Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
File:                     sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json)
Hash identifier:          FqMpCwOatJzR64bprnfF5sNqLSG1Xt8c2xL2EDwcAMk=
Subject key identifier:   7A:14:49:EF:6F:62:3E:66:8F:9E:03:50:30:55:F5:1E:B6:ED:AD:DF
Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
Certificate issuer:       /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
Manifest number:          0238
Signing time:             Mon 27 Jul 2026 04:07:34 +0000
Manifest this update:     Mon 27 Jul 2026 04:07:34 +0000
Manifest next update:     Mon 03 Aug 2026 04:07:34 +0000
Files and hashes:         1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: EGLG3hNaytlYUMKuV9khY0JQZpA2xVX2kJk/tQga3IM=)
                          2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 8y7hfK3jGDMBr1f4yhw0XCvK5AAMWqEEBB2+0ezh2M4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
        Validity
            Not Before: Jul 27 04:07:34 2026 GMT
            Not After : Aug  3 04:07:34 2026 GMT
        Subject: CN=6a66d986-7c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:89:ae:c5:4f:89:dd:1d:01:a3:71:98:14:
                    7f:57:c2:32:0a:d9:cf:68:25:ad:6d:68:dd:7c:74:
                    75:eb:42:c0:d9:83:31:52:ec:fb:62:75:17:19:9e:
                    bd:93:09:14:50:de:4a:6b:24:06:6a:e9:96:80:11:
                    a8:86:2b:4a:c4:0f:0d:91:2a:ae:b3:eb:2b:6e:81:
                    ec:eb:6a:6e:76:82:7c:26:84:fd:00:ec:02:cf:6d:
                    46:cb:5b:ec:86:46:61:f1:70:ad:fc:d3:b7:e7:bd:
                    46:f2:2e:d8:ee:b4:bc:10:4f:44:5b:77:d0:ff:93:
                    db:68:b1:1f:8a:1f:43:c8:84:84:01:1a:2f:4a:71:
                    08:73:1d:ed:34:20:f9:99:63:0b:7f:63:85:81:94:
                    c6:42:01:50:e3:ed:f3:41:d3:29:67:8e:d7:bc:69:
                    60:65:d5:ff:fb:fd:1e:ea:ae:a9:0c:80:ae:a3:66:
                    53:db:bc:26:0c:11:a4:e2:e3:e4:e9:dc:56:01:9c:
                    aa:3c:15:ef:e7:24:26:45:e5:eb:eb:03:c9:ca:f8:
                    f5:da:36:ef:b6:99:5e:81:49:67:d6:ae:ac:52:c9:
                    b8:db:7d:64:b2:f0:63:9a:a6:41:86:a0:6b:2a:81:
                    98:69:72:2d:6d:29:a2:2c:89:fd:54:db:e0:7e:32:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:14:49:EF:6F:62:3E:66:8F:9E:03:50:30:55:F5:1E:B6:ED:AD:DF
            X509v3 Authority Key Identifier:
                keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:af:24:4b:72:3e:6b:4f:9d:ae:03:74:3f:3d:51:83:3c:0a:
         20:17:9e:64:d1:f4:4a:8a:10:72:47:34:eb:68:c4:89:18:c5:
         87:23:86:81:c3:07:cc:1f:7b:c2:9b:86:60:53:f9:a2:53:e8:
         e7:e9:de:0c:d6:72:e7:a8:28:9a:68:f5:42:ce:42:c8:d5:86:
         c2:14:4b:f2:f2:17:d8:36:51:c3:08:85:f1:13:86:af:d5:89:
         88:8d:b6:02:38:40:7d:fb:8b:d6:78:68:34:e9:4f:25:c0:41:
         dd:67:3a:92:b6:45:63:32:7f:02:68:74:a4:86:c0:80:1b:77:
         cb:63:c4:27:db:64:0f:2a:b1:e8:04:fe:a0:92:cf:df:8e:26:
         f6:40:3c:c4:c5:13:22:dc:30:2a:bf:4a:a3:2a:85:1d:ed:76:
         d8:6b:80:cd:6b:7a:bf:ec:ad:c2:d8:a0:98:f7:b6:fe:90:a5:
         4b:d9:26:d4:08:73:c0:9d:62:a0:dd:ec:b2:41:21:ff:43:26:
         33:2b:e9:1a:18:b1:05:a7:bf:c7:58:ac:af:fc:f5:40:87:23:
         0a:af:7d:a0:97:be:40:15:de:b9:81:51:51:33:89:f0:e6:d3:
         a0:84:d9:8b:26:b2:aa:2c:44:ce:e8:52:57:88:9d:84:28:a8:
         a0:b1:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:40 2026 by rpki-client