Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
File:                     pVDumUQoL8_DhLCCv_qI-G2wQXk.mft (raw, json)
Hash identifier:          /W2HNwMjP5LUT6Wfj6NvPWlHjAvKC2N82+RDJMpbvwE=
Subject key identifier:   6D:EC:21:CA:F7:03:50:D9:92:60:BF:72:4C:BA:C9:5F:EC:A6:BA:07
Authority key identifier: A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79
Certificate issuer:       /CN=A91CD5B5/serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
Certificate serial:       0256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
Manifest number:          0249
Signing time:             Mon 27 Jul 2026 03:57:17 +0000
Manifest this update:     Mon 27 Jul 2026 03:57:16 +0000
Manifest next update:     Mon 03 Aug 2026 03:57:16 +0000
Files and hashes:         1: pVDumUQoL8_DhLCCv_qI-G2wQXk.crl (hash: ukfw6O8cFJ+tKkfyvRfsnyObZj2zPx2yfTJq5crccy8=)
                          2: 935947E8234B11F0B6DF721FC4F9AE02.roa (hash: K1/zbDRlaAi+AKeOd0+7gn3zZkekzyJbfVU01DH+vKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl
                          rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD5B5, serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
        Validity
            Not Before: Jul 27 03:57:16 2026 GMT
            Not After : Aug  3 03:57:16 2026 GMT
        Subject: CN=6a66d71c-622d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:90:b1:93:b0:41:b9:f2:5c:18:4f:d8:08:39:
                    e7:f3:b9:a1:f4:7d:57:1c:10:e8:a9:f9:e7:dd:f8:
                    12:8a:8e:fb:86:38:99:b4:39:d1:78:47:d9:af:33:
                    99:d6:2d:bc:50:4a:5e:b6:a3:8a:a6:fa:d2:f8:54:
                    ef:6d:a0:91:29:2e:f1:8f:ae:b0:9c:83:ab:ad:f2:
                    37:ef:15:8d:c8:7a:40:8b:49:04:1e:25:e9:c5:2f:
                    34:fa:5f:1c:93:04:41:0d:a1:d2:ef:19:3a:c8:94:
                    22:33:97:38:54:f7:2c:ab:ee:ff:ad:70:5d:7b:e0:
                    18:fb:22:0a:35:67:b2:2d:28:53:be:ab:21:83:9e:
                    76:79:21:99:de:d2:69:71:9e:8d:4c:ad:d6:34:9f:
                    cf:ac:82:f2:77:2a:b1:7d:dc:d7:b4:5c:ab:40:3d:
                    d1:4f:61:a2:a7:2e:16:06:14:02:26:62:c6:19:22:
                    5f:57:b8:4e:e6:45:24:a2:05:9e:60:b2:44:70:b2:
                    a8:8f:d0:b0:41:99:29:70:08:de:f1:3f:0a:af:6f:
                    15:33:f4:af:aa:26:67:f6:31:a1:3c:eb:cd:98:ba:
                    fb:a6:16:66:34:5a:ec:8f:98:53:91:d0:56:53:a0:
                    26:75:c1:04:44:b1:f0:d0:2b:8a:66:51:89:96:ed:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EC:21:CA:F7:03:50:D9:92:60:BF:72:4C:BA:C9:5F:EC:A6:BA:07
            X509v3 Authority Key Identifier:
                keyid:A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:91:61:eb:36:58:74:ba:48:c0:60:97:41:da:1b:1b:b9:47:
         c2:5a:be:5a:49:03:ba:b2:bf:8e:87:9d:78:2b:26:cf:8e:d7:
         52:f4:46:5a:ac:f3:88:fa:90:dc:62:30:94:ed:f8:0b:35:10:
         3a:8c:71:b0:4c:7a:ff:69:a8:91:38:84:00:3c:5b:19:62:47:
         be:97:c6:13:43:44:5f:ea:9b:0a:7d:3b:d9:e0:b0:c7:cd:38:
         e1:c8:35:cf:d5:49:bd:f9:99:15:50:0c:c8:18:6a:43:e4:dc:
         8b:56:ab:40:64:4a:65:72:29:2c:19:b4:f1:df:3f:3d:4e:9c:
         72:eb:88:c0:30:67:d8:87:c3:f9:8f:f7:85:fe:84:81:71:1d:
         97:26:b0:88:01:29:84:44:a9:ee:f6:8f:6e:68:a9:89:3f:6b:
         df:c0:52:b2:d0:da:48:d7:a8:65:c0:05:a3:73:27:df:9d:d1:
         77:13:a7:b4:e5:d9:24:a1:b8:ae:ba:8f:cf:ee:c6:6d:92:b6:
         0a:8c:ab:77:bf:69:23:48:72:0a:3a:de:b9:5e:c7:7d:c1:1c:
         c0:5a:b5:e7:b2:cd:d2:e8:51:7d:e8:16:6c:f5:54:51:f3:ce:
         ac:30:a7:bd:65:8e:ba:1b:62:f4:05:91:ae:91:83:a0:18:b6:
         17:fc:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:03 2026 by rpki-client