Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
File:                     4Y-ehXQ6vsrARiuP30On20pij_k.mft (raw, json)
Hash identifier:          759YtsFWiMKsaiofTSzmt4GEJpjpbgXC/e+/1FYq83U=
Subject key identifier:   15:3F:25:90:87:A1:71:40:8A:DF:CF:3D:5E:30:80:5F:60:D3:19:49
Authority key identifier: E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
Certificate issuer:       /CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Certificate serial:       04C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
Manifest number:          05D4
Signing time:             Mon 27 Jul 2026 00:54:04 +0000
Manifest this update:     Mon 27 Jul 2026 00:54:03 +0000
Manifest next update:     Mon 03 Aug 2026 00:54:03 +0000
Files and hashes:         1: 4Y-ehXQ6vsrARiuP30On20pij_k.crl (hash: WCYLZCvv7OaLRTdsKYvj/IhujCNdtgZLa9qvJM8zOYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl
                          rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9A8D, serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
        Validity
            Not Before: Jul 27 00:54:03 2026 GMT
            Not After : Aug  3 00:54:03 2026 GMT
        Subject: CN=6a66ac2b-3099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:ad:3e:14:86:16:61:16:ce:ff:3f:49:48:
                    e5:bb:a5:d2:78:0e:05:67:e6:f4:a3:fe:37:ad:ef:
                    12:b6:02:2f:ea:55:cd:88:26:91:17:d9:fa:11:5c:
                    5a:8d:57:c8:76:f0:24:d2:be:85:e5:15:e5:ca:ba:
                    d0:ca:cf:a3:93:ca:1b:79:1d:73:60:ea:a4:86:37:
                    47:18:ca:fa:c1:9e:20:5d:4c:f9:30:ce:eb:a9:5b:
                    19:df:d1:d0:6e:f4:cc:0f:77:c2:d0:92:8f:48:81:
                    fd:55:aa:5f:44:9c:3a:e8:49:77:f6:6b:5a:f8:da:
                    8a:53:ed:f3:d1:7b:45:a4:24:ae:28:5a:e5:d1:b1:
                    98:33:85:e2:dd:ff:8d:7e:28:af:d2:9d:ca:9b:cf:
                    91:10:aa:07:0e:41:5e:8a:e9:f9:f5:36:c0:8d:21:
                    fe:8c:34:21:1d:4d:8e:ee:b5:aa:89:b7:c3:65:66:
                    54:d9:d2:0b:ca:fc:63:7a:37:22:25:73:6d:83:3b:
                    2b:d0:5b:ec:3b:fd:41:b3:f4:f8:2b:ed:5a:ed:5c:
                    22:18:a7:ae:7e:5c:fa:69:0b:eb:b5:06:8c:12:0f:
                    2f:40:27:ae:a3:6d:fe:7b:17:5b:16:56:a1:ec:34:
                    37:36:f9:30:a4:79:2a:c1:a3:43:85:49:c5:d9:bb:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3F:25:90:87:A1:71:40:8A:DF:CF:3D:5E:30:80:5F:60:D3:19:49
            X509v3 Authority Key Identifier:
                keyid:E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7f:ee:e4:0d:29:00:a4:ff:f3:b2:42:84:05:a3:66:e1:06:
         07:a3:74:ac:68:e7:aa:f0:f7:9e:99:5d:19:57:05:35:49:c0:
         32:77:90:ff:e3:a7:19:7a:6a:60:b9:00:87:83:49:45:4f:e8:
         29:15:4a:6d:0b:2d:81:82:86:e6:7e:de:b1:20:0e:9d:ad:fb:
         b3:d7:cd:77:6b:7f:25:db:cc:91:8b:a2:25:18:e5:d8:42:e6:
         af:99:b2:d3:53:cd:e0:c5:68:9b:88:20:b7:14:2c:57:3d:d7:
         8c:a2:71:9c:ad:32:c2:a2:2e:9b:8f:11:f7:aa:c1:91:1f:16:
         f4:b9:7e:bd:6b:ac:b3:b2:af:06:eb:83:f9:78:ff:a3:e7:bc:
         45:aa:c9:e6:de:68:e8:46:5f:99:0c:b2:a4:c0:84:96:b5:13:
         17:9c:2f:ff:05:f5:9a:0b:7d:87:d3:a0:73:0a:22:b0:6a:5b:
         da:1c:93:a1:01:a8:95:e2:0e:00:cb:04:a2:13:73:c5:b2:4f:
         1c:1d:3f:ba:25:cd:88:28:94:72:e0:c2:61:3e:58:2c:e5:2c:
         e8:c6:5a:10:73:d8:0f:fd:1f:68:66:a9:0e:0d:57:22:de:5a:
         45:da:c4:cb:6e:48:4d:7d:ed:2d:06:33:88:aa:e0:e8:13:66:
         96:aa:06:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:38 2026 by rpki-client