Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
File:                     MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft (raw, json)
Hash identifier:          JOrlCBByiLOaUaYJx1fRnzMm8vYov/n3tFLKWnG4LgM=
Subject key identifier:   C9:A1:21:2F:4C:F5:46:AC:D2:CA:0B:E1:37:6B:34:04:17:C5:1C:D5
Authority key identifier: 32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76
Certificate issuer:       /CN=A91C1D71/serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
Manifest number:          26
Signing time:             Mon 27 Jul 2026 11:11:17 +0000
Manifest this update:     Mon 27 Jul 2026 11:11:17 +0000
Manifest next update:     Mon 03 Aug 2026 11:11:17 +0000
Files and hashes:         1: MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl (hash: F4f0+cdoKJL6K7zp4gsNLoGJXHSsBQF8KWw3cVCR7XM=)
                          2: FE3124A04E6A11F19EF4B4E9A9833773.roa (hash: 5G0WnfmhAWln0DoFaMqx4jKc4Si31Bq5mzX8fwHCaN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1D71, serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
        Validity
            Not Before: Jul 27 11:11:17 2026 GMT
            Not After : Aug  3 11:11:17 2026 GMT
        Subject: CN=6a673cd5-0895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:00:4c:52:e4:0e:98:fc:93:a1:48:b3:06:
                    d7:13:79:5e:7b:2b:8a:fa:ac:d3:0b:93:16:28:a6:
                    06:82:70:ec:12:22:ee:1a:62:59:56:c0:54:52:2b:
                    73:09:20:e9:5c:c0:cf:51:e5:b6:31:8a:0b:79:c8:
                    f1:a2:3d:0d:28:89:6f:74:21:a5:ab:2a:21:30:fa:
                    60:b9:f4:87:e6:10:bd:05:b2:c9:b9:b5:af:4c:73:
                    3b:fc:c8:29:86:ae:71:ee:ca:ad:26:0e:d8:9f:98:
                    79:41:23:87:cd:4b:b1:4e:db:7c:7e:06:da:62:d8:
                    24:6b:51:02:98:19:b2:3c:07:20:0e:b9:68:38:27:
                    72:4d:47:6e:e9:71:34:08:07:58:a1:f1:4c:f1:cd:
                    c4:73:0a:5d:d2:87:74:53:21:9d:d9:4f:94:d0:1f:
                    1d:4f:eb:56:81:fe:29:f0:cc:5f:4a:e1:10:b1:00:
                    f9:13:8e:49:1b:56:dc:55:24:f7:e3:16:7a:07:91:
                    01:37:2f:79:10:62:de:28:b0:85:fe:2d:90:6d:9d:
                    7a:c7:4a:32:97:e5:e7:af:af:c8:73:c5:70:c2:e3:
                    46:ac:67:69:74:2b:40:47:ac:08:1a:e8:2e:3a:b6:
                    a2:04:c2:cf:e8:ac:de:5f:c1:bd:2d:49:2f:09:53:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A1:21:2F:4C:F5:46:AC:D2:CA:0B:E1:37:6B:34:04:17:C5:1C:D5
            X509v3 Authority Key Identifier:
                keyid:32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:67:5b:da:2d:2c:63:52:37:1f:43:ea:db:c2:9f:8c:01:49:
         bd:71:4d:0c:3e:ad:3d:c8:5c:a0:6d:d3:81:14:99:59:cb:e5:
         e5:23:43:78:26:16:88:f3:a9:61:59:15:cb:35:f2:4e:a7:26:
         cc:da:11:15:2e:29:2b:6a:fd:d6:ec:d4:33:01:53:2b:6a:fc:
         3a:4b:8e:f5:a5:b1:e5:0e:f0:b9:08:8f:e1:bc:bb:c4:f0:b1:
         13:e2:fd:0e:fa:a4:89:be:cf:4b:a5:47:d5:c6:d6:58:d2:e8:
         1e:cd:37:58:fc:8e:11:12:9c:e7:e6:c0:6a:a5:65:93:40:65:
         a3:6e:fb:55:57:91:75:99:da:e8:f6:2b:51:53:7b:01:6a:ef:
         ad:de:e6:23:a1:2f:e4:3e:ee:3e:63:54:7e:d2:0c:e9:9c:0d:
         aa:bc:57:3e:f3:aa:7d:73:67:87:37:c6:ff:65:dd:cc:9b:cb:
         04:59:19:52:26:0e:12:3f:f3:d2:56:0c:29:3a:e3:dc:fc:8f:
         87:27:3f:d7:0c:b0:51:5c:ae:bd:88:93:2a:1c:63:bb:10:77:
         9d:9d:8e:bf:ef:c2:2a:32:81:60:b1:3e:4b:0e:ae:43:97:03:
         75:7f:a1:18:e1:51:74:bd:c8:c3:ba:0f:d1:a8:3d:5e:94:ec:
         e1:22:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:22 2026 by rpki-client