Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          9dmWCbZGVaf7HE1HbOWmVx3OBgYvjPouRSLCRP0jNg8=
Subject key identifier:   45:4B:C5:58:4B:1E:0D:ED:7E:60:87:92:B9:88:69:0A:F0:26:65:62
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          0209
Signing time:             Mon 27 Jul 2026 04:46:07 +0000
Manifest this update:     Mon 27 Jul 2026 04:46:07 +0000
Manifest next update:     Mon 03 Aug 2026 04:46:07 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: kofuuuhjGJXd3aD1VCTkOzIF/g/6gLsuCq8bdy9lakA=)
                          2: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: 2pNCzrFLeuNwJ+o+omJeHhkXCESRdRl7rsiGuuIXYT0=)
                          3: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: 5gWMY2ABlQc7NzKLI4CrxZ0mtja8StGBiRjgg1qjDGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Jul 27 04:46:07 2026 GMT
            Not After : Aug  3 04:46:07 2026 GMT
        Subject: CN=6a66e28f-09a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:dd:df:b9:25:6f:86:6e:05:f4:cd:32:f1:
                    01:6d:44:06:f7:67:ba:78:ad:49:ad:37:ff:16:90:
                    eb:03:a4:32:d2:10:bf:97:93:48:0f:cb:ca:0e:b3:
                    07:97:d6:66:a2:30:8f:ed:05:a3:f0:b9:f5:0e:45:
                    e1:cc:f9:5b:e9:c3:f6:09:d2:40:fa:d2:15:20:20:
                    3b:09:3a:67:4d:7b:5b:fa:0f:7b:6f:0b:6b:b6:12:
                    2b:7c:e4:54:5b:aa:12:ed:2c:cf:b7:7a:3a:02:dd:
                    61:c5:c9:2e:db:1e:c2:7d:e8:9f:41:59:5b:e1:fa:
                    24:cd:40:a0:37:fe:77:2a:8c:e7:55:4d:06:89:b9:
                    fc:e3:20:27:32:3d:a5:ec:36:a1:98:f9:43:63:ff:
                    80:28:75:cd:5f:f5:87:77:86:c5:67:19:97:ff:6b:
                    26:0b:0b:60:02:28:77:c7:89:5f:8d:15:09:7f:fc:
                    25:74:fc:ce:97:29:00:35:aa:82:a5:69:a6:41:d6:
                    a2:65:1a:9f:8c:1d:a1:ef:a0:6b:61:9e:97:ae:2d:
                    1d:82:c7:d7:46:c8:41:d1:4e:1b:a6:de:63:f9:2c:
                    9a:f0:58:a8:9e:f4:54:a3:f3:4a:11:cf:bc:b7:46:
                    07:a7:2a:2e:20:15:48:d8:d7:0c:ed:90:50:99:fd:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4B:C5:58:4B:1E:0D:ED:7E:60:87:92:B9:88:69:0A:F0:26:65:62
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:98:0a:f7:5f:5c:f1:0f:5d:0f:73:4e:c5:fa:ef:4e:59:
         64:c3:73:54:1d:40:bc:0d:fc:77:7c:8b:f3:9c:c7:e9:38:39:
         6c:6b:2e:df:62:8e:60:cb:25:96:aa:ab:29:2c:3e:fb:96:62:
         b4:75:d0:a7:74:74:ce:38:e8:1c:ca:d3:c0:d3:6b:00:21:6c:
         38:96:59:25:17:df:7c:fd:eb:8c:59:7b:ab:df:32:22:d2:ba:
         f2:b6:6d:f9:76:ea:9b:86:7b:b1:8d:6f:62:7d:59:0d:70:99:
         27:ff:5c:1a:c5:17:21:88:97:52:a5:ed:1e:0c:31:ae:b5:86:
         94:63:46:20:30:e7:4e:ed:32:77:3c:eb:5c:f2:54:7f:37:d4:
         4d:b9:16:ca:fb:e6:64:6e:16:36:d2:0c:aa:a7:3f:db:22:32:
         05:4a:23:78:2d:58:70:a3:57:6a:3c:6c:84:13:50:88:8a:2b:
         70:c8:ad:50:66:14:75:df:a8:6f:f4:50:23:fb:7b:86:e2:24:
         6d:35:31:93:09:08:23:09:2b:af:7e:7b:cf:50:d1:15:4a:9f:
         97:59:3d:91:7b:d2:2f:52:24:f9:18:54:b2:fa:06:99:a9:8f:
         42:92:48:15:02:bd:b3:65:74:f7:44:16:a1:13:4e:57:6e:b4:
         88:16:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:30 2026 by rpki-client