Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
File:                     AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json)
Hash identifier:          Y4TXG4mJPOX911SXT8FMwARMuv0IE0tpOhW6RPLZgXs=
Subject key identifier:   D6:14:64:E5:FC:7E:E2:C8:12:69:D3:92:90:63:FE:CB:EE:1C:8D:F6
Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
Certificate issuer:       /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Certificate serial:       0C87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
Manifest number:          0C5B
Signing time:             Sun 26 Jul 2026 19:04:32 +0000
Manifest this update:     Sun 26 Jul 2026 19:04:32 +0000
Manifest next update:     Sun 02 Aug 2026 19:04:32 +0000
Files and hashes:         1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: 2pHDDbf3o82Kq4XzEutNKnPNr8yZCUvhV9L0lJY3t/w=)
                          2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: EuY5ohXxwCb20yL/oZ+Bf40RR9HQ+u8RzxEp5n6p+No=)
                          3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: 7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3207 (0xc87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
        Validity
            Not Before: Jul 26 19:04:32 2026 GMT
            Not After : Aug  2 19:04:32 2026 GMT
        Subject: CN=6a665a40-daba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:b4:6f:34:81:92:a9:69:cb:ed:61:79:ae:
                    19:72:b2:3a:a9:9f:5c:a0:4c:14:ad:5a:c3:42:f8:
                    1c:9d:e4:3d:e7:80:45:df:c8:dd:fe:d4:e6:40:8d:
                    03:8c:71:58:5e:8e:92:d2:ae:d3:a3:82:67:e9:76:
                    3b:09:10:44:7c:70:39:ac:f2:b8:e7:ca:6f:07:40:
                    86:18:ec:9e:85:0b:1d:9a:ee:5e:0a:d4:6a:9e:35:
                    47:32:7d:62:2e:71:cb:cd:71:46:53:eb:61:7a:34:
                    d4:66:12:1c:13:dc:c8:ea:37:3e:ed:f0:eb:24:9b:
                    60:d3:62:ba:65:11:4a:57:00:fe:29:70:13:ac:cf:
                    a2:ab:60:03:0c:28:d1:3a:02:20:7a:5f:7a:54:28:
                    38:07:19:60:10:39:6b:fa:75:a9:05:e6:9e:7c:e0:
                    9b:50:03:75:ce:6c:29:63:00:8e:ca:98:9d:cc:54:
                    c7:3f:94:79:8e:34:a0:e5:5a:9e:0d:db:f5:97:24:
                    8e:06:bf:72:26:72:ec:25:38:14:ad:6a:1d:6f:1c:
                    89:0c:74:a4:70:fc:0f:ce:d0:dc:3d:8e:30:f2:64:
                    d1:b3:33:50:28:20:7a:8d:da:3a:65:53:20:9b:cc:
                    c4:13:cb:7b:39:ce:c6:9e:ec:fd:84:9b:46:b0:15:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:14:64:E5:FC:7E:E2:C8:12:69:D3:92:90:63:FE:CB:EE:1C:8D:F6
            X509v3 Authority Key Identifier:
                keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:26:d5:f0:d2:b2:d9:58:c0:c9:69:72:d8:8f:d0:d0:17:bc:
         b4:67:b2:e9:36:67:e0:73:2d:9c:40:4c:7c:4c:8e:64:88:bd:
         b5:70:af:22:6c:d3:bc:61:10:6c:7b:04:25:7c:85:ac:c7:22:
         0d:d6:3e:5c:68:89:3f:f9:ce:00:6a:0d:12:5e:17:6e:00:0c:
         24:67:fc:0e:43:b8:dc:d7:dd:d7:93:97:ee:a1:ab:3d:a9:73:
         08:3f:6f:fa:1a:a8:d0:0e:a9:a6:04:62:db:df:49:d0:a1:a0:
         ed:67:2d:43:56:b2:4b:07:bf:f2:b9:0a:14:81:70:0f:03:3d:
         89:6d:a7:c6:fb:fb:16:a3:dd:f4:a0:ab:f7:50:5c:63:48:ef:
         aa:a8:a5:f2:c0:e6:62:3c:3c:81:fb:4a:7c:f5:8c:d1:08:b1:
         38:96:6e:04:2f:c7:f1:20:26:d4:cb:96:05:90:75:62:80:fa:
         fa:03:cb:d1:fc:0d:65:6f:62:4b:9d:d1:54:40:52:bf:07:41:
         0e:97:86:bf:58:ea:62:95:ee:44:3b:b7:b5:e6:86:72:df:2d:
         0a:ea:e1:a3:9d:69:82:fe:f6:c3:4b:91:ac:64:d5:97:6c:bf:
         ec:86:54:59:52:b1:a4:ee:ab:da:ff:93:fe:92:41:73:a2:32:
         83:7d:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:32 2026 by rpki-client