:66:4d:
                    ff:b6:2c:a8:87:c5:f8:cc:07:30:17:d8:2f:d5:51:
                    58:9f:05:20:05:a5:cd:b4:6a:81:dd:dd:21:eb:c7:
                    63:11:15:61:84:c1:a4:13:d3:a6:79:ae:d6:1a:f6:
                    4a:4a:2c:ee:45:88:14:8c:79:3a:82:52:9b:a5:39:
                    c6:a8:20:80:fb:74:95:0f:00:4e:cc:1d:47:b5:7a:
                    65:c0:d3:a2:79:20:7b:a8:c9:dd:92:bb:57:91:2c:
                    bf:fb:23:60:1e:b6:f7:94:fd:81:e9:d4:47:83:0b:
                    70:dd:a3:96:40:81:51:e1:47:93:1f:0d:c0:f3:be:
                    74:bb:9c:e4:9c:1c:19:af:59:03:49:2f:5d:8f:08:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:81:ED:F8:10:A0:9E:67:15:30:B9:1A:3A:A9:71:A3:E1:A4:86
            X509v3 Authority Key Identifier:
                keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:8b:00:99:71:5f:aa:77:4f:45:ea:8c:4c:9c:19:19:f5:45:
         7b:e8:c6:2b:dc:5f:29:64:1c:e3:0b:b3:6f:89:7d:60:d2:9f:
         9f:15:27:3c:52:df:a7:65:43:46:8a:76:b6:d2:4a:15:98:f3:
         cc:78:97:5d:df:a8:12:aa:1b:24:5a:6f:a6:ff:7b:18:de:aa:
         36:3d:6b:76:b1:05:47:41:ee:af:4a:39:1c:89:42:db:e0:77:
         00:ea:a2:61:18:12:35:51:8f:39:7e:00:94:43:aa:17:ee:b8:
         77:1a:74:dc:9f:f9:f9:4a:42:bf:82:33:2e:9d:41:ba:2f:e2:
         f3:e1:66:ea:67:13:e0:73:47:5b:92:58:13:6f:7f:4a:b3:86:
         6e:49:ea:19:89:2f:25:f1:4b:6a:ef:50:af:80:4f:13:5f:e0:
         a1:f4:d4:00:11:2c:4c:30:5a:21:9a:5c:6a:66:c1:6c:c1:f5:
         b6:78:18:08:79:c8:2d:7b:c0:35:dc:64:69:06:e4:57:d8:3b:
         7c:39:11:5b:9d:71:7d:ae:b3:bc:3e:73:89:7a:c9:c3:a4:ed:
         f7:dd:65:60:11:66:b8:32:49:56:f2:b0:fa:29:1c:da:6f:de:
         a5:af:b7:0b:47:80:77:70:fb:4a:70:ab:c1:e9:67:9c:4a:1b:
         cc:f3:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:22 2026 by rpki-client