Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
File:                     Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json)
Hash identifier:          vAZIxCqhO1rLoHGpChsy7+7pNtz5m+0YvbcKT2cpe6A=
Subject key identifier:   23:C1:33:56:46:A8:52:B9:CA:5C:12:C4:AF:4B:CC:F4:82:F5:B8:1B
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Certificate issuer:       /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
Manifest number:          017A
Signing time:             Tue 28 Jul 2026 16:23:38 +0000
Manifest this update:     Tue 28 Jul 2026 16:23:38 +0000
Manifest next update:     Tue 04 Aug 2026 16:23:38 +0000
Files and hashes:         1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: BZm+i9RF5QOntgawjYP+IAryJhGcAhY7KScZXAKvK+E=)
                          2: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 9ayUJbTwLRPcJporlzoTUwIv2h9R8DWkz2gQBFVIj/M=)
                          3: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
                          rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
        Validity
            Not Before: Jul 28 16:23:38 2026 GMT
            Not After : Aug  4 16:23:38 2026 GMT
        Subject: CN=6a68d78a-6935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:98:1b:b4:b1:64:2c:cd:12:0a:f4:8e:94:
                    3f:18:69:73:28:cc:35:4e:69:bd:23:0f:7a:c7:fe:
                    ca:13:42:2f:a3:6f:85:bd:1e:f3:ba:c5:e0:1d:8b:
                    07:ed:15:af:92:55:01:2d:c9:b1:e8:11:94:c1:17:
                    10:9f:74:93:29:3a:54:cb:3d:b8:de:77:46:8d:28:
                    1b:76:49:19:52:7d:f6:01:7c:04:f6:7e:33:7c:bc:
                    aa:56:85:be:10:76:eb:55:54:d5:32:49:23:89:eb:
                    a0:6c:d6:bc:45:0d:f7:d9:a6:65:ae:c2:ca:77:37:
                    b2:6f:ca:60:5c:2a:5f:2b:ee:5b:cc:3a:42:7c:f5:
                    7a:4c:41:2d:49:48:68:62:5f:d1:e5:a5:e6:2a:e3:
                    3d:53:bc:ea:bd:10:49:87:db:43:4b:a0:69:78:de:
                    83:db:c3:d9:98:50:11:73:af:5b:c3:49:9a:bf:ea:
                    87:1c:25:49:c1:bf:5c:63:41:4f:13:9f:de:25:a9:
                    2c:d1:f8:70:8a:50:db:90:d3:e7:48:2c:56:c7:a6:
                    cf:e1:9a:6c:56:e4:fd:69:14:09:53:73:77:27:41:
                    1c:01:80:da:22:77:80:fe:55:c9:b0:bd:01:e4:8a:
                    36:84:f9:15:3d:d2:6b:07:84:89:42:04:df:77:c3:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C1:33:56:46:A8:52:B9:CA:5C:12:C4:AF:4B:CC:F4:82:F5:B8:1B
            X509v3 Authority Key Identifier:
                keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1a:e1:24:b0:85:68:89:7b:ea:af:4d:02:87:b3:5e:cf:55:
         eb:fb:94:f3:2a:39:cf:87:f3:2f:1b:05:3d:b8:17:08:ec:cd:
         ef:f0:b5:0f:bf:96:af:80:2c:a7:3d:d8:d0:99:c5:11:70:30:
         bc:4f:6b:dd:1c:8e:fd:17:d6:de:6a:cc:1c:c3:f0:9c:60:5e:
         1d:68:c7:48:48:eb:38:4b:c2:f0:50:88:d0:93:bf:bb:f6:d9:
         b5:87:07:1c:36:99:c7:8c:44:ed:88:91:4c:b2:8e:57:e1:09:
         c2:28:3a:9c:c2:d1:df:6e:14:be:c1:b1:e3:2f:09:29:9c:f2:
         a9:bb:e7:42:7e:3a:28:f9:a1:d7:2c:ff:04:1c:ee:e8:87:1a:
         4e:8f:5b:cc:86:9c:58:ed:29:e1:80:5c:bc:f6:7e:b8:d0:dd:
         01:1b:11:60:84:1c:e6:a5:87:1a:8c:58:ed:be:dc:a1:a5:bf:
         8c:be:4b:ad:0c:99:a9:e9:cb:25:ec:91:c1:99:cb:e7:c5:4f:
         e7:da:f5:e4:a0:cc:46:fe:45:72:85:7e:11:df:f6:39:c7:8a:
         f4:17:2d:66:58:54:5b:33:45:92:81:c1:8b:35:01:d9:1d:10:
         b4:a9:a0:9e:76:34:f7:57:87:16:11:d9:78:ce:44:80:7c:2c:
         ff:a5:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:26 2026 by rpki-client