Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File:                     bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier:          QdjH1taa7cHXHpl+lOm3pGYjYjHJmDv62tqYjWSzmNg=
Subject key identifier:   BF:11:E2:88:31:5F:6F:A2:35:85:68:B4:A7:D4:DE:D1:9A:E2:90:B2
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer:       /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial:       0A78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number:          0A68
Signing time:             Tue 28 Jul 2026 19:58:44 +0000
Manifest this update:     Tue 28 Jul 2026 19:58:43 +0000
Manifest next update:     Tue 04 Aug 2026 19:58:43 +0000
Files and hashes:         1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: /uVRShWaUIEp4gpPhWBJYiIKF2mlMqvfgxXsLQvtn3M=)
                          2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: 1mRV89mqNc+nLOCZGSyR4uuy7wclwLlHSJ3xFNf7VPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
                          rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680 (0xa78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
        Validity
            Not Before: Jul 28 19:58:43 2026 GMT
            Not After : Aug  4 19:58:43 2026 GMT
        Subject: CN=6a6909f4-5ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:7e:45:24:75:09:59:21:df:9e:5d:4f:85:
                    ad:92:5d:73:d5:d3:44:3a:2c:63:68:e5:97:a9:71:
                    54:82:a1:dd:5b:c5:ae:13:59:97:48:b8:42:9f:01:
                    2b:5a:ce:e8:f6:c4:c7:a7:2e:03:85:fd:00:42:fb:
                    f3:c4:89:74:e8:ba:56:75:34:7b:5b:1a:3a:e3:73:
                    9b:5c:98:e0:80:df:97:32:61:5a:de:f8:59:3e:f0:
                    cc:07:71:cc:f9:a0:e3:a5:38:5f:68:ff:29:5c:2b:
                    c4:a6:fc:3a:39:7b:d3:94:64:f5:11:76:d2:ae:d4:
                    bf:0b:2e:0b:ea:55:4b:2a:06:af:71:5c:db:19:67:
                    25:9c:a2:22:54:05:46:2d:54:21:63:da:77:b8:31:
                    06:3a:87:b3:d5:c4:6b:b6:f4:49:0d:1a:2e:9a:2e:
                    37:ae:ad:8b:2e:6c:f5:1c:8a:90:a3:09:a0:f7:2c:
                    dc:67:ee:18:52:f9:4e:4c:0b:03:80:32:c2:68:08:
                    c1:6b:78:1a:01:59:11:8c:d9:74:60:5c:a4:9b:d4:
                    a2:9b:77:3e:70:52:f9:77:df:9d:8f:80:cb:1a:47:
                    b1:1a:4b:82:cb:eb:31:14:da:dc:1c:39:76:10:56:
                    9d:21:c3:ff:49:6a:1e:72:01:3e:22:76:c4:c6:24:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:11:E2:88:31:5F:6F:A2:35:85:68:B4:A7:D4:DE:D1:9A:E2:90:B2
            X509v3 Authority Key Identifier:
                keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:80:70:be:6c:07:61:90:8a:e4:3b:1f:ab:ed:79:73:05:14:
         00:36:62:b7:e8:c8:db:f8:6e:1c:3c:6f:7f:a8:31:7b:1b:23:
         70:6b:19:54:5c:66:ac:29:d5:6d:09:66:ed:51:19:f1:32:75:
         69:74:a6:53:ff:f8:ca:5a:f9:77:f5:a1:f7:6f:34:75:a1:fa:
         69:07:88:75:f5:e6:cd:fc:4f:1c:57:4c:93:3b:14:e6:ea:1c:
         bd:3b:bc:d1:ff:1b:86:67:22:6f:57:66:a8:97:4d:2d:e2:33:
         00:47:b8:c8:f1:88:6a:3c:dd:1b:37:94:bd:5d:f0:51:be:2f:
         d8:58:f8:08:e6:78:4c:ff:f9:a1:6c:82:eb:7a:4b:5b:4d:a8:
         bb:72:8a:e8:dd:a9:1e:64:82:82:e8:d0:72:f5:9e:ee:b3:68:
         f8:19:f0:84:38:14:84:0f:5a:f2:92:96:65:28:e5:4b:25:94:
         00:1d:40:4a:87:0a:54:03:de:e9:0a:92:fe:8a:55:2c:cb:1c:
         1b:67:16:fc:2a:02:07:96:a8:77:31:9c:84:3e:22:1d:2f:ee:
         da:ed:d3:1b:ef:f9:83:81:1d:d4:e6:6a:c0:01:68:98:7f:e1:
         e5:0a:4b:e0:3d:f1:9b:2c:f5:e5:6f:d6:3b:76:7f:7c:d7:d1:
         07:9f:95:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:21:44 2026 by rpki-client