Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
File:                     148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json)
Hash identifier:          2/eZ9/r6UkKvxmpg87TKHW9WsfhCRoUScflepBjxGJQ=
Subject key identifier:   64:99:8E:05:AA:51:81:B7:2F:C9:F2:52:8B:65:B8:E0:A1:1C:C1:CF
Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62
Certificate issuer:       /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
Manifest number:          019E
Signing time:             Mon 27 Jul 2026 06:01:05 +0000
Manifest this update:     Mon 27 Jul 2026 06:01:03 +0000
Manifest next update:     Mon 03 Aug 2026 06:01:03 +0000
Files and hashes:         1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: q6rDqFRmu1llf6Qr6xUOwG3+/BWjQbdZlTg4iwpeKQY=)
                          2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: i7+K6StkhEeeezuH07nFABJ4+D7tgTloR83xwjCdBu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl
                          rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
        Validity
            Not Before: Jul 27 06:01:03 2026 GMT
            Not After : Aug  3 06:01:03 2026 GMT
        Subject: CN=6a66f420-178e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:47:0e:62:06:1b:d3:21:35:06:97:22:fa:
                    a9:02:b4:b2:1d:92:3a:47:0c:74:9b:2e:37:66:d4:
                    d7:64:e0:06:fe:e2:c4:a1:ab:68:84:62:19:48:97:
                    f0:b4:a4:e7:f4:e9:e6:9b:fa:80:8e:3d:6e:d4:71:
                    a6:f5:03:60:3c:75:86:c7:d9:58:d5:3b:ac:ed:ae:
                    68:61:0d:2f:d8:0b:7c:49:a4:a4:7d:84:2e:04:27:
                    aa:99:d2:f3:27:bc:0f:61:66:26:90:d5:e9:b2:bf:
                    ae:80:10:f1:89:88:4c:66:b6:6e:63:9a:a1:e4:93:
                    a5:6d:67:e6:e0:77:85:54:5d:3d:df:d7:16:48:09:
                    93:1f:d2:17:2c:f5:d1:bf:88:e4:b2:64:a5:63:2b:
                    cb:d2:9e:bd:a3:1b:97:3f:0f:65:91:e6:2a:57:ab:
                    25:34:a5:99:76:6e:be:09:c2:ca:48:64:3e:97:7e:
                    81:e0:64:23:be:01:6a:f4:73:99:dc:9b:a3:2a:68:
                    6f:1c:4b:b9:fe:69:9f:53:38:85:2c:c2:90:eb:37:
                    54:d1:30:6c:f5:5a:42:12:aa:a7:f0:9c:0e:dd:9c:
                    eb:4e:ce:c5:76:c4:af:13:52:12:c4:38:e1:d9:d3:
                    ea:c8:a0:08:6b:90:66:7d:15:af:fe:14:8d:66:ce:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:8E:05:AA:51:81:B7:2F:C9:F2:52:8B:65:B8:E0:A1:1C:C1:CF
            X509v3 Authority Key Identifier:
                keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:b6:bc:94:bb:3c:5a:23:ea:3a:96:f1:d0:16:12:36:fd:
         8f:f5:58:23:35:5a:aa:3e:e2:43:be:dd:97:89:8f:04:60:49:
         e7:7a:84:11:73:74:2c:ba:31:3b:80:75:66:7b:4d:e0:9f:2f:
         f0:e8:7a:00:97:7d:1b:7a:50:ff:0c:13:93:cd:98:99:94:ea:
         de:96:3d:fd:b0:b4:53:d0:4b:dc:db:86:25:e5:00:c3:13:46:
         eb:76:80:6f:b9:6b:90:8a:08:72:d1:53:db:1e:d6:7e:b9:c6:
         06:3e:73:e4:2d:f5:14:cf:3b:2f:ea:a8:4f:98:e5:62:75:73:
         90:f7:61:4c:12:90:11:85:b3:41:70:ac:64:41:a7:06:97:4a:
         4f:9b:2f:16:73:1b:7d:94:58:04:4b:65:5b:b1:be:1d:19:63:
         f5:24:1c:94:64:6e:6a:fd:6d:aa:3f:bd:b9:09:78:31:5f:9f:
         a0:15:4f:34:f4:23:11:55:3c:c1:72:ad:ec:91:f1:75:5d:d2:
         2a:c4:25:f1:3b:6c:6f:7d:2a:c8:eb:8b:19:17:a9:ef:65:56:
         28:61:31:11:2b:94:46:94:7d:98:8a:f5:ee:91:28:9d:c8:62:
         0f:cd:82:ad:8c:5b:4b:5e:11:66:08:25:ee:a5:f0:19:48:7e:
         c5:93:07:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:43:43 2026 by rpki-client