Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
File:                     0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json)
Hash identifier:          Rw/PJcuNdIaHjBYDBBHasjUyx/p5gBU/7RABPOETZ2o=
Subject key identifier:   FA:79:D9:BE:C1:B4:71:D0:2A:9A:44:31:07:BB:FC:E4:4C:6E:8D:64
Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7
Certificate issuer:       /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
Manifest number:          05F1
Signing time:             Sun 26 Jul 2026 23:49:14 +0000
Manifest this update:     Sun 26 Jul 2026 23:49:13 +0000
Manifest next update:     Sun 02 Aug 2026 23:49:13 +0000
Files and hashes:         1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: OCFAHze2PcZO4vK+We6Ji+tSPU9/sKXsBzg7u1oMih4=)
                          2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: n3COBaPKKrvr/uYmveuWkBO4Ag5aH+qxiVkH2APkXhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
        Validity
            Not Before: Jul 26 23:49:13 2026 GMT
            Not After : Aug  2 23:49:13 2026 GMT
        Subject: CN=6a669cf9-caec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:ec:2b:d1:b4:88:28:cb:22:13:a9:2b:c2:
                    2c:3c:a5:29:94:28:34:94:a6:84:3a:76:0d:55:e0:
                    0c:bf:22:cf:85:bd:74:89:ad:c4:0f:fd:a2:11:0c:
                    1f:32:9e:2f:f9:00:9a:6a:80:c3:84:3a:34:2a:7e:
                    b6:6a:e2:ea:7c:e3:d9:87:ff:8e:ab:54:3d:5b:64:
                    60:6b:c7:41:bd:60:73:c8:eb:7b:b8:67:26:af:1c:
                    64:eb:6c:85:e6:49:49:13:14:6c:7b:67:ba:ec:12:
                    2e:fb:a6:81:89:72:cf:f9:09:a5:dc:07:78:1a:b9:
                    d0:7c:27:e7:b9:f5:91:f6:c6:64:56:2b:ed:48:6e:
                    26:fd:e5:0d:d0:57:61:f3:a5:f8:72:79:94:cc:eb:
                    81:36:b0:28:c4:05:5f:c5:29:57:32:97:16:3a:5b:
                    8f:3a:5c:f3:e1:5a:c1:0a:e2:02:b1:8d:0b:3f:25:
                    ae:95:e8:e6:5a:90:d6:72:f2:ff:68:0d:7e:64:aa:
                    e7:33:c3:e0:d2:71:f2:b5:34:a3:e0:05:51:87:c9:
                    50:d4:31:3b:20:6e:ad:ff:d0:1b:72:88:de:28:58:
                    78:73:23:8a:a5:1b:a7:88:aa:4f:e1:3d:2d:03:0e:
                    18:36:b0:53:52:15:ce:f0:66:20:12:cd:76:d4:28:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:79:D9:BE:C1:B4:71:D0:2A:9A:44:31:07:BB:FC:E4:4C:6E:8D:64
            X509v3 Authority Key Identifier:
                keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:68:2b:97:ab:10:a9:d8:92:ca:b4:c8:81:82:6d:65:04:0d:
         2e:b8:71:4e:6a:66:bd:d0:6f:80:4f:d4:c8:16:8e:0f:b1:71:
         85:e6:5b:14:b8:46:4f:27:ca:83:cb:ae:c6:ab:8a:91:b6:b4:
         37:7d:19:86:4e:87:18:c8:00:ab:a8:c4:b5:58:85:7b:37:2c:
         35:33:4a:e6:69:f1:27:19:f6:34:0d:a5:db:ff:10:44:ab:14:
         4b:3d:85:b2:c4:34:8c:a3:3f:01:5a:b2:7c:b2:33:bb:f8:57:
         b2:a9:fc:82:c0:a9:b3:58:1b:d7:ab:61:c4:fb:3e:f9:7d:30:
         67:69:d0:70:0d:ed:bc:e4:c5:a2:d0:3f:18:ec:8e:02:f6:40:
         63:7c:07:bb:4f:7c:21:c4:a8:2b:45:8c:9c:db:a7:14:fd:83:
         2c:e5:92:c0:64:9b:8e:21:1b:65:7c:ac:c1:63:45:53:12:25:
         c4:59:e3:51:63:0d:3b:a2:32:b7:f0:60:a8:fd:dd:6b:a9:c8:
         61:f1:11:1a:53:40:72:46:34:95:ce:42:f4:22:3d:c6:ce:29:
         7d:7c:45:b1:67:e8:2b:c4:85:81:22:32:e2:af:01:71:2d:7e:
         bc:70:c1:fa:7d:0b:92:1d:d4:b5:fd:53:2c:eb:09:79:db:b6:
         d0:39:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:08 2026 by rpki-client