Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
File:                     Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json)
Hash identifier:          y/LGk1SXQ45lVPK96ko21MG13LtqTF842BbOiIV7PWo=
Subject key identifier:   FD:12:80:BB:E6:0A:1C:C2:3A:8F:51:F8:00:89:FE:2C:20:00:E2:B0
Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
Certificate issuer:       /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Certificate serial:       0602
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
Manifest number:          05FA
Signing time:             Sun 26 Jul 2026 23:47:40 +0000
Manifest this update:     Sun 26 Jul 2026 23:47:39 +0000
Manifest next update:     Sun 02 Aug 2026 23:47:39 +0000
Files and hashes:         1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: 44HGTUr6bT3ZjFyGYyVLm6vIdeqQJ/hZfxMWfEETQ7k=)
                          2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: OrGWOjKaq8LbnZvZB603X7/PZgRovjlf9H8990xA32M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1538 (0x602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
        Validity
            Not Before: Jul 26 23:47:39 2026 GMT
            Not After : Aug  2 23:47:39 2026 GMT
        Subject: CN=6a669c9c-9ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:dc:ae:4a:8b:3a:c2:33:2a:86:dc:fe:4f:
                    40:54:c2:ab:da:c3:23:69:25:0d:18:26:c7:db:36:
                    ec:f0:7b:0f:35:66:30:78:46:4e:e6:81:f7:16:31:
                    87:08:67:03:1a:09:4a:30:4b:19:75:45:7c:9d:92:
                    a8:1e:e0:96:3d:14:c2:93:9f:f9:71:22:1e:3f:00:
                    b2:7f:75:89:58:73:90:04:68:31:10:f1:d5:bd:e8:
                    f5:71:24:b0:2d:92:05:70:16:2c:6f:b3:21:a4:f0:
                    95:90:64:bb:b9:fe:e1:9a:78:b1:a0:e1:34:07:d7:
                    41:1a:91:e4:28:ae:49:c3:31:e7:82:5b:65:ac:56:
                    e9:e0:3c:83:49:87:96:13:50:10:8a:1b:1c:34:04:
                    d8:75:4a:db:da:ce:67:91:8d:21:3e:86:50:5e:ee:
                    a9:78:df:5b:d9:73:f5:74:9d:09:e3:b1:e4:c5:54:
                    1d:dd:e3:92:fd:02:48:35:b1:b0:84:35:de:e2:ba:
                    07:55:01:47:0c:93:8a:6a:f6:6e:6c:52:e1:2d:3f:
                    82:2a:0e:a5:44:86:2d:b1:8e:69:92:c1:9e:c9:d7:
                    20:3e:bc:1c:39:10:94:07:6b:d2:df:23:8b:9a:ee:
                    29:15:e4:dd:1e:29:c8:df:5c:2d:db:60:52:fa:ca:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:12:80:BB:E6:0A:1C:C2:3A:8F:51:F8:00:89:FE:2C:20:00:E2:B0
            X509v3 Authority Key Identifier:
                keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:23:e1:32:d9:60:98:45:b8:f1:4d:eb:10:2e:53:29:ee:ab:
         bf:be:94:ec:f7:eb:43:5b:28:b6:b1:c9:40:21:62:c9:d3:02:
         f9:25:8d:86:97:15:a3:70:66:35:19:b4:e9:08:02:56:c5:45:
         be:51:c3:c5:26:d2:5b:e5:33:c7:d3:05:eb:00:83:fb:42:09:
         2f:4d:f7:f4:7e:1a:43:7f:5c:19:d4:10:50:5f:c9:d2:e2:b9:
         ca:ef:4b:d7:80:c0:f6:2e:32:ff:43:38:93:76:55:c2:09:3c:
         1d:14:72:f7:66:54:f5:8b:0c:e9:28:63:1d:1f:98:bc:57:1e:
         dd:61:fc:87:38:5e:87:f2:85:3f:c5:a6:fc:4c:27:b9:78:1c:
         c2:a1:e8:4c:27:9c:e9:cc:48:6c:15:91:45:08:9d:7f:b7:a4:
         d4:e5:b5:6d:79:b1:6e:db:dc:8e:c2:b7:64:c7:ce:f9:8d:83:
         18:1e:07:30:d6:b1:dd:de:8a:af:cf:5f:4a:d1:35:41:eb:8a:
         44:f5:9a:65:4a:e9:61:ce:e8:30:39:d2:31:8a:02:62:a1:f0:
         8f:9a:ad:8b:ec:cf:c8:96:6e:78:0e:23:4b:32:e4:c9:85:4f:
         42:67:7e:ba:94:d7:53:53:00:0e:64:36:68:d6:8a:23:99:7a:
         2e:c3:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:52 2026 by rpki-client