Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
File:                     owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json)
Hash identifier:          yrAZ6BlWBZeHsXpXhQgfXXoYwv5sbkFiZJdGOkErAqU=
Subject key identifier:   2B:E3:A7:56:DB:08:82:8F:7D:FF:0F:4E:0E:A7:A4:F4:51:98:81:B5
Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82
Certificate issuer:       /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
Certificate serial:       047B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
Manifest number:          0474
Signing time:             Wed 29 Jul 2026 00:47:54 +0000
Manifest this update:     Wed 29 Jul 2026 00:47:54 +0000
Manifest next update:     Wed 05 Aug 2026 00:47:54 +0000
Files and hashes:         1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: ZAKThVBz8sNXvqSdxSCu8t4DHpm5m/H33cpBUE2HoSU=)
                          2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: dLAnyeTxvDfQF9JYWN7ad+kpYFAFicvcPDptysNHc+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl
                          rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9E03, serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
        Validity
            Not Before: Jul 29 00:47:54 2026 GMT
            Not After : Aug  5 00:47:54 2026 GMT
        Subject: CN=6a694dba-3b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:f6:17:dc:38:6c:cd:ba:c8:cc:e7:19:14:
                    5b:d1:b9:e7:e1:5c:60:4e:e5:7a:f6:9c:be:33:0e:
                    5d:68:24:e1:5d:b2:0e:82:a4:36:3b:76:87:bf:8e:
                    ab:a2:a2:da:07:2b:f5:5d:61:1a:3d:c6:e2:07:99:
                    e6:4f:f0:4a:a9:ed:16:5e:d7:7d:c7:e1:30:14:b7:
                    32:8e:9e:74:dd:9f:fb:2f:fc:ea:96:7c:c2:8a:33:
                    cb:cd:28:2a:f9:68:03:c8:1a:6d:53:3e:4f:86:f5:
                    5c:da:bd:bf:d6:61:8c:d5:b7:8c:83:e6:a9:31:31:
                    af:8b:bc:77:37:5f:d0:14:e6:89:86:9e:59:07:13:
                    2f:76:c9:08:82:37:47:90:2e:1b:f1:94:9d:bd:00:
                    fc:78:03:c4:84:2d:fd:4d:46:11:c4:3c:2d:86:d1:
                    a4:d1:4b:8b:c7:bc:b4:d8:03:f1:18:ad:34:b1:05:
                    71:41:ba:6c:70:77:cc:92:e9:b3:2a:97:fd:2d:09:
                    6c:cc:b6:cb:9c:3f:17:90:11:c1:e7:0f:17:be:11:
                    0e:64:46:cf:23:6b:96:d8:06:24:4e:dc:2d:8b:0c:
                    b9:91:5e:be:71:38:2d:b8:dc:ba:ce:a3:a4:d8:6c:
                    f1:3c:12:36:76:3d:85:22:d1:18:88:2b:04:6e:71:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E3:A7:56:DB:08:82:8F:7D:FF:0F:4E:0E:A7:A4:F4:51:98:81:B5
            X509v3 Authority Key Identifier:
                keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:38:65:0a:ad:8a:c2:2c:8b:b3:c5:04:01:97:ab:5c:30:
         2b:a5:ae:f1:d9:7d:83:1e:ca:c3:b9:58:7d:2b:78:da:0b:42:
         c0:95:02:44:32:a6:22:58:70:7d:0f:3b:db:59:5d:3e:96:d8:
         d7:4b:9f:a8:bf:d2:80:cd:8b:ea:f4:d4:a5:65:87:cc:62:46:
         a7:b0:c4:40:87:f2:26:b9:99:3d:5e:39:41:10:ee:12:97:67:
         83:be:7e:31:02:4e:b4:bd:70:d2:a0:93:c6:f8:53:6e:13:59:
         1d:c6:4c:e7:01:11:af:ff:59:83:fa:8e:02:6c:2d:7f:36:7d:
         23:9a:b9:8e:9a:66:7e:33:ca:e0:01:8e:46:52:75:08:4b:8d:
         42:ce:9d:11:59:60:47:3e:e5:cf:74:a7:08:56:7f:d3:61:83:
         4e:88:64:09:86:7c:f6:20:a2:21:86:2f:89:81:8e:fc:bd:4f:
         3d:1e:18:be:dc:e2:31:fc:e2:6f:c7:11:cc:9a:74:cb:57:21:
         28:92:ac:93:d2:47:83:c2:32:e8:60:71:b1:08:e2:d7:f7:1a:
         a9:4e:e8:7e:08:39:91:c1:45:26:f0:de:01:96:24:90:b1:e2:
         26:14:de:a6:55:ec:f4:8c:17:bd:1a:7d:68:ef:1d:3a:3f:ef:
         87:7e:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:56 2026 by rpki-client