Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
File:                     rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json)
Hash identifier:          JenhlS1HAK4hhBKXFyq+sQZcINeQVH/erBE6L7yB+dM=
Subject key identifier:   B2:11:9E:B5:30:F5:99:40:18:17:21:BF:92:41:2E:B7:ED:16:92:55
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Certificate issuer:       /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial:       0982
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
Manifest number:          0977
Signing time:             Tue 28 Jul 2026 20:25:33 +0000
Manifest this update:     Tue 28 Jul 2026 20:25:33 +0000
Manifest next update:     Tue 04 Aug 2026 20:25:33 +0000
Files and hashes:         1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: vsT524sVIjL13YMR5kIzRz2MI1n2U4qUhDCwThFGBI8=)
                          2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: +Pd2aWEI7828mfSanwxonyoz5UIPIwJJCaXRRPJ3RbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
                          rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
        Validity
            Not Before: Jul 28 20:25:33 2026 GMT
            Not After : Aug  4 20:25:33 2026 GMT
        Subject: CN=6a69103d-12df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:38:75:79:82:db:1e:03:ae:34:9d:b9:07:
                    3d:eb:23:9e:b9:88:1a:85:50:f4:f8:93:dc:56:4e:
                    25:d4:93:d6:1d:c3:cc:32:55:a0:d6:1e:ad:8f:00:
                    4f:c1:3a:68:7a:73:ab:d2:e7:f4:b9:9b:ad:b5:8f:
                    62:f3:49:7f:13:c7:4a:50:57:02:20:86:05:3f:a5:
                    6b:41:30:e6:6b:16:1c:03:1e:07:1a:79:1b:c7:f3:
                    4b:95:b8:fc:fa:90:43:bf:4f:c6:80:76:e3:01:99:
                    b5:94:71:27:40:c4:3c:9b:5b:46:cc:f0:3f:ad:89:
                    3c:f9:b7:31:87:a1:49:bf:00:c0:ab:f2:1e:e1:c7:
                    1f:84:30:59:0a:94:f8:ee:7a:ee:29:a8:58:69:00:
                    aa:62:78:31:91:c6:8b:8a:9b:b8:44:aa:d1:c5:92:
                    c9:a6:83:b3:96:41:af:f7:dc:6f:fa:d4:bf:11:e1:
                    2e:66:96:61:56:21:e7:a3:78:6e:48:19:0e:0c:ee:
                    a0:b1:5a:e3:1b:69:f6:c5:d9:f2:c9:85:84:43:08:
                    8a:42:38:8f:e1:6a:62:6e:45:38:60:ec:9d:5a:3c:
                    88:23:99:4b:13:ef:db:d5:f6:cc:5f:4c:fb:c7:61:
                    42:5f:aa:41:e8:87:71:ea:73:a6:75:ce:06:c0:7f:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:11:9E:B5:30:F5:99:40:18:17:21:BF:92:41:2E:B7:ED:16:92:55
            X509v3 Authority Key Identifier:
                keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:cf:12:d9:07:21:77:aa:bd:50:90:9a:1a:2d:d5:24:a2:
         f1:4c:1f:57:23:82:bc:6e:3a:d9:95:56:c5:e4:4d:05:6b:d9:
         09:2b:f5:6d:d1:3c:2c:d3:2c:4e:9d:69:7c:7d:6a:cd:59:58:
         a6:42:8a:79:c7:72:f3:31:7e:06:cb:d7:91:1d:7a:be:8d:97:
         05:07:27:10:3f:6a:06:52:1f:22:23:11:e3:6f:c8:ef:14:1c:
         dc:7b:a8:db:1a:b0:98:1f:02:78:64:b1:2f:c9:bd:1c:77:b3:
         a3:ce:89:52:32:dc:ec:c2:b7:56:72:84:2a:8d:97:2c:cd:fe:
         b2:13:24:a6:d5:25:94:df:9d:18:53:be:19:00:b4:df:39:ca:
         8f:6a:41:f7:ec:94:85:bf:02:a1:c4:21:ca:9a:cf:8e:52:9a:
         c3:a6:95:09:db:7b:9b:16:bf:6e:82:20:fa:e9:d4:48:94:cb:
         ef:16:a1:b1:01:f9:36:c0:a1:9b:fe:23:47:7b:02:11:e5:54:
         d4:e0:80:e8:05:02:e8:c5:78:d2:66:b5:ce:e6:5b:0e:8e:97:
         ef:9a:93:1d:18:7b:d8:11:57:e8:3e:13:e0:6e:56:5a:74:dc:
         a6:31:d3:2e:18:f5:85:13:cf:4e:d1:08:62:56:db:3b:0e:9d:
         d4:00:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:39:09 2026 by rpki-client