Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File:                     jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier:          OFGRt1XCqI16/QMhwReVZTWR51VDU/oTQJWm4Qg6oJE=
Subject key identifier:   D0:8E:2F:DF:A1:2C:0C:C3:C9:5B:C7:82:F4:97:5C:96:BA:45:27:9B
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer:       /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number:          9D
Signing time:             Mon 27 Jul 2026 09:31:04 +0000
Manifest this update:     Mon 27 Jul 2026 09:31:04 +0000
Manifest next update:     Mon 03 Aug 2026 09:31:04 +0000
Files and hashes:         1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: E8FCL2juO3FGcCGpT557VvYqJ2e7yZAUqcyy+HTsORI=)
                          2: 69EFC826355811F19E199801B7833773.roa (hash: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
        Validity
            Not Before: Jul 27 09:31:04 2026 GMT
            Not After : Aug  3 09:31:04 2026 GMT
        Subject: CN=6a672558-9cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:ee:cc:04:d0:cd:dd:ee:23:56:ef:8b:24:
                    ee:be:bd:17:4b:6f:59:8d:75:25:b3:dc:6c:d7:c3:
                    f3:62:53:16:d4:99:23:fd:a5:bc:ce:e3:ce:46:65:
                    53:19:2a:fa:16:0e:87:58:d5:0f:0b:28:a6:56:4c:
                    b4:8a:f0:df:22:c0:7f:62:0f:66:9a:8c:4b:fa:9a:
                    7d:9d:af:2a:a1:e6:dc:03:e6:32:89:ac:d2:11:2b:
                    c0:4d:c3:35:b7:00:30:a0:c4:9d:f0:c6:37:25:a8:
                    34:91:79:e5:af:39:f6:32:eb:55:c8:c6:f6:aa:d2:
                    0c:ba:db:e0:40:92:89:f8:ba:75:a8:6f:58:6a:ed:
                    79:18:e1:ad:49:fd:bc:eb:b7:b4:fb:9d:bb:66:d8:
                    e1:d1:3d:90:e1:e7:88:53:2e:9e:65:f1:2b:1f:b6:
                    ee:b8:4e:e3:22:89:bb:51:b9:a4:a3:5a:01:64:a0:
                    c0:42:28:15:9b:e3:a5:11:36:eb:1c:24:a9:cd:42:
                    83:4a:73:d1:e5:84:fd:d9:74:65:76:8f:ae:95:ae:
                    74:4b:05:0e:4e:4d:5b:7d:a1:64:9a:2e:77:ec:97:
                    a0:90:e3:97:59:b9:e6:5d:ae:dd:07:12:15:7b:b4:
                    38:3e:2a:f6:97:a9:42:c9:a0:82:60:c9:43:c9:8e:
                    47:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8E:2F:DF:A1:2C:0C:C3:C9:5B:C7:82:F4:97:5C:96:BA:45:27:9B
            X509v3 Authority Key Identifier:
                keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:ab:a3:e1:fb:83:c5:91:0b:84:ef:01:fe:7b:9d:85:b6:8b:
         48:b0:99:23:da:d7:30:25:34:3f:2d:ff:73:48:11:f7:e1:69:
         52:0a:d2:94:fc:fa:60:87:4a:e4:4e:ab:eb:eb:55:00:d8:05:
         d4:2e:fa:cd:ee:2f:da:de:b4:17:8a:5d:59:d5:c9:93:61:c9:
         2d:5d:13:5c:ff:21:da:2f:20:82:6c:89:bb:4c:2b:09:31:33:
         5b:b2:97:82:a6:85:30:0c:0c:c8:f2:d2:c4:fa:1f:c7:2e:b2:
         4e:52:6f:0a:ce:93:ea:42:c0:63:6a:53:4f:c1:a6:13:66:6e:
         d0:57:04:5a:1e:8b:5b:73:75:65:0f:ce:90:76:b2:b0:2c:ac:
         b1:33:bf:82:81:5c:c0:e1:4a:c9:5a:f5:64:be:c3:87:21:42:
         c0:62:38:ce:fd:d9:e4:d4:e1:a9:77:19:c1:bc:6b:29:ab:37:
         47:ec:f5:25:65:c8:02:8a:92:60:71:52:78:dd:32:1a:0d:e0:
         fe:80:b7:01:a1:1a:26:17:0c:46:33:9a:5b:29:be:7d:c5:7b:
         76:0f:46:a7:1d:a3:21:34:24:dd:fa:78:a3:2f:b2:3b:61:90:
         48:48:34:3a:b6:44:1c:46:57:9d:50:61:8a:70:fb:e7:98:8e:
         06:25:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:46 2026 by rpki-client