Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
File:                     8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json)
Hash identifier:          ptSI60t8CsXD1jxnMsOoP/xRKyqSwZc4kyNe/PTCEfg=
Subject key identifier:   C0:51:4D:0B:90:12:AE:A5:7F:19:E4:26:75:76:67:B1:4B:48:7A:76
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Certificate issuer:       /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial:       0B36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
Manifest number:          0B2C
Signing time:             Tue 28 Jul 2026 19:34:01 +0000
Manifest this update:     Tue 28 Jul 2026 19:34:01 +0000
Manifest next update:     Tue 04 Aug 2026 19:34:01 +0000
Files and hashes:         1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: /jP0Bj2CB4nAUgJMKDXE/e4CxTf5XUxpitUoo2/AasE=)
                          2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: yAFGrO2x35rGErp9E92zZSEZN27Ua7PNYL2jUO6uhv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
        Validity
            Not Before: Jul 28 19:34:01 2026 GMT
            Not After : Aug  4 19:34:01 2026 GMT
        Subject: CN=6a690429-8954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:52:ea:8d:3f:1d:20:55:01:77:98:a4:80:
                    03:e2:a5:bb:a6:2a:b6:2e:69:59:9c:41:a2:d6:64:
                    0c:1b:fc:1f:9a:ad:9b:1d:56:86:c4:12:bf:8f:44:
                    a4:e8:0a:35:78:b7:ca:c9:7f:91:69:34:00:ee:a4:
                    47:67:5d:78:a0:74:3d:08:d1:f2:6c:63:a3:04:6a:
                    a8:5a:57:c9:af:df:fa:63:84:89:33:d0:a8:c2:93:
                    ea:ad:6f:48:5b:3a:3e:39:dc:bd:80:43:4e:a8:71:
                    0a:96:43:ce:44:6b:8f:47:cd:77:92:ec:39:21:d2:
                    b6:60:fb:32:68:59:d6:7b:c2:75:67:5f:ed:ca:62:
                    43:a2:2d:53:ed:a7:77:cf:94:cc:e7:7a:2b:93:f5:
                    d6:95:db:e2:ea:c9:ea:db:7a:ab:dc:6e:06:1f:26:
                    0f:ed:f5:ab:9d:1e:f9:92:66:01:21:07:85:e7:93:
                    ea:64:c1:d4:45:36:94:97:c5:19:c0:38:52:ce:ed:
                    d6:b9:19:a7:f9:a0:f5:8d:b0:79:fb:0d:40:d7:ca:
                    d3:bf:90:a1:d8:ae:65:27:2a:91:6f:cd:69:9b:10:
                    38:76:61:41:71:1a:83:23:a8:0f:85:4a:c9:22:41:
                    97:58:ed:95:c0:a0:92:c5:ec:4d:f2:19:fd:12:43:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:51:4D:0B:90:12:AE:A5:7F:19:E4:26:75:76:67:B1:4B:48:7A:76
            X509v3 Authority Key Identifier:
                keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:07:2e:28:9c:8b:d9:5d:7c:1b:97:b6:31:a4:2c:52:21:38:
         5b:21:14:86:c4:73:07:8b:16:da:bf:12:ec:df:96:cd:1c:c2:
         7c:d9:fa:f6:ac:da:8f:da:cc:a2:58:11:67:10:02:64:e3:1a:
         80:0d:bb:a2:41:8b:ee:30:ea:6c:93:8a:09:1d:d4:5a:dd:2c:
         23:d7:a9:a9:58:02:3c:1a:75:10:bb:21:a0:5c:47:5a:a5:49:
         da:e6:10:d7:13:c8:fb:1d:6f:f5:2d:2c:08:9e:5e:51:79:64:
         47:08:7b:97:bb:52:7f:e0:8d:56:a9:2f:e7:2c:f9:ae:86:58:
         3a:48:24:eb:01:20:3d:0e:05:73:6e:d7:cc:36:ee:10:ce:c5:
         19:ce:85:6c:f7:e7:b3:ab:7f:a0:26:ad:c7:b7:e1:39:82:1c:
         ca:39:77:48:24:5d:a9:5f:59:13:e9:be:ee:3a:71:ce:55:bb:
         b4:92:9e:56:6f:2e:94:3d:4f:dc:43:81:e8:92:a6:3f:c2:dc:
         ea:15:a3:c9:47:76:56:65:66:30:f5:96:c1:4b:7f:d6:3a:d9:
         d9:d8:80:75:b7:c1:7e:9c:5f:2a:48:09:45:1c:12:59:a1:68:
         b0:58:cd:f1:ed:3e:72:7d:c5:ce:49:47:27:9f:45:1f:4a:4b:
         21:b0:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:39:50 2026 by rpki-client