Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File:                     72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier:          zeOZWoNBfuLk2KaFe30in8LGfYPXA475J1VjMo8+b+Q=
Subject key identifier:   D1:E6:68:2E:58:30:DF:5B:D2:81:B3:A2:D1:EB:3F:9D:06:3D:F3:D4
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       1378
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number:          1349
Signing time:             Tue 28 Jul 2026 17:05:34 +0000
Manifest this update:     Tue 28 Jul 2026 17:05:34 +0000
Manifest next update:     Tue 04 Aug 2026 17:05:34 +0000
Files and hashes:         1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: 8RudmqU/79o9e6fYzHaNdE057dumf8h3xJNEB/z4mGA=)
                          2: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: qPTI/BGOaPiA+Ijb2fpDa3jM09PINNTUUy/wyXi8Tlc=)
                          3: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: mfo6BYkWVfZpnu+glUHzyovdLshNnH3m/MtZdby+qOY=)
                          4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: W3z7Z3gndKKyVqbzLQ8UmizWLHqqgUTLcWOrGVdfX2g=)
                          5: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: 7EPo/flJodzTo6ZQPpsGfoF7ns5UVMsBGxpdCAuapx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4984 (0x1378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: Jul 28 17:05:34 2026 GMT
            Not After : Aug  4 17:05:34 2026 GMT
        Subject: CN=6a68e15e-f8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:4c:d7:6e:b4:4c:4e:f1:b9:b7:ec:80:82:
                    ef:7f:66:34:93:77:6f:2b:7e:db:ef:e5:7e:1c:38:
                    32:c1:1f:b6:b3:59:92:d1:07:6b:a4:e1:45:ee:76:
                    42:34:69:6a:d7:da:6b:14:1b:6a:dc:31:ef:c8:af:
                    70:39:f9:2d:36:fd:9e:0a:f2:10:91:4d:a8:c1:ed:
                    b9:c8:cc:d3:e6:d4:f3:36:0f:d1:2e:2e:4f:11:6b:
                    91:57:01:a1:e2:9b:e7:c6:4d:59:84:2c:02:d9:ac:
                    d9:f5:30:1f:77:e0:28:40:de:66:c8:6f:3b:6c:37:
                    0a:f9:7f:33:ff:6b:6c:67:e0:83:65:8f:06:82:41:
                    64:29:9e:c4:91:06:5f:99:00:47:08:8d:c4:4c:2d:
                    3f:e5:c7:9c:97:1d:9f:57:5e:fb:f5:78:ea:40:29:
                    19:aa:39:ac:7e:e6:88:d5:9e:dc:27:9e:5e:d3:f7:
                    00:c2:02:9f:87:2d:22:9a:00:cf:f5:4b:66:02:37:
                    35:ed:c5:33:7d:32:4c:f1:96:c1:3d:19:ca:3d:78:
                    cd:a1:a6:96:9c:5a:3b:f1:64:d7:4d:76:7f:fc:32:
                    a8:65:4b:36:e5:8f:e9:da:dd:b8:59:be:f9:a9:22:
                    66:50:a5:55:4f:6f:f5:68:be:3d:23:e1:73:d3:10:
                    28:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E6:68:2E:58:30:DF:5B:D2:81:B3:A2:D1:EB:3F:9D:06:3D:F3:D4
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:57:f4:57:c3:e1:b6:02:70:2e:82:f2:45:05:f2:72:cd:
         6c:e5:d7:c8:3a:c3:c7:de:fd:1f:65:43:a8:1b:7c:7b:d4:04:
         61:db:ac:a0:fc:e7:a4:37:8c:2e:b1:0e:14:1f:c6:ef:3c:1b:
         7a:fd:d4:ab:7e:9d:6f:23:21:43:f2:3d:1b:94:31:d4:b5:f0:
         63:de:32:02:af:da:d5:78:e5:5a:8b:98:4e:da:39:a2:d9:4f:
         7a:46:02:86:f3:32:39:3b:e7:79:24:80:b8:35:6f:1c:ce:55:
         7e:77:ad:90:51:25:5a:d2:dc:ab:bf:f8:a5:e2:ff:83:c6:a6:
         7a:c2:60:07:20:79:7b:9a:7d:33:2b:e5:a9:1b:1f:01:69:e0:
         56:45:d7:d3:30:38:5e:8c:74:5f:22:0b:d2:63:b6:3e:be:8b:
         37:98:a7:14:d3:1a:3e:13:dd:dd:07:22:a8:6f:11:0d:d1:6e:
         f8:03:bd:b3:66:f4:52:2e:1d:a0:e5:79:55:66:16:96:be:6e:
         67:4f:6c:ae:37:d2:e2:27:1c:cd:82:cd:53:1c:93:89:bf:28:
         ee:90:5c:6e:06:0a:82:97:7d:86:27:c8:74:05:7f:08:86:3e:
         10:ef:0e:cd:f1:c5:3f:0e:eb:d0:1f:f2:aa:bb:f4:08:29:1d:
         7c:92:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:21:34 2026 by rpki-client