Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File:                     SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier:          VR6igsPiPr7LjuZTsQFsXhZqU212WP3VmEzpebeDBDQ=
Subject key identifier:   34:50:96:F4:AF:50:A9:0F:07:93:C4:B2:BE:8A:AB:B8:54:C5:90:43
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer:       /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number:          087A
Signing time:             Tue 28 Jul 2026 21:11:05 +0000
Manifest this update:     Tue 28 Jul 2026 21:11:04 +0000
Manifest next update:     Tue 04 Aug 2026 21:11:04 +0000
Files and hashes:         1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: RZLJRNvLnmTcmjeUHX8TJyhndaKQEqr2TUdhAM4OmwA=)
                          2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
                          rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
        Validity
            Not Before: Jul 28 21:11:04 2026 GMT
            Not After : Aug  4 21:11:04 2026 GMT
        Subject: CN=6a691ae9-27cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:d9:5a:5e:e4:01:0c:23:b8:f5:dd:3f:69:
                    6e:31:f8:e0:58:e4:cc:46:85:ae:07:21:d1:41:67:
                    16:1b:7a:e8:7d:69:30:18:bd:71:22:5a:c8:5f:f5:
                    9a:a3:73:a9:d9:28:d4:c8:bf:11:20:d5:1d:ec:02:
                    35:5a:5a:4c:27:e8:5d:35:0f:78:c4:9f:84:d9:d5:
                    e9:21:b9:dd:fb:fe:0a:9d:a6:81:0f:5b:00:cb:fc:
                    f8:8d:3b:76:90:f9:5f:a4:59:2d:8c:47:df:e3:29:
                    a0:00:a3:af:1d:3a:2e:4f:a4:dc:ed:d2:b3:33:b4:
                    65:fc:53:01:b7:b8:f9:a2:a9:de:38:6c:64:c2:0f:
                    e8:4f:bc:b6:8b:97:05:76:30:89:05:54:4b:f6:07:
                    0c:eb:5a:94:3f:52:69:9b:1f:10:e7:ec:72:f5:96:
                    d7:51:2b:df:3e:c3:7b:df:ac:0d:6a:a9:5f:63:ed:
                    cc:bd:e6:6d:22:6c:b1:99:65:34:7f:99:45:fa:d1:
                    17:84:25:e4:cb:da:ac:f8:8e:14:4d:45:56:77:fa:
                    a0:66:4d:02:b8:d5:b6:72:3c:ad:e4:71:f6:09:3c:
                    cd:81:5c:96:98:e0:5b:2b:24:e0:b1:36:6b:44:4c:
                    58:54:a7:41:9b:29:15:a6:1f:80:3f:e0:c3:0a:a0:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:96:F4:AF:50:A9:0F:07:93:C4:B2:BE:8A:AB:B8:54:C5:90:43
            X509v3 Authority Key Identifier:
                keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6b:aa:34:f1:64:44:3c:c4:f8:7a:2e:7b:57:a1:f1:76:85:
         6e:2f:14:d2:54:f3:f4:f8:28:2e:ab:89:1c:f9:42:24:b0:dd:
         8e:ae:d9:62:6c:31:3b:54:d2:d5:19:a9:9e:2d:6e:2e:ac:e2:
         ab:32:8d:c6:36:aa:e5:99:af:3e:32:fa:81:95:7e:22:58:fe:
         2a:f2:12:04:b2:89:36:bb:d2:ed:f9:8f:b9:79:58:15:7f:97:
         9e:86:10:ca:99:ce:a5:fa:08:da:b5:73:14:a8:c5:4f:02:2a:
         c7:46:7a:85:dc:db:b3:c3:23:d5:89:d6:24:d0:07:9f:a9:8e:
         19:28:4b:14:20:76:58:8d:e0:c3:0e:62:ec:a2:82:37:48:a9:
         a3:66:5d:a3:75:a3:0e:cb:35:c1:b4:b8:a6:a5:83:3a:05:0f:
         7e:0d:ec:5c:e2:59:43:dc:0c:85:b2:7f:84:69:16:e7:a5:b3:
         d3:f9:97:d3:1c:bc:fb:03:42:c0:4d:e4:d4:e9:43:b6:01:e8:
         be:83:e3:ba:11:3c:89:ac:e0:d8:8c:56:e7:73:36:6d:e8:04:
         7a:a8:66:1d:e5:3a:5e:30:62:f0:bb:51:c0:ae:fd:7b:36:85:
         af:5e:3b:30:41:20:d9:c1:91:f1:1f:2e:4d:2f:40:9c:14:3a:
         37:08:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:37:00 2026 by rpki-client