Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
File:                     9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json)
Hash identifier:          fi5nA9RdN3bqCfJouBhK2rdfzmEFUdmjltJy8goUMcw=
Subject key identifier:   C0:F0:27:7F:E1:20:38:52:82:8B:41:FA:6B:00:17:82:A9:7F:7C:4F
Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Certificate issuer:       /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
Manifest number:          015E
Signing time:             Mon 27 Jul 2026 06:52:40 +0000
Manifest this update:     Mon 27 Jul 2026 06:52:40 +0000
Manifest next update:     Mon 03 Aug 2026 06:52:40 +0000
Files and hashes:         1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: UQCOtP4Uq4qNFv+AA/uxx470KynqaFrs8l6OvV0OeHk=)
                          2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: Y4eMPkfyTXrtKvA+X6u1unLZ0mgOp+sFenl0Spk8Log=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
        Validity
            Not Before: Jul 27 06:52:40 2026 GMT
            Not After : Aug  3 06:52:40 2026 GMT
        Subject: CN=6a670038-4e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:60:64:2e:08:f9:f0:6e:8b:ea:63:ef:40:
                    a1:fe:d4:0d:80:53:f6:bb:d0:5c:ee:14:cd:29:5a:
                    27:3b:88:ba:30:5a:fb:9b:30:29:f1:75:53:f4:98:
                    aa:a2:97:72:0d:f4:6c:f6:cb:44:70:f5:83:41:cd:
                    c7:ec:20:94:e8:04:c8:96:a8:5c:7f:15:80:c6:2b:
                    e3:c0:b6:d6:b4:a3:e6:bf:1a:f9:ba:fd:bb:25:92:
                    f1:2c:2e:4e:26:c3:38:b3:3f:75:a9:62:5d:e9:9c:
                    b0:38:11:de:a5:45:01:ce:60:87:7d:1c:3b:95:9a:
                    d5:56:f8:2d:24:f9:d9:ad:3f:e3:ed:2c:7e:1a:00:
                    14:d4:97:1e:a6:af:dd:68:fd:80:92:b3:d4:51:01:
                    af:68:07:35:a3:1b:34:7c:fd:df:a4:f4:f4:a0:f3:
                    4a:b2:1b:8c:68:3f:3b:da:67:92:64:55:40:aa:d2:
                    29:bc:a4:ea:ca:12:4f:fd:c0:74:af:53:99:52:33:
                    c4:df:b0:d7:a6:88:27:b4:a0:02:32:03:f3:ad:59:
                    b1:64:fb:06:83:dc:98:5e:82:89:07:f2:58:8c:91:
                    66:f7:7a:28:c9:91:1c:c6:01:6c:14:ac:63:ce:4f:
                    fc:d9:1e:c3:07:b8:24:99:61:b5:2a:4a:ef:dd:07:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F0:27:7F:E1:20:38:52:82:8B:41:FA:6B:00:17:82:A9:7F:7C:4F
            X509v3 Authority Key Identifier:
                keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:62:10:e6:98:e8:e2:ce:6c:d3:bb:21:bb:35:92:4d:62:
         8c:77:2c:93:67:b3:32:d7:b7:6c:3a:da:9b:66:6f:f2:ac:b4:
         b7:7e:81:f2:ca:84:2f:c5:f7:18:22:22:cf:0e:a6:3d:32:3a:
         60:ab:e4:21:9b:cb:e4:23:e0:8c:1f:83:a9:52:d6:39:dd:2f:
         a9:7d:e0:80:73:62:4a:c1:a8:8f:e4:66:51:ae:3e:b9:57:54:
         f1:e3:a8:f6:f2:66:a8:73:b2:b9:3f:16:72:bd:22:ef:b0:95:
         88:3b:b5:b0:25:d8:d7:55:ba:cc:85:db:2e:ed:3d:52:fd:ab:
         19:8a:43:88:4b:b3:06:bc:21:52:9f:80:f9:2a:58:60:b1:d6:
         b8:ee:5f:52:be:9e:80:a9:b4:87:0a:b0:72:88:83:2b:9e:45:
         d9:ec:0f:d1:80:ce:14:65:dd:2d:0b:5e:45:8c:ed:33:cf:a7:
         55:6f:38:fd:85:b4:4a:e1:5c:7a:9d:3d:60:0b:0f:69:41:bb:
         d3:8a:ec:8c:b1:0e:12:42:73:9e:ee:01:bd:3b:4a:d5:5c:9d:
         da:32:ff:46:6e:0d:f5:6f:3f:cb:4c:be:b3:1e:26:c2:25:9d:
         99:97:23:e9:1a:4f:70:57:43:af:bc:a4:95:f5:87:dc:0b:47:
         a4:94:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:02:11 2026 by rpki-client