Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
File:                     4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json)
Hash identifier:          IIbLxKGZUJmb1LyqgnwuWzly8xucziQoRl4ymhasN7g=
Subject key identifier:   1D:FD:A4:26:3E:2A:12:A8:75:CD:74:E8:DF:71:EB:16:43:B7:79:2A
Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
Certificate issuer:       /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Certificate serial:       024C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
Manifest number:          0232
Signing time:             Mon 27 Jul 2026 04:11:04 +0000
Manifest this update:     Mon 27 Jul 2026 04:11:04 +0000
Manifest next update:     Mon 03 Aug 2026 04:11:04 +0000
Files and hashes:         1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: C/QcnKlDODzBsokI3PJbwCaog1jvN1do0vfrKQ0qlD0=)
                          2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: G4c9qIHjh7jRuzT8uRtPVyKbehGwTJD3pzh2RMSA5FQ=)
                          3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=)
                          4: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: +ktnd6zho24yZwUVIDb8JpM0wNDX8OLmDRgr8JefA9c=)
                          5: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: /Ca02zsxpAL8gcjil39VFFafzNLGZS+o8ZdBBpzgYJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
                          rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
        Validity
            Not Before: Jul 27 04:11:04 2026 GMT
            Not After : Aug  3 04:11:04 2026 GMT
        Subject: CN=6a66da58-d0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:e5:04:15:83:15:2d:17:1d:cb:ec:01:ce:
                    08:84:bf:f8:ff:b0:c8:d6:ca:52:e0:da:bc:5b:27:
                    16:83:71:1a:c2:6d:e9:79:27:f4:af:a6:0d:9d:15:
                    6a:c4:e8:8e:22:dc:49:9f:46:1f:69:0e:29:fa:a1:
                    2d:3b:23:d7:67:97:37:da:9a:5c:de:bc:68:a3:41:
                    1c:cc:dc:0b:5f:5c:99:d0:ab:5a:dd:07:fc:51:8c:
                    8c:ec:98:e6:98:27:3d:a1:0c:75:13:d1:55:ed:97:
                    0b:3d:af:c4:ff:e5:ea:ce:0c:4e:82:c2:ad:b8:ca:
                    77:4f:6e:47:b9:fd:ca:37:51:65:e0:4a:d8:35:46:
                    f1:e7:5a:80:ea:56:0f:c4:7d:9a:15:05:43:ca:c0:
                    1d:eb:1a:c8:e4:51:4d:26:94:50:90:54:4e:52:c1:
                    0f:3d:4c:33:8e:5e:37:7b:54:68:66:6b:ee:48:f2:
                    ca:3b:6c:aa:53:7b:89:cf:0d:7b:4f:ae:53:7a:88:
                    5c:e1:59:40:ca:1a:8a:da:7e:bf:1e:00:73:8d:fd:
                    2c:a7:df:3f:dd:47:3f:c9:a7:08:ca:42:9a:0b:dd:
                    f5:0f:b0:97:d3:8e:10:88:32:ca:19:73:c6:7e:49:
                    7a:2b:60:92:fe:20:ef:3a:5b:5d:a0:4f:fb:f1:54:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FD:A4:26:3E:2A:12:A8:75:CD:74:E8:DF:71:EB:16:43:B7:79:2A
            X509v3 Authority Key Identifier:
                keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:46:57:1d:49:7f:9f:24:a8:ad:c4:57:14:91:58:55:37:
         61:9f:11:4a:30:49:e9:33:43:0a:c8:e5:47:d0:55:ae:4d:2b:
         8e:f2:7b:95:2e:68:99:5e:12:c0:f7:dd:4f:15:e3:f4:3c:0f:
         8e:58:7c:51:2a:a0:84:51:40:15:de:3b:17:14:b6:fb:9c:4f:
         f8:ce:7e:d2:23:bc:b9:95:d8:49:a4:7d:b9:a6:77:2a:cc:51:
         8a:bb:bf:b0:94:18:48:1a:90:12:c8:4d:5d:df:ff:f2:44:6f:
         7d:5c:5b:c1:26:65:80:b6:41:ad:9f:ff:38:f3:37:a4:4d:a5:
         30:0a:59:b5:59:02:d9:36:36:fd:29:ef:19:84:83:96:61:18:
         a0:a6:fb:dd:85:44:75:fb:97:16:65:01:90:a9:c9:fd:67:5e:
         5e:c7:e1:35:fd:25:07:5e:1a:2d:fa:5c:fa:b2:26:36:ce:63:
         09:d7:ea:e7:c7:7c:55:ac:43:9e:e5:45:90:e1:b7:d7:dd:b5:
         ff:4f:e8:7b:12:9c:19:35:32:81:f2:77:b5:47:3f:c6:74:22:
         ac:1b:0d:b6:6f:f0:48:e1:6a:fd:c3:f0:fb:ff:bc:99:ca:6a:
         ec:34:d2:50:1a:62:0f:b0:9d:57:6b:8c:29:62:13:8a:bf:20:
         82:4d:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:09 2026 by rpki-client