Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
File:                     0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json)
Hash identifier:          dlwTXqV9AMyPV1GO4YQpe6ihcCmQhfsWzE5J9dDPgS0=
Subject key identifier:   15:93:32:D2:FC:6F:FB:6F:87:F6:93:1E:69:6F:FD:77:E6:B3:D7:BD
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Certificate issuer:       /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
Manifest number:          E4
Signing time:             Mon 27 Jul 2026 08:41:23 +0000
Manifest this update:     Mon 27 Jul 2026 08:41:22 +0000
Manifest next update:     Mon 03 Aug 2026 08:41:22 +0000
Files and hashes:         1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: rWiIMcyqLEus88OzcFC9cQDQE2+kaAdNv9u4l5/X2Sc=)
                          2: CE1C73F63F8211F1AB237298B0833773.roa (hash: 1dULmPlH8HLClqvcITKjGcpOIi/CUGi4EO79W2+0kTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
        Validity
            Not Before: Jul 27 08:41:22 2026 GMT
            Not After : Aug  3 08:41:22 2026 GMT
        Subject: CN=6a6719b3-a22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:04:dc:a4:55:79:ab:41:81:3c:ac:67:a7:
                    2e:46:aa:fa:c4:ee:b4:d3:e1:a1:c3:69:cf:42:31:
                    c9:ae:67:82:4f:98:bb:8a:a1:61:9d:ff:ea:07:5c:
                    27:1c:12:15:0a:ce:cd:c4:79:2f:51:e0:95:03:62:
                    e0:bd:9d:75:c3:c6:7c:44:15:f1:a6:57:b6:70:6a:
                    09:12:90:43:47:75:cb:3f:e4:01:48:2d:19:e7:14:
                    74:de:0d:32:f1:94:c7:e4:35:a4:08:4a:8f:07:b4:
                    79:13:07:fb:16:1c:9d:e4:d8:98:39:5a:62:9b:cc:
                    8d:fa:83:c8:8f:71:a4:f5:bc:0d:5a:c5:61:ab:26:
                    bc:68:38:5c:ac:6c:d8:80:7b:6e:cb:d3:21:10:31:
                    f4:c2:7d:89:58:cb:83:47:e3:df:43:c2:02:3f:19:
                    5c:e7:5a:8c:69:68:5e:45:06:c7:37:73:51:9f:3e:
                    17:fe:d8:a9:1d:8b:6d:c2:62:1c:d5:db:de:a4:af:
                    7f:a7:7b:6b:5c:1e:6a:eb:9a:2d:c2:55:51:41:28:
                    fa:50:a9:6e:89:8f:c4:84:9d:84:bd:ee:db:dc:3d:
                    80:27:2f:72:50:34:f1:61:10:8e:1f:c6:dc:bf:04:
                    c7:30:c1:6a:b6:89:54:44:7d:49:3a:78:ae:6c:bd:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:93:32:D2:FC:6F:FB:6F:87:F6:93:1E:69:6F:FD:77:E6:B3:D7:BD
            X509v3 Authority Key Identifier:
                keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:85:87:21:c3:4d:59:c8:2b:5e:10:fd:19:e8:25:68:4e:0f:
         9e:08:74:54:94:a4:d3:4b:d2:07:9f:40:a0:64:3b:e0:e1:cc:
         7f:79:49:06:74:08:ca:40:0b:4d:60:40:2f:96:7a:c2:d1:69:
         3b:9f:85:ee:5c:9b:f3:5d:89:e5:68:92:35:11:5a:13:d3:04:
         48:24:69:64:72:b0:f1:ce:3d:db:9d:9c:fa:9c:da:51:c5:d0:
         ee:6c:33:c7:ae:40:ff:8f:a5:fa:b4:85:73:eb:16:d0:74:54:
         5a:27:8c:3c:c9:4a:b2:9d:4c:a5:6b:ef:c7:02:de:d0:39:4c:
         d5:31:38:c3:a0:73:e0:1c:13:66:5b:ee:5b:09:b6:5b:50:42:
         52:5c:d3:6d:7a:d0:9e:9e:5d:7b:bc:eb:e5:91:fd:78:a7:58:
         f7:66:eb:15:48:84:cb:0f:13:8f:70:6a:25:2e:f7:25:a1:6a:
         d6:0d:a8:cf:f8:cb:4f:a9:b1:82:42:e6:c4:c9:a7:f6:d5:2f:
         48:19:f0:57:35:7d:04:3e:85:12:56:6e:ed:d4:15:11:b7:96:
         cb:49:d9:14:a6:e6:de:31:2d:fb:65:f8:11:4d:69:93:75:9a:
         42:a7:0b:be:15:15:f5:03:f3:7d:28:2d:ab:ab:b9:80:92:24:
         41:25:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:02:17 2026 by rpki-client