Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft
File:                     nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json)
Hash identifier:          VFqd7qRTz7xz/5o9PQ37YrlvXRLiO4MrQJIQuqCIVmI=
Subject key identifier:   67:3B:75:C3:B6:87:15:98:D7:54:C8:A6:89:2F:26:5E:50:B4:11:66
Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC
Certificate issuer:       /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC
Certificate serial:       0493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft
Manifest number:          0489
Signing time:             Wed 29 Jul 2026 00:45:07 +0000
Manifest this update:     Wed 29 Jul 2026 00:45:07 +0000
Manifest next update:     Wed 05 Aug 2026 00:45:07 +0000
Files and hashes:         1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: NVcws3zES1Ihafg8Dn3ts7oPypcH1LrQ8UeDC/YZQEY=)
                          2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: rYqx35lsIFICuX9KuzfaD1pKBi3ls1Ig+KpAVd5GMMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl
                          rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC
        Validity
            Not Before: Jul 29 00:45:07 2026 GMT
            Not After : Aug  5 00:45:07 2026 GMT
        Subject: CN=6a694d13-ebe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:f3:85:d7:cf:8b:46:1f:4b:2a:44:35:08:
                    62:d5:64:29:ad:dd:d1:a1:02:cd:a7:ad:48:97:bb:
                    c9:38:ac:bb:bd:04:4f:eb:4c:6d:e0:73:d5:40:55:
                    5c:c9:44:f1:59:39:88:cb:cf:59:45:52:fa:d9:50:
                    5b:6f:49:47:48:0c:3c:34:b7:b9:32:d0:22:9f:9a:
                    ed:77:f2:70:45:96:90:67:b5:f7:7b:cf:16:08:30:
                    e4:ad:fa:ae:f6:27:ab:f6:b0:30:9d:dd:0c:21:23:
                    3a:e3:46:16:06:5d:fe:e9:ed:e0:19:d4:dd:60:c6:
                    51:fe:c7:97:97:3c:db:4d:eb:1c:26:39:a5:6c:bc:
                    3d:19:54:13:0b:5b:f8:fd:be:19:0d:5c:56:f5:66:
                    d2:41:19:fe:62:40:54:64:a4:1f:63:1c:6b:5b:02:
                    5e:be:ed:0f:90:10:86:eb:51:ed:f8:a9:be:6c:29:
                    b2:5d:2c:87:94:82:e5:3f:ab:db:30:d2:d2:ae:fc:
                    1a:e0:98:cc:ef:f6:db:ba:60:1f:64:9f:33:81:5a:
                    55:de:6a:a6:27:f5:3e:0b:ec:e2:cd:1e:da:94:9d:
                    03:e6:2b:5f:62:ff:81:f2:dc:e9:0a:85:c9:73:75:
                    7c:a5:25:d7:08:c5:76:f9:70:55:d4:32:be:49:bb:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3B:75:C3:B6:87:15:98:D7:54:C8:A6:89:2F:26:5E:50:B4:11:66
            X509v3 Authority Key Identifier:
                keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:e4:3f:9c:b3:7a:45:47:a4:f5:c2:a0:9f:e5:aa:44:4c:
         c7:9e:92:6a:bc:8e:0b:2e:fe:35:c5:9d:62:9c:81:8b:05:f8:
         9b:eb:3c:18:8e:31:a4:e4:9d:45:0b:aa:66:53:d7:db:91:9d:
         1a:92:d0:c9:e8:65:29:4e:25:f0:41:c8:c1:a9:d2:af:99:e2:
         b8:c7:9d:79:d9:0d:0a:e9:d4:71:6d:35:df:be:bc:a4:dd:77:
         d0:04:9c:1c:df:39:68:ab:c7:4a:b5:d7:95:93:55:09:ae:67:
         37:86:37:84:68:64:41:20:19:cd:71:a6:50:18:83:ee:22:6d:
         5a:93:fe:ec:8e:45:47:90:31:8b:46:0d:c1:f2:cf:9a:10:88:
         c9:ee:8a:ee:80:ef:16:9e:da:cc:a5:07:3c:46:a9:80:3f:9a:
         08:34:a1:60:bc:10:3d:27:9a:94:b6:8e:e2:ab:aa:c7:21:46:
         36:17:32:e1:cd:de:4b:ae:3d:59:33:08:35:b0:a5:17:16:af:
         c9:af:92:c1:c6:07:cf:3c:c8:6e:9a:88:3d:9e:76:7c:c8:1d:
         c1:1f:86:0c:65:30:3d:51:94:e9:c0:80:db:73:b4:8a:63:89:
         21:8a:fe:26:87:23:31:95:08:9c:2d:19:2f:7f:e7:82:2f:82:
         3a:66:1f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:12:04 2026 by rpki-client