Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
File:                     -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json)
Hash identifier:          3KnQchsSubKxVfN2QkSexYHSJPIjZiC9SiIkKzXk244=
Subject key identifier:   38:7A:67:38:44:EC:C2:E7:2E:77:DB:45:70:ED:5E:BE:CC:D1:7D:84
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Certificate issuer:       /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
Manifest number:          023D
Signing time:             Mon 27 Jul 2026 04:08:11 +0000
Manifest this update:     Mon 27 Jul 2026 04:08:11 +0000
Manifest next update:     Mon 03 Aug 2026 04:08:11 +0000
Files and hashes:         1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: nGaJzYn1qhG7lRjyfKz23zEE2WOTze5I23XhcFiBSik=)
                          2: 8C7D2730687F11F181765BB26747A888.roa (hash: kFIovixd7sOPjgNTic6Nb0nHzIt+OjJSbtTQAE2k2P4=)
                          3: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: eyr8NymwonEMsBAoYqcO5uIS3VzQALB/L7GTWt3kg9k=)
                          4: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: jsG4A9B1X5RWld/1WjKWMW5kvn6PEfUEqCveLWYyYLU=)
                          5: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: JS/I83lnkJ+yXv//aUKTuv7mn22oJXxijweaV/2/Tbw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
                          rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
        Validity
            Not Before: Jul 27 04:08:11 2026 GMT
            Not After : Aug  3 04:08:11 2026 GMT
        Subject: CN=6a66d9ab-e038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:c7:d2:a8:a7:5c:ca:7f:82:75:75:21:d5:
                    d4:5e:4b:55:a0:84:d7:b3:5f:a0:4e:c3:73:a1:37:
                    a2:22:8b:3f:71:08:26:f3:69:59:a9:4b:9c:e2:db:
                    53:57:dd:83:61:db:b1:72:ac:70:c7:71:21:49:c4:
                    40:93:19:ca:dc:0f:30:c6:3e:e5:5c:d5:66:97:37:
                    4b:c8:25:55:65:6f:d5:a9:86:87:df:1e:15:a7:17:
                    aa:f0:57:c7:b4:b9:0c:07:f8:33:f6:59:c7:dc:66:
                    5a:db:92:77:9d:53:d3:37:c2:9f:99:29:ef:81:82:
                    d0:e4:ff:15:b4:73:79:07:d5:95:d4:92:7e:f7:37:
                    6f:58:1c:3d:4e:58:fd:21:b5:1c:83:e3:c5:e9:73:
                    53:cb:5a:69:2e:15:30:85:af:30:8b:9f:19:a1:98:
                    f4:bf:b6:db:1c:0e:9a:df:2e:de:6a:cc:6c:94:e1:
                    74:4c:8b:ea:b9:19:dc:d4:f2:52:08:0d:44:78:78:
                    6c:17:fb:a0:e1:df:52:90:8c:35:d0:6c:1b:59:58:
                    7e:ea:62:49:7a:e3:42:34:4f:70:a2:91:a6:4a:0b:
                    07:0b:d4:c2:d0:11:4b:4f:d5:7c:52:1f:11:ec:14:
                    5e:04:c4:9d:d4:42:2d:52:4b:ab:8f:e7:6a:3e:2b:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:67:38:44:EC:C2:E7:2E:77:DB:45:70:ED:5E:BE:CC:D1:7D:84
            X509v3 Authority Key Identifier:
                keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:8b:bb:5d:fa:ac:5f:fd:0b:0f:c1:17:c3:86:3a:87:5d:
         00:23:02:91:e1:ca:75:d2:07:89:d5:f3:2d:53:7e:d1:06:f6:
         05:b3:85:fd:c2:e0:72:85:c9:0b:5d:44:f0:3f:03:dd:9e:2a:
         67:89:a4:73:68:b4:07:d2:ad:ad:51:c0:5a:c3:c3:a6:80:18:
         56:bc:6a:59:4d:a2:fb:df:c5:8a:d0:15:ea:8b:c6:c2:ac:40:
         9b:30:27:ee:39:af:7c:60:35:b1:f3:3d:42:cb:42:32:23:05:
         bf:9e:09:db:b8:99:f5:a8:65:4a:82:78:cb:ae:8d:3e:89:63:
         62:b2:7b:20:68:1a:4a:8a:b7:a3:26:33:c9:43:70:c9:13:67:
         3a:c3:55:52:a1:d3:b3:8e:8b:80:00:2c:d5:b1:c0:ca:ce:c2:
         82:5b:90:6b:0c:53:f5:02:82:dc:e9:d5:cf:fe:db:aa:6a:0c:
         d5:65:75:df:0f:c6:4d:a5:f3:d1:76:d8:91:c3:10:d9:81:03:
         61:69:91:c5:a3:7c:d1:b5:e4:46:1c:30:86:4e:02:94:66:16:
         35:d2:d2:0e:11:f0:65:a8:48:51:24:a2:83:8d:c0:ea:f7:a1:
         5b:8f:56:9a:2f:12:a5:5b:18:4f:47:10:8e:7f:e0:3c:be:4e:
         02:ad:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:50 2026 by rpki-client