Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
File:                     AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json)
Hash identifier:          GvnH0G5IrPhPaNLYgqfnNrY2qCt0ft1Ywlq5+dbsNok=
Subject key identifier:   17:D9:67:72:00:34:B5:18:97:83:82:EB:36:1B:21:37:09:3B:61:C3
Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
Certificate issuer:       /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Certificate serial:       0984
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
Manifest number:          0978
Signing time:             Sun 26 Jul 2026 20:35:55 +0000
Manifest this update:     Sun 26 Jul 2026 20:35:55 +0000
Manifest next update:     Sun 02 Aug 2026 20:35:55 +0000
Files and hashes:         1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: +DYemyhFOi4ZOhV4XzSqVzQ1s0kvlBC+wJ6fYv21tXw=)
                          2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: EaEIkoL8X3Bs8catDydmdxqS40jl2dudc0xm8Au52PE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
                          rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436 (0x984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
        Validity
            Not Before: Jul 26 20:35:55 2026 GMT
            Not After : Aug  2 20:35:55 2026 GMT
        Subject: CN=6a666fab-8406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:e9:12:06:cd:c8:99:af:96:b1:57:b1:72:
                    ba:5a:23:d2:3f:45:4d:9b:35:a2:81:e6:cb:b8:5a:
                    24:2e:68:df:c0:e0:df:96:e5:9e:31:a8:ee:12:c3:
                    c0:14:2f:18:8f:47:2a:2f:b1:56:35:02:79:a3:81:
                    65:7a:1f:d4:ab:1b:01:8f:d9:87:21:76:ed:35:c9:
                    5f:ce:2d:37:ff:01:0d:82:50:6e:bd:0d:b8:e2:3e:
                    03:b6:41:75:4a:5d:34:16:08:89:bb:28:7e:40:c0:
                    d5:49:80:c4:25:c1:b5:47:7c:2e:cb:31:5c:55:80:
                    f8:3a:93:0b:e6:8d:9a:c3:b8:eb:9c:bf:9c:20:e8:
                    30:a5:a7:9c:1d:f3:df:c3:dc:ff:d5:0e:33:74:bb:
                    a3:92:35:b5:ad:9b:5c:3e:e9:9d:e3:bd:1e:ef:31:
                    46:35:f8:3e:96:a2:f4:1b:d8:ea:7c:7d:c8:b1:17:
                    13:49:5c:c2:24:f2:a5:ef:ed:6d:38:e9:ed:b4:ef:
                    76:f5:31:51:eb:e7:7c:b5:e3:4a:83:08:e1:d0:ab:
                    54:85:17:85:a5:30:1e:1a:5e:ac:c6:67:d1:79:c5:
                    b5:85:e5:6e:b1:4a:24:0b:0b:94:31:01:99:b6:83:
                    b2:b5:09:ac:d4:4a:c7:cf:a8:63:56:1a:03:6a:5a:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D9:67:72:00:34:B5:18:97:83:82:EB:36:1B:21:37:09:3B:61:C3
            X509v3 Authority Key Identifier:
                keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:72:9c:6b:a8:a6:6b:19:69:25:7b:6e:d4:84:a0:9e:73:6f:
         db:d2:6e:0f:1d:1d:cf:43:56:f6:da:71:4e:ba:a8:15:52:10:
         f7:d4:f6:99:b8:ae:29:ea:03:a7:c6:2c:5a:08:22:fd:64:2f:
         2a:9c:85:65:6e:7c:fc:0c:5a:66:5c:9f:a2:b0:22:41:05:69:
         78:41:fc:49:e9:49:42:55:71:89:ac:41:08:bb:64:ae:53:8f:
         a0:f6:86:a7:73:90:e8:eb:97:41:bc:77:65:89:e2:bb:2a:50:
         f3:45:9e:7f:e2:d2:bc:af:4b:ed:db:19:34:ea:6b:ff:0f:7d:
         9e:0f:af:0b:96:b1:c1:90:60:2d:5a:43:8f:4e:72:99:5d:e6:
         19:0e:f0:d1:c4:b2:d4:1e:4d:ea:03:31:07:39:82:31:de:63:
         c2:55:c2:a0:d4:4a:1a:fd:c1:1a:5f:09:d1:a0:53:cd:c9:76:
         36:62:cc:78:61:92:16:8e:f6:8d:3f:ac:36:d1:ee:22:ba:d5:
         56:d8:a5:46:e9:99:59:2a:94:0e:34:d7:0d:2c:17:84:dc:5a:
         c8:a2:7a:d1:80:a7:b4:33:84:fc:bd:c3:8c:d3:5a:e5:b2:d1:
         5e:d8:09:ac:0f:40:e5:f4:43:f7:a7:87:50:69:6e:4e:26:f1:
         c6:57:05:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:07:04 2026 by rpki-client