Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
File:                     awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json)
Hash identifier:          Xj8vgtUj10wjB5FX2tpx50QQNnDxQMS2213wjwkj2qg=
Subject key identifier:   F3:02:8E:48:B3:EF:B8:3C:F4:E0:5F:1D:C6:B6:C4:46:3A:F0:2F:E5
Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
Certificate issuer:       /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
Manifest number:          015D
Signing time:             Wed 29 Jul 2026 06:22:21 +0000
Manifest this update:     Wed 29 Jul 2026 06:22:20 +0000
Manifest next update:     Wed 05 Aug 2026 06:22:20 +0000
Files and hashes:         1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: EOeJ0SpU6We84DYjLbrtbLHaFee2Q5TSvj6605a0QK0=)
                          2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: tl/k13u9WQTOSahGwGx1iDOYk8VB5/PtqpvEKgFMIvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
        Validity
            Not Before: Jul 29 06:22:20 2026 GMT
            Not After : Aug  5 06:22:20 2026 GMT
        Subject: CN=6a699c1d-3ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:bc:03:ae:7c:93:57:47:0a:29:33:77:15:
                    00:40:55:58:9b:85:27:6b:5a:9f:ea:a5:95:41:68:
                    43:7e:94:24:4e:25:f6:d7:cc:ef:4e:d0:f6:f0:a6:
                    82:1c:dc:1c:4c:05:50:bf:c4:31:42:d3:f3:52:39:
                    bb:72:92:79:4e:9f:c1:d9:6c:0a:70:a8:01:81:36:
                    05:08:26:97:a8:9d:b2:3b:68:df:eb:52:e9:85:81:
                    4f:16:cc:15:62:95:db:4c:59:eb:9a:8a:53:7e:0c:
                    86:3e:db:fd:98:37:35:18:86:17:16:7a:a6:33:1a:
                    12:de:ea:36:90:fa:fa:3d:c9:54:83:97:5a:11:2b:
                    37:ca:d3:4b:de:eb:7c:47:6a:72:c2:28:48:4f:d3:
                    ff:bb:8a:d3:91:bc:50:bd:89:65:89:3b:05:01:21:
                    15:94:a9:09:d0:aa:71:af:28:2d:5a:b0:24:13:40:
                    1e:60:89:2e:28:a4:06:df:e9:72:33:11:32:c7:b0:
                    d6:72:92:c4:2a:08:13:4d:46:9d:9e:d7:a5:25:2d:
                    d1:8e:22:18:44:70:02:f5:ec:e4:bc:7a:b8:1e:b3:
                    ed:3e:96:f0:07:c7:a3:34:ad:57:3f:e0:78:9c:81:
                    06:05:da:03:9b:98:78:af:47:53:31:38:25:25:6b:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:8E:48:B3:EF:B8:3C:F4:E0:5F:1D:C6:B6:C4:46:3A:F0:2F:E5
            X509v3 Authority Key Identifier:
                keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0d:25:fe:fb:f8:a3:c4:56:77:62:aa:84:71:32:28:58:69:
         a3:a5:09:4c:a3:8c:5b:e2:6f:9e:4d:07:a8:12:60:23:e4:8c:
         4a:ee:c6:87:de:f7:68:45:3c:f4:3a:89:39:55:51:89:ff:78:
         5d:a8:58:de:6a:88:55:1f:d1:8a:62:5c:4a:99:10:07:00:e9:
         4a:60:e2:ca:e0:73:e4:70:c5:f4:f8:de:3b:e6:55:23:93:59:
         52:1c:47:99:93:f4:3b:47:ad:05:32:5b:b4:04:03:66:f2:b9:
         0e:33:a3:50:cf:e4:7c:ca:10:ca:88:72:be:8f:cd:8b:1f:7c:
         15:17:fa:73:0c:55:ab:2a:da:7d:e4:ee:c6:13:36:08:6a:44:
         58:73:81:df:c3:df:b2:a0:83:9f:66:46:65:84:0d:e7:d8:0a:
         ab:c8:8c:88:6a:6b:1c:c8:46:ed:4f:ba:d5:80:88:ee:e2:19:
         e0:92:c4:64:d6:7a:28:7b:67:75:ff:9c:19:f0:46:de:90:ab:
         6c:54:bd:c5:97:ac:e4:ba:97:eb:81:09:ac:fe:3d:2f:3b:b4:
         a6:38:90:db:1a:85:15:f4:a0:15:4b:a1:67:e6:48:fd:b2:83:
         92:46:ac:00:da:73:0d:ca:5e:8b:80:b6:71:32:73:06:fd:df:
         96:65:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:47:20 2026 by rpki-client