Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File:                     raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier:          dBtpm+6zx6O2+Sm219ra5gB3SDu7FYvtQ2mbaJEvE84=
Subject key identifier:   E6:BA:8A:E2:6D:23:E1:72:19:13:D3:D3:21:77:B3:F6:87:DC:AB:A2
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer:       /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number:          0227
Signing time:             Wed 29 Jul 2026 03:49:13 +0000
Manifest this update:     Wed 29 Jul 2026 03:49:12 +0000
Manifest next update:     Wed 05 Aug 2026 03:49:12 +0000
Files and hashes:         1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: 1edLQiTnch2NCqaG/qFjLsZM9T66C//Sb91sfSVuz5w=)
                          2: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: NAyqjXxHew3fTgSiTUVKkUKTCbweGmMoTZZqsBbKNGc=)
                          3: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: 6PnVAS1g7LHhPhFEbNomaCcQC2sh7domCqwSzK4ikhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
                          rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
        Validity
            Not Before: Jul 29 03:49:12 2026 GMT
            Not After : Aug  5 03:49:12 2026 GMT
        Subject: CN=6a697838-9c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3d:ec:3b:6e:4d:a4:f4:42:9e:fe:96:76:ba:
                    0b:d5:6d:d4:44:35:22:c8:b4:5a:79:b9:ee:06:70:
                    f0:38:80:49:bf:c2:de:36:da:94:1c:85:88:a4:d4:
                    73:a8:f6:b3:03:ee:6f:31:0b:ec:a7:9d:1c:4c:a5:
                    03:87:37:28:cd:08:43:f2:f2:98:de:e5:d9:7b:59:
                    0e:5d:8d:68:7c:79:74:41:a4:b5:26:65:c0:a8:46:
                    9c:27:0f:de:80:f7:d1:e8:f6:6e:6d:55:61:ce:56:
                    85:7e:cb:cd:1c:18:39:e3:b1:3c:40:a7:c2:32:6f:
                    b7:bd:18:7a:a4:00:24:2f:d3:66:29:65:82:a5:3c:
                    be:f6:50:9a:ab:77:9e:b4:af:76:ee:47:fd:0b:bc:
                    8a:88:3c:21:88:dc:b7:46:14:ff:87:09:38:bf:3e:
                    9c:2b:60:3f:16:46:35:1e:ec:7a:84:ba:a3:4d:5e:
                    94:1e:5b:ae:f8:82:3c:6c:43:ac:45:a0:9f:1d:57:
                    ff:85:60:bb:ed:d3:b5:be:75:c0:f9:15:0d:a2:65:
                    05:76:c5:36:a7:93:52:25:d2:86:e8:f4:2f:b2:e8:
                    f8:d1:7d:d2:67:a7:ee:cd:08:1f:4b:56:05:32:49:
                    bd:15:28:13:e3:f5:89:54:ee:11:00:25:1f:eb:79:
                    a7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BA:8A:E2:6D:23:E1:72:19:13:D3:D3:21:77:B3:F6:87:DC:AB:A2
            X509v3 Authority Key Identifier:
                keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:dd:bf:dc:74:a5:ec:8a:bb:73:e2:2a:89:4e:73:f4:03:ac:
         bb:0f:96:b6:0f:90:da:df:f9:81:f8:5e:db:2d:a2:ca:72:3a:
         03:a7:3c:cf:4b:f2:ff:1e:67:06:42:a8:7c:98:19:0a:2f:0f:
         57:bc:d2:be:59:09:8d:4c:e3:7c:92:2b:f9:24:44:fb:aa:53:
         1a:87:95:17:25:0c:20:ec:81:6b:8d:94:b1:6e:f7:0b:6c:d7:
         9c:76:15:1b:7f:f9:bb:c8:3a:66:a4:e1:30:5a:6a:03:85:93:
         89:b5:27:e5:f8:41:7b:7b:f6:93:9f:bf:f9:ff:7e:75:a9:d4:
         6a:eb:8e:89:4f:69:e3:c8:c1:e6:c5:64:71:c0:00:0c:f9:ec:
         4c:01:25:63:a5:b1:f2:06:dc:aa:01:57:63:c3:8d:39:0c:c5:
         1a:e6:7d:34:c4:80:b8:85:77:56:84:60:2b:ed:7e:c9:43:e1:
         55:73:4d:03:af:75:a1:7f:bd:6e:7b:fa:1e:7e:29:96:f9:3b:
         9b:17:0b:d1:ef:f9:d5:44:66:f1:bf:03:3b:89:da:a5:bc:81:
         33:6e:e2:18:16:18:60:bc:c6:54:0d:ce:bb:09:b4:82:fb:70:
         12:a8:a2:83:74:b6:cf:3c:fc:f3:81:8b:6d:5e:a2:84:1e:ae:
         02:16:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:59 2026 by rpki-client