Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
File:                     ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json)
Hash identifier:          6Cs2DoJbkt2X+3JDWopw52vAH4uHAOo9KoSkPRpZ/NI=
Subject key identifier:   68:16:CD:66:85:04:4B:6F:96:F0:FE:4C:3E:C9:2A:DF:6D:02:3D:78
Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Certificate issuer:       /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Certificate serial:       0757
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
Manifest number:          0748
Signing time:             Sun 26 Jul 2026 22:32:51 +0000
Manifest this update:     Sun 26 Jul 2026 22:32:50 +0000
Manifest next update:     Sun 02 Aug 2026 22:32:50 +0000
Files and hashes:         1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: rHvdGHJ32BsQPjy4/d7oQSLvsS6ByET7sJHkXCWMNFI=)
                          2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: HMfayLmm0jpFCDpVCCzDmRgwU66yO5eXMZ9A310lDoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
        Validity
            Not Before: Jul 26 22:32:50 2026 GMT
            Not After : Aug  2 22:32:50 2026 GMT
        Subject: CN=6a668b12-16eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:3b:3a:8e:00:4a:30:7e:1f:c5:b4:76:7c:
                    38:a6:f0:12:a6:75:16:58:14:9c:2e:74:2a:b3:37:
                    bc:29:f5:74:b3:b8:27:a5:87:df:0b:ff:71:5c:92:
                    14:8b:c9:df:4f:43:2e:8d:65:27:3d:47:a4:0d:56:
                    64:3f:5d:f1:30:85:d8:d5:b3:10:f0:34:ef:d2:a0:
                    d3:c4:32:36:f7:16:52:5f:d7:a5:c4:6e:9d:01:43:
                    97:f4:53:79:12:dd:22:9a:40:10:c0:82:73:46:78:
                    4f:ed:45:9c:91:12:6b:55:ef:d9:1b:1c:97:7e:bb:
                    ca:16:fd:e9:e3:26:fc:89:ae:69:b1:bc:38:7a:bb:
                    98:18:b1:9e:4e:24:eb:05:78:07:3b:1f:88:7e:9b:
                    92:0d:a3:b3:42:a7:9f:35:b8:09:fe:0f:98:f7:29:
                    c7:47:10:f4:94:41:01:59:18:25:ca:74:a2:4b:46:
                    2e:fb:eb:58:bd:9f:7f:cb:2a:b9:45:7f:2d:df:2e:
                    d0:38:68:3c:30:99:64:79:b9:e7:38:3a:61:ec:58:
                    8d:8c:4a:e2:69:93:0d:96:ae:1b:a1:47:34:a4:2c:
                    d9:bd:b8:24:f9:72:0e:d1:95:98:4a:f1:1a:ad:ba:
                    7c:00:b1:81:a6:62:48:22:75:c8:4e:1a:81:0d:c8:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:16:CD:66:85:04:4B:6F:96:F0:FE:4C:3E:C9:2A:DF:6D:02:3D:78
            X509v3 Authority Key Identifier:
                keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b5:99:e6:54:6b:1e:19:c2:4b:58:1f:86:7c:28:09:e8:58:
         bd:05:89:0d:18:32:30:bf:a5:a4:b1:ee:9c:53:82:d2:3e:ea:
         b9:c4:07:b7:33:77:2f:5e:3c:75:f0:d7:76:5a:6c:75:9f:3c:
         8b:d2:90:37:03:88:24:63:98:fb:b6:f1:9a:9e:45:6f:db:58:
         7a:bd:dc:93:4e:af:8e:23:17:17:3a:29:33:5c:f9:6a:56:70:
         e1:c9:cd:f7:c3:fe:09:0d:36:88:fc:2f:ba:6b:e3:bd:94:9a:
         58:2f:19:ea:b0:aa:f4:19:a5:6f:c7:69:a8:08:25:7a:e4:67:
         6d:c4:de:c1:b4:df:bf:fb:ed:e2:90:94:2a:dc:0c:f4:e7:4c:
         a2:8c:11:d0:0e:9c:3a:38:54:3f:93:3c:cd:ad:76:86:99:32:
         32:a4:f9:f3:3f:33:8d:91:63:54:76:f8:0a:2c:19:02:96:31:
         0d:ab:4e:6d:27:27:53:3f:7c:f8:e0:ce:83:06:62:51:14:4f:
         bb:f2:5c:66:df:6c:24:b3:78:43:37:5d:13:64:ab:c2:4a:06:
         92:2a:ad:09:89:47:44:e6:ae:62:fa:0d:76:b4:b4:ff:aa:2c:
         f9:b7:a3:e4:ea:cd:3c:e1:89:c7:fb:1b:ef:c3:fb:d1:69:18:
         4e:49:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:07 2026 by rpki-client