Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
File:                     Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json)
Hash identifier:          m4sl1QV1LOlrnT5soTo28DCPRYj/mvBeCiBmP6F5Cl4=
Subject key identifier:   6A:5B:AB:1D:6A:79:55:A3:E5:BC:A5:DE:8F:71:08:19:7C:9E:B2:65
Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
Certificate issuer:       /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
Certificate serial:       0C62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
Manifest number:          0C59
Signing time:             Sun 26 Jul 2026 19:04:02 +0000
Manifest this update:     Sun 26 Jul 2026 19:04:01 +0000
Manifest next update:     Sun 02 Aug 2026 19:04:01 +0000
Files and hashes:         1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: 6VXGHn3iu2MClQ7fhFIW7mVcKfhoaxJoTzzjCpA6Nng=)
                          2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: y7I7T2g0mI0lsLqMSMjVPNFG5gKcdIMy2Rd0f1B2C0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl
                          rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3170 (0xc62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
        Validity
            Not Before: Jul 26 19:04:01 2026 GMT
            Not After : Aug  2 19:04:01 2026 GMT
        Subject: CN=6a665a21-6c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:93:57:76:7e:6c:a6:a6:d2:44:41:cd:b8:
                    0e:6a:45:15:5e:3c:9a:50:d8:ad:5e:23:10:6d:c5:
                    8a:d0:7e:ed:0f:1b:fd:f0:86:9a:c2:22:d6:be:ac:
                    8d:94:96:b8:e4:52:16:d8:3e:b2:d9:1d:73:d6:8f:
                    38:ed:e7:09:fb:6a:4f:89:a7:33:9e:c9:af:c6:dd:
                    bc:0d:9a:c4:ae:8d:d0:78:c2:74:71:cf:43:ec:7f:
                    78:49:ef:6e:bf:84:eb:66:f7:e7:ac:ff:f0:ff:51:
                    21:98:3d:e6:ee:ec:a4:b2:1a:d1:aa:97:12:75:77:
                    d3:83:c1:1a:89:e6:91:0f:e0:3e:b5:68:65:3e:53:
                    86:ed:82:b9:56:03:8c:15:dd:d2:4f:5d:3b:08:a8:
                    64:64:2f:ab:2d:46:8b:20:ca:bf:07:69:1e:93:b6:
                    4e:02:6b:95:94:1b:78:63:71:d3:54:26:76:c8:9c:
                    da:53:3f:4d:38:05:65:43:80:e0:90:dd:ce:4b:c3:
                    c3:8c:b4:85:fe:5a:cb:ae:f1:b0:8b:23:fa:2d:52:
                    4e:4c:b1:b8:14:71:db:0f:0f:f2:0e:69:09:37:24:
                    c2:8d:d7:cb:48:41:70:09:4f:3c:92:29:8f:82:d0:
                    1e:4a:43:36:2c:47:31:c5:c1:28:7a:33:56:79:0a:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5B:AB:1D:6A:79:55:A3:E5:BC:A5:DE:8F:71:08:19:7C:9E:B2:65
            X509v3 Authority Key Identifier:
                keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:29:c8:64:ca:1e:79:5f:1a:70:49:c9:6d:76:d6:f9:b9:
         69:3e:ff:66:e7:90:91:25:c1:e8:cf:fb:c7:f8:bb:76:e4:a5:
         f1:74:e0:8c:29:ed:5a:bc:41:12:a5:99:d9:29:2e:56:96:81:
         4c:24:f4:8a:3b:27:5c:18:86:9b:a5:bc:00:da:2b:62:3b:73:
         f2:35:9c:4f:b1:e7:66:64:f1:c1:1f:9d:19:8b:d0:cf:fb:43:
         cd:a1:64:3e:28:f0:81:2f:8d:de:34:bc:ac:55:f9:94:e2:0c:
         8f:c0:19:85:09:aa:5b:9e:a9:03:50:e7:cd:43:87:ff:5e:76:
         b6:b9:a0:4c:e9:5e:0e:9a:10:60:df:70:6a:51:df:82:75:17:
         ca:5b:75:a7:95:af:12:ac:a6:9b:99:d7:5a:e5:63:d8:c2:d6:
         9e:b2:7e:a4:b7:13:70:69:db:21:8a:f7:09:cb:5a:15:55:b9:
         de:8a:28:f7:16:dd:a7:b7:83:f4:5a:a6:f8:08:66:64:45:62:
         3c:26:ed:26:15:62:cb:d9:1d:7f:e2:29:3d:1e:dc:e3:e5:94:
         35:53:8c:c5:10:6b:c3:66:37:97:84:83:f9:34:1f:62:35:b0:
         0a:f8:c7:74:93:cd:03:a4:91:78:64:f6:89:41:ad:8e:9a:23:
         bc:14:b6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:47 2026 by rpki-client