Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File:                     T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier:          TF6Ouzbyo5fs7nHr4/6rCfBPtYBF9HmxlMb4OqKetqA=
Subject key identifier:   D3:84:42:58:DD:02:A6:34:C7:E6:07:CC:16:E9:BE:8E:B1:19:D5:F4
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number:          019F
Signing time:             Mon 27 Jul 2026 06:02:22 +0000
Manifest this update:     Mon 27 Jul 2026 06:02:22 +0000
Manifest next update:     Mon 03 Aug 2026 06:02:22 +0000
Files and hashes:         1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: dw9G+sp2z6qRNpVvuxaQbkLMHoGdvcowyYsJ/aqntR8=)
                          2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: OLmzaxlvTJHTiGS7nwNh94NwHubP58y5RNV7lSRqby8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Jul 27 06:02:22 2026 GMT
            Not After : Aug  3 06:02:22 2026 GMT
        Subject: CN=6a66f46e-70bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:b4:2a:f6:1f:fb:4c:00:31:eb:61:dd:ec:
                    2d:bf:2b:68:16:05:6e:b2:c2:32:e7:30:73:9b:cd:
                    47:2e:c0:8f:d8:e3:a1:91:72:8e:32:60:d3:11:4a:
                    af:d4:b7:2c:9c:4e:9c:e0:19:fd:ba:62:79:73:6f:
                    da:c5:04:15:7e:3f:5b:73:2b:ae:f0:9f:1a:34:5d:
                    3d:44:6c:d6:44:af:95:57:66:c8:0e:bc:59:db:67:
                    5d:ee:6e:9f:36:da:b9:b4:73:e7:7c:ed:92:58:2f:
                    39:3a:7e:f1:70:f0:5a:ae:33:ac:5b:d4:e3:40:b1:
                    81:30:c4:b7:38:14:5b:7c:6b:b8:b7:fd:6f:e3:82:
                    6f:64:75:53:7f:30:75:88:c0:58:1b:8a:75:13:da:
                    ec:f0:0d:11:70:91:b8:c4:ac:9a:f4:d8:cf:76:dc:
                    fc:68:f5:24:b6:da:50:cb:f1:cf:fa:47:c3:c3:57:
                    80:9a:da:1d:1b:e1:90:1e:09:07:56:29:b8:d2:e5:
                    3c:b3:7e:dc:64:5c:21:b6:59:10:15:97:3b:02:18:
                    aa:89:2f:68:5b:77:f9:22:ee:d8:cc:36:90:1c:07:
                    1f:b3:e9:11:d5:49:d9:1f:25:50:5c:72:88:1e:d7:
                    85:80:40:e9:7d:f7:be:e2:6d:0b:25:01:1a:05:b0:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:84:42:58:DD:02:A6:34:C7:E6:07:CC:16:E9:BE:8E:B1:19:D5:F4
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:eb:79:c9:18:13:b1:41:b2:44:9b:92:aa:92:ad:15:8e:
         bd:79:8e:1d:d9:1f:55:47:d1:e3:ed:3b:3c:9b:2b:9d:32:c9:
         84:72:ee:7f:73:97:cf:0f:fe:26:73:1e:dd:d8:aa:df:dc:e4:
         a3:e9:72:27:36:f4:d1:35:84:f5:e0:06:b6:00:19:75:b0:11:
         d5:8e:90:12:05:bd:f7:e1:39:08:9b:dc:64:3d:33:17:56:18:
         3b:d2:7b:00:a8:ca:d5:48:32:9d:b3:98:19:8f:32:2f:8b:fe:
         74:ea:29:01:51:28:56:de:8d:a5:09:6d:ba:42:31:39:c2:2b:
         61:77:c2:ee:b9:e0:e0:dd:3b:86:5e:49:d4:02:e7:32:37:32:
         89:e7:b0:97:14:0f:47:5f:1e:48:e5:41:b8:8f:97:cd:1b:50:
         ad:47:1b:f0:65:06:19:99:6a:51:87:43:b3:1d:b1:23:c4:83:
         02:21:71:bf:77:aa:8e:90:47:6b:03:00:b3:50:fe:11:44:e0:
         7d:5a:07:52:94:e2:04:2d:22:34:c4:e5:3b:e2:9f:dc:83:77:
         ea:15:d4:9d:3a:b2:ba:17:38:77:9c:f0:88:67:ea:c9:d9:35:
         9e:64:57:b9:a0:ed:eb:2f:03:96:31:75:0c:ff:0d:28:d3:20:
         a4:cd:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:06 2026 by rpki-client