Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File:                     9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier:          IefMTzLzyZ/O8egO8nehxJgHmp3Ab8p8Q8TE6N2Prsc=
Subject key identifier:   D8:91:36:38:F9:2B:1D:4C:59:C9:98:0B:80:4B:D0:C3:6D:11:A8:C8
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer:       /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial:       041D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number:          0416
Signing time:             Mon 27 Jul 2026 01:24:48 +0000
Manifest this update:     Mon 27 Jul 2026 01:24:47 +0000
Manifest next update:     Mon 03 Aug 2026 01:24:47 +0000
Files and hashes:         1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: JqlPoo2rvDyFGFJPwKenPgbSKdf12AwmTvX/ZxmA5Yw=)
                          2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: acpBj/fZ/lNO+jE72RL9W85WiLHEc7BOknabYLCBTPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
                          rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
        Validity
            Not Before: Jul 27 01:24:47 2026 GMT
            Not After : Aug  3 01:24:47 2026 GMT
        Subject: CN=6a66b360-c242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:23:59:48:21:52:22:73:38:49:01:ac:22:24:
                    eb:fe:45:87:e0:6e:a2:28:6f:a7:86:a1:7d:9d:18:
                    43:b6:23:3f:7a:5a:ca:53:94:81:66:6d:9a:f9:ce:
                    82:31:9b:40:a5:6e:78:fb:48:93:cf:17:c0:da:5f:
                    22:96:c6:80:2a:72:cb:ae:ab:f0:e2:06:68:cb:8b:
                    4e:1b:39:8e:6b:21:ff:59:c2:0e:2f:23:3e:75:60:
                    02:34:9b:6e:36:b7:38:cf:2b:5c:81:bb:eb:a5:ec:
                    91:aa:2b:92:90:24:6e:80:42:fe:b6:2c:45:8e:52:
                    d4:ed:37:27:1a:10:35:37:45:50:b9:a8:9e:a4:f8:
                    87:35:e6:20:5c:bf:cb:91:91:35:74:53:fa:be:dd:
                    1d:31:b1:83:88:fa:97:68:2d:2c:ca:71:55:33:dc:
                    42:0a:01:32:73:20:f4:79:c8:26:15:25:1c:48:99:
                    cd:3f:88:74:6f:ec:44:96:46:91:3d:4c:2e:8c:bc:
                    c0:04:b1:9a:f7:d7:a4:01:6a:75:0f:df:68:dd:b5:
                    50:13:86:1e:0a:de:34:62:b5:25:e0:18:e9:cc:55:
                    d6:c6:81:b0:8b:de:1c:a4:10:0a:44:7c:7f:33:03:
                    a7:01:99:fd:89:aa:bb:9e:d9:b6:9f:60:35:f6:f5:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:91:36:38:F9:2B:1D:4C:59:C9:98:0B:80:4B:D0:C3:6D:11:A8:C8
            X509v3 Authority Key Identifier:
                keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:a3:ed:ad:83:d1:1e:72:db:ea:1a:d1:5d:72:75:c5:62:
         a0:26:e6:24:e9:71:6c:c5:7d:7e:c3:c5:c8:bf:e6:e7:c8:94:
         62:84:d6:49:0f:08:4b:fd:2a:5e:99:41:e4:07:18:1a:97:25:
         a8:13:ac:79:b1:45:1a:6b:36:ce:27:ff:fa:59:b9:c6:89:fe:
         58:7c:b2:df:88:c0:50:1e:00:6c:9a:c8:26:88:fc:ff:aa:6a:
         19:18:ee:c1:07:bd:cc:39:f4:8a:d1:06:35:d3:43:89:11:c1:
         2b:7e:75:40:04:02:17:48:ec:c9:44:7f:93:ab:14:9e:48:d8:
         77:d6:8e:9a:f1:c6:7e:e1:53:e9:00:67:df:59:78:00:74:e0:
         df:7d:32:ec:c0:87:78:79:6c:1b:38:28:ff:ea:51:98:7d:95:
         d5:45:16:c7:cd:0a:45:66:dd:7a:63:2d:bd:44:a2:2c:86:7c:
         dd:5e:dd:85:ba:a2:b7:67:20:cf:3d:1e:e7:b7:1d:b2:f8:04:
         30:5e:94:eb:f4:f4:32:95:12:85:e9:46:09:a4:76:e4:f2:d9:
         36:46:bc:2c:84:1b:82:a9:fd:cd:73:da:c9:66:78:24:de:d5:
         e5:2a:88:ac:81:39:9c:a3:e0:5c:fa:61:d2:27:06:72:bb:a8:
         01:9e:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:28:49 2026 by rpki-client