Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File:                     R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier:          TRm9Uv+Naqbw2CIuVXXUWzaKBBtECaj6eGPP4ZnaiDQ=
Subject key identifier:   4E:32:33:CC:C4:D6:86:61:C2:4D:41:0D:7C:36:8A:11:62:95:44:26
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer:       /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial:       0EB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number:          0EA6
Signing time:             Tue 28 Jul 2026 17:50:41 +0000
Manifest this update:     Tue 28 Jul 2026 17:50:41 +0000
Manifest next update:     Tue 04 Aug 2026 17:50:41 +0000
Files and hashes:         1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: bH42lgm4hGpZtHSmTkn50pezzIRFKNV+Ec+9nYa7Q8w=)
                          2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: 4apSZMW7Vfs833gnnmQpU2EzXDtEcmjJdHV9lEBaG8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
                          rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3762 (0xeb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
        Validity
            Not Before: Jul 28 17:50:41 2026 GMT
            Not After : Aug  4 17:50:41 2026 GMT
        Subject: CN=6a68ebf1-4eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:5a:2f:53:7a:72:34:e6:68:ff:80:e3:cd:
                    e2:a7:5a:7a:c7:b7:66:80:5d:30:ed:86:e9:f2:b5:
                    35:69:1d:cc:86:e4:b4:3e:35:57:3d:dc:a1:f3:90:
                    28:15:a5:09:8e:a7:24:c2:52:26:74:63:b9:67:8a:
                    c0:d6:8f:4c:46:eb:24:65:d4:9a:d5:60:31:74:3e:
                    7f:6d:2e:60:fa:fe:c6:4c:e4:c0:af:50:8a:66:11:
                    58:74:94:23:7b:a9:e3:56:cd:51:1f:02:ee:62:29:
                    6b:1a:7e:8c:45:ce:db:49:75:68:c7:50:7d:e4:72:
                    5c:88:de:55:08:8c:4b:c8:44:f8:90:3d:14:d3:72:
                    98:a1:ab:fd:3b:b3:40:3e:7f:38:3f:d9:a2:7a:b2:
                    1b:fe:6e:50:d5:25:dd:67:7f:a5:fb:ab:2a:06:80:
                    f2:0a:21:d8:3b:2d:49:fb:9c:b3:dc:ee:5c:49:fc:
                    ba:67:32:7a:26:b2:fd:1d:d9:ef:26:8d:4b:9b:8e:
                    2c:25:f1:00:9a:08:c5:fd:ba:f4:8b:37:8f:39:3b:
                    7f:6c:2b:e4:ff:b4:87:0f:69:31:ff:20:42:7b:f5:
                    b8:29:23:31:d3:7c:67:2f:2d:31:68:b4:df:3c:f9:
                    74:96:02:04:41:7e:9d:3b:68:48:ba:04:fe:f1:49:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:32:33:CC:C4:D6:86:61:C2:4D:41:0D:7C:36:8A:11:62:95:44:26
            X509v3 Authority Key Identifier:
                keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:25:73:bd:c5:7e:1a:b6:32:3c:3b:d9:5d:3e:9c:2b:4c:
         a6:f6:44:50:6c:e2:3f:80:32:0f:37:b0:fd:8c:67:47:8e:ec:
         ec:37:85:37:f9:e0:22:f1:a9:d6:2c:53:7a:71:7d:2b:5f:3d:
         3e:c2:2b:58:f9:b4:2b:c6:73:79:eb:2a:c3:e3:86:a6:2f:67:
         e6:f7:cb:f2:89:0d:de:0c:f0:da:95:e8:30:5c:6c:44:6e:ba:
         35:cf:bd:55:09:a9:70:ef:68:00:a7:e1:39:52:d4:87:57:3d:
         35:e1:62:c6:21:6c:8a:ef:76:dd:c3:14:0a:8e:3d:a5:7d:93:
         e7:40:01:b7:65:b9:af:26:49:9e:ef:68:35:fd:c9:f7:ed:49:
         97:1e:83:77:ac:32:71:b8:01:2d:26:c1:01:c0:57:e9:94:bb:
         e0:4e:dd:b0:a4:bc:78:27:1a:79:59:83:35:5d:f8:19:e3:59:
         87:2c:c4:46:6d:f2:d9:d6:17:f7:7c:ab:3d:06:97:50:61:b5:
         ed:67:18:f2:6a:5c:6f:e7:22:4c:34:48:35:5b:d6:83:2f:75:
         e4:54:67:6a:55:36:a3:53:6e:84:7e:f1:49:19:6f:09:56:2f:
         4b:11:df:dc:a7:67:2e:54:f2:94:00:46:37:a8:6e:6d:ef:ec:
         a8:33:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:30 2026 by rpki-client