Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File:                     THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier:          +1o1hrAS8W/3QiNDwUJRNBWzCU+tJw7HQ/BEjzE7dQc=
Subject key identifier:   B7:A6:E8:21:D5:11:FB:C5:A5:37:10:91:E8:F4:9F:79:83:4E:17:1B
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer:       /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial:       09F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number:          09E7
Signing time:             Sun 26 Jul 2026 20:20:55 +0000
Manifest this update:     Sun 26 Jul 2026 20:20:54 +0000
Manifest next update:     Sun 02 Aug 2026 20:20:54 +0000
Files and hashes:         1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: EAcemFpywDVAffyJDz9lG9m5Q5azhVk7Fp7ZpoquXrc=)
                          2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=)
                          3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
                          rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2550 (0x9f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
        Validity
            Not Before: Jul 26 20:20:54 2026 GMT
            Not After : Aug  2 20:20:54 2026 GMT
        Subject: CN=6a666c26-f504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:fc:f1:5b:69:97:ef:e6:12:e6:25:9d:e7:
                    54:fd:01:12:56:99:a8:18:73:75:b6:02:e8:d5:4a:
                    40:cd:34:e3:ca:1d:f4:bb:2a:83:37:db:e9:96:17:
                    7f:85:45:b8:55:77:e0:e6:cf:39:34:ba:23:a7:77:
                    e9:f2:9c:1a:d2:94:f9:e6:7f:10:cb:e8:88:6a:1b:
                    3a:f0:d7:03:53:b6:f7:26:67:84:5c:29:b0:4b:1b:
                    f5:66:f8:76:89:48:8d:f3:8b:95:b0:ca:0a:65:d9:
                    55:17:fb:96:d3:84:bc:9e:7b:9d:af:eb:21:08:33:
                    b0:8c:b7:43:67:63:7a:1b:3a:65:18:49:61:03:1e:
                    4b:62:6f:d8:36:07:dc:72:e6:c6:b1:d4:11:95:a2:
                    47:93:ef:14:03:be:dc:d6:9b:14:eb:7e:f2:d8:4b:
                    fe:d9:52:f9:84:90:a2:6d:9b:e1:7a:f0:8d:90:59:
                    cb:63:9a:88:17:be:14:4f:a2:df:9c:ec:ea:1a:30:
                    36:94:c5:4a:d4:15:d5:7b:a2:ea:8b:87:a5:ae:c3:
                    76:b8:32:a1:b9:99:ce:bc:04:18:f3:45:39:b1:ac:
                    e0:7d:87:6f:1d:d6:e6:5c:00:48:3b:e2:ae:a7:52:
                    d3:f1:35:df:84:65:5c:23:ff:16:88:90:84:78:fc:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:E8:21:D5:11:FB:C5:A5:37:10:91:E8:F4:9F:79:83:4E:17:1B
            X509v3 Authority Key Identifier:
                keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:2a:cd:da:1a:39:b1:2c:5a:7e:62:1e:ce:d9:2d:35:f0:fb:
         55:2a:cf:4a:6d:a3:59:b7:c1:34:c6:3a:33:e5:45:de:91:27:
         41:63:1a:57:be:71:09:5c:8f:1b:db:f9:bb:57:d0:10:70:3e:
         2b:05:cc:34:e7:4b:94:70:2d:c1:1a:9c:59:cc:19:9a:99:f3:
         8b:af:5e:22:4a:eb:9d:ab:8d:2a:a0:43:bc:1e:20:2a:8e:bb:
         e3:d8:27:8c:9c:a8:fb:5c:b4:25:8b:1d:9c:9f:4c:70:36:4d:
         5e:cf:31:5c:4e:73:75:68:d4:68:d7:dd:6d:58:76:15:a0:3d:
         70:8d:42:86:8b:8f:b4:05:f7:75:94:bb:b9:b0:3d:04:38:91:
         c5:65:98:2f:fe:48:9a:98:38:cf:c4:75:e7:69:76:93:e0:30:
         32:ec:a8:b7:6d:27:6e:01:2c:8a:f7:d3:45:06:fe:2a:d0:8f:
         9d:fa:bf:22:22:26:e7:63:6e:c6:55:c9:a6:09:b6:d4:0d:6b:
         40:7a:7e:5e:58:6a:34:e9:69:2a:ae:31:c3:cd:f7:b6:80:54:
         44:7d:f1:d4:e9:9d:e5:40:8f:19:02:e4:3e:7f:80:aa:90:78:
         81:14:80:dc:4e:06:14:38:ed:5d:82:c4:90:58:ac:26:80:a3:
         72:58:62:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:22:03 2026 by rpki-client