Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
File:                     8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json)
Hash identifier:          W4eYQ8O1gjKOUuP2ibWnrX5djJrovdtEIeOCsSur740=
Subject key identifier:   10:1A:7F:0C:4A:A3:86:BF:32:02:31:CC:81:54:0E:B8:99:62:D7:79
Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8
Certificate issuer:       /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
Manifest number:          98
Signing time:             Mon 27 Jul 2026 09:31:51 +0000
Manifest this update:     Mon 27 Jul 2026 09:31:51 +0000
Manifest next update:     Mon 03 Aug 2026 09:31:51 +0000
Files and hashes:         1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: iiysOBBluuJCvlHi/NcmV3QGEzmsyDsBEITz/vBuh+E=)
                          2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: NZ2PR9JzupHRbIAvvTjexUgRAGHGGYmk/Ol3V3TWapU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8
        Validity
            Not Before: Jul 27 09:31:51 2026 GMT
            Not After : Aug  3 09:31:51 2026 GMT
        Subject: CN=6a672587-f78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7e:36:8b:da:47:da:92:49:94:d9:80:38:f6:
                    2b:1e:19:df:c2:a9:fa:93:c9:dc:f9:ec:0f:27:83:
                    e0:8e:48:e2:ed:89:65:55:49:58:aa:bb:8c:cd:16:
                    e1:86:bb:1b:78:48:27:90:74:1f:44:40:23:b8:6c:
                    38:af:44:ba:0e:05:5c:4d:a6:67:35:b1:62:0a:17:
                    4d:b1:ac:9e:82:e5:d6:91:52:38:5a:bb:d5:4b:2e:
                    7b:60:8b:24:9c:a6:79:ad:54:2d:f8:58:f0:78:77:
                    8f:cf:cf:e8:73:8a:ef:04:b2:66:5e:de:be:95:0d:
                    03:cc:ba:dd:9e:7a:ec:79:f1:ac:7c:3b:a7:e5:a5:
                    31:87:7f:ed:18:26:ed:9b:5c:1b:36:bd:c7:46:87:
                    f4:cf:31:2d:64:7a:04:99:61:df:5e:6a:c2:05:c4:
                    38:c0:b1:25:88:7e:7f:a0:54:d6:d9:68:d2:0e:a9:
                    28:24:22:55:39:8c:e6:9e:e1:3f:47:80:1b:40:2e:
                    c4:b4:a9:fa:c5:ac:e1:4a:32:3c:ad:37:dc:ab:03:
                    a4:1d:75:57:b6:dd:0b:60:ba:7a:08:fc:b9:a6:46:
                    27:e7:35:1d:9e:ca:34:b0:30:85:5c:08:17:a5:b2:
                    eb:05:a0:84:22:72:9d:33:f8:8b:6a:30:16:8f:f2:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1A:7F:0C:4A:A3:86:BF:32:02:31:CC:81:54:0E:B8:99:62:D7:79
            X509v3 Authority Key Identifier:
                keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:42:46:75:1f:b4:3a:8a:40:d7:28:49:a5:e7:86:94:6f:59:
         42:1c:82:2a:c8:25:13:d6:73:80:b3:23:bb:38:86:b7:88:d8:
         df:c7:24:ab:9b:0d:d6:75:63:33:fb:bf:09:33:3f:84:b7:6c:
         e6:2a:fd:9c:a7:78:d9:c1:a0:97:ce:1d:78:b5:f0:cc:f8:61:
         f5:bf:31:82:45:bd:6d:5b:90:8f:5b:7a:6c:7b:41:be:ce:ce:
         d9:75:7a:42:37:57:1a:2d:6e:0d:d3:81:a4:e7:0b:e0:f3:56:
         dc:34:79:7c:37:8f:c2:18:0f:c2:4b:65:b4:13:5c:4e:a7:37:
         6c:fa:3c:06:fa:61:dd:3f:10:28:99:09:2e:84:7b:96:4c:ca:
         f1:b4:92:e4:7d:aa:1f:7b:65:9f:04:d8:34:d4:43:4c:a9:49:
         24:41:64:db:5e:23:0d:1c:85:d6:81:27:88:7a:28:93:24:ae:
         78:a7:7e:85:c2:59:9d:32:8e:d1:26:17:2b:7c:50:21:c0:47:
         81:ce:63:b1:8b:24:3a:1d:bc:2c:54:dd:39:b0:90:57:2e:eb:
         4c:e2:82:a3:73:0d:a6:6e:f6:c5:e5:b1:8e:37:30:d2:28:bc:
         d4:38:9c:e9:e1:c5:4a:95:74:0e:1c:af:96:be:52:bb:61:a0:
         4e:57:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:33 2026 by rpki-client