Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
File:                     faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json)
Hash identifier:          CubWbUtvtYFrN0CGMN+EhRnhq4XdIhP3FzVZwZN7PyU=
Subject key identifier:   17:E4:02:E6:2B:04:A9:06:61:E5:36:7C:E3:51:70:08:57:91:5C:B2
Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
Certificate issuer:       /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Certificate serial:       1125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
Manifest number:          1113
Signing time:             Tue 28 Jul 2026 17:22:58 +0000
Manifest this update:     Tue 28 Jul 2026 17:22:58 +0000
Manifest next update:     Tue 04 Aug 2026 17:22:58 +0000
Files and hashes:         1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: nLkPzIKYFp4PMB1TWBF9C/qirIIBXIH2wqsuU9e6+7I=)
                          2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: fd0G1Zn2iUvsWfsjyzVAL9KEbxpQOhqZpnlGAiKgfII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
                          rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4389 (0x1125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
        Validity
            Not Before: Jul 28 17:22:58 2026 GMT
            Not After : Aug  4 17:22:58 2026 GMT
        Subject: CN=6a68e572-d315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:96:db:6d:f1:6a:23:ba:cd:da:03:c8:96:
                    a2:7c:ba:51:b2:cc:10:3a:19:55:e5:ed:88:53:2b:
                    f4:28:33:58:9c:c6:a3:17:30:41:26:32:27:b7:5b:
                    29:7f:70:c9:bc:c2:20:21:00:80:c7:80:8b:f2:19:
                    b0:72:99:d7:74:ab:a7:40:de:cd:eb:d7:e9:78:9f:
                    bb:08:ee:ab:7c:3e:31:c1:55:40:88:ab:84:99:04:
                    e0:1c:93:48:36:01:f4:bf:bc:21:fb:de:fd:26:ca:
                    3d:6b:04:74:37:63:53:75:59:ba:9b:41:a8:0a:73:
                    56:c0:87:2c:08:6c:88:8e:54:ca:62:50:43:7d:f2:
                    41:f0:43:0a:7b:8f:68:b5:c7:f5:bd:52:e0:69:45:
                    08:b1:ef:fc:de:54:d5:07:56:7e:34:f0:35:78:56:
                    8e:a7:af:f7:34:4a:cd:5c:21:cb:63:f8:be:2e:43:
                    96:b5:29:83:85:c5:a5:61:24:6b:5d:df:ec:9e:b7:
                    80:a8:14:c4:0d:3a:47:7c:40:2a:c0:0c:c3:8f:28:
                    54:92:85:47:6b:7f:44:ea:e3:ac:4b:81:d2:5a:b7:
                    0e:a5:2b:d0:21:d4:2e:7d:c3:74:80:bd:d3:8a:6b:
                    9c:8a:52:54:82:20:33:80:9f:12:6c:48:7c:47:5d:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E4:02:E6:2B:04:A9:06:61:E5:36:7C:E3:51:70:08:57:91:5C:B2
            X509v3 Authority Key Identifier:
                keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:15:47:2f:5f:06:01:f4:dd:3f:ce:cd:74:d8:06:6e:a2:
         84:72:98:62:7e:62:ee:9c:30:65:ab:fd:9f:e4:d4:8d:05:c1:
         52:94:10:57:35:28:a7:a9:b4:c2:00:a6:bd:83:87:9e:71:36:
         2d:00:e4:47:f2:d2:dd:81:ea:f0:95:7c:7a:b5:fb:49:d9:ed:
         65:e1:58:27:46:e4:fc:4b:f7:20:fa:87:7c:b7:d8:bf:f9:e9:
         03:e3:67:c8:67:25:65:74:db:5f:ba:06:08:44:35:32:8b:51:
         ff:ab:b8:24:fb:62:ba:82:bc:cf:62:ca:20:dc:8c:6a:9d:c0:
         f8:73:d0:97:32:c6:3a:cf:8c:34:ce:cb:45:d5:f5:eb:19:93:
         f7:db:e1:9e:2a:0c:58:a0:03:75:31:e6:59:81:54:f7:26:c7:
         b5:0a:c6:21:10:eb:20:77:24:aa:96:26:87:13:2d:9a:ca:b1:
         2f:ce:10:0a:7e:6d:67:23:91:06:59:2b:35:2e:c4:9f:62:e7:
         79:67:6c:b0:77:a4:4a:aa:7c:ae:54:24:10:b5:8b:f5:37:b2:
         e7:90:e1:bf:53:71:f2:97:6d:36:7a:89:39:c3:38:5c:ea:cd:
         7e:65:fb:08:dd:8a:cc:0e:08:0d:18:81:75:c5:07:40:c9:d5:
         d2:59:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:18 2026 by rpki-client