Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft
File:                     1vZclkuOj1C0u4fpTxStruksJyw.mft (raw, json)
Hash identifier:          izTPj1+pVhy/U6wc3Z0VZxFdg3L+XiJsiB2UdJCu+ik=
Subject key identifier:   3F:1D:FA:3B:F8:0F:84:BB:A0:41:59:04:1D:1E:82:6C:30:19:B1:B1
Authority key identifier: D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C
Certificate issuer:       /CN=A91F5183/serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft
Manifest number:          A4
Signing time:             Mon 27 Jul 2026 09:22:44 +0000
Manifest this update:     Mon 27 Jul 2026 09:22:43 +0000
Manifest next update:     Mon 03 Aug 2026 09:22:43 +0000
Files and hashes:         1: 1vZclkuOj1C0u4fpTxStruksJyw.crl (hash: Xw4NdsAtMUZ1WNUIKjwfr1qSLGA7mf8l7j4b371kl3k=)
                          2: 1DE4BA468E9011F08491DD13C4F9AE02.roa (hash: tcH2rA8JsGBD1HEVBiG0Z7AYEFoy9FoXJ9VwdK8MFvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl
                          rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5183, serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C
        Validity
            Not Before: Jul 27 09:22:43 2026 GMT
            Not After : Aug  3 09:22:43 2026 GMT
        Subject: CN=6a672364-253e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:f9:98:29:01:ac:5d:80:48:4f:90:1e:6a:
                    31:a6:18:c0:a8:80:7b:b6:13:02:3d:a5:4d:a3:49:
                    51:ca:97:48:41:8d:b0:ee:6f:bb:b4:b9:01:8e:a8:
                    db:98:32:2f:3b:90:37:c3:01:a0:a3:85:52:ce:7b:
                    5f:82:0c:c3:55:f6:df:84:c5:53:dd:59:5a:f6:5b:
                    50:85:0b:11:6a:82:c7:e4:cc:e0:cb:59:f2:14:ea:
                    7d:02:fd:c2:76:70:18:2d:d8:5d:68:50:f9:42:cd:
                    d0:50:5c:db:0f:72:b4:3d:fc:12:ba:9e:06:b9:0c:
                    bb:3e:f6:4b:4c:2c:7f:05:bd:c1:cf:1c:c9:31:4f:
                    8f:d1:2e:c9:a5:f0:1e:42:77:b4:1b:82:ef:63:d3:
                    27:07:61:58:b9:22:80:09:b9:42:35:b3:68:29:20:
                    12:c4:9e:62:a6:9c:ed:aa:ba:25:4a:1e:5d:a7:e7:
                    e5:cf:df:27:28:57:51:67:f2:d8:b6:6c:c3:15:7f:
                    e8:f0:84:68:bb:b7:de:1d:19:b5:40:70:34:60:35:
                    ae:17:82:9f:b3:b4:32:fb:eb:ad:ff:77:2b:30:00:
                    b4:3e:41:be:71:ec:40:aa:c1:28:d5:0e:a6:da:72:
                    ab:6a:05:d3:56:20:a3:01:a1:dd:ec:25:fa:fb:4c:
                    ba:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1D:FA:3B:F8:0F:84:BB:A0:41:59:04:1D:1E:82:6C:30:19:B1:B1
            X509v3 Authority Key Identifier:
                keyid:D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:8e:62:2d:56:24:ed:75:95:a5:f3:11:18:e0:b4:99:de:
         a9:df:c5:fd:b2:a8:b7:e7:17:1b:cb:bf:39:3b:c5:2e:5a:9d:
         26:4a:20:bf:fb:20:b9:b7:d9:6b:a7:2d:4f:54:ac:2a:a3:8d:
         c2:a2:11:04:f5:82:04:45:74:cd:49:74:02:b1:5e:67:d4:74:
         51:10:10:e5:54:6d:ce:08:00:64:ba:e9:4e:05:6c:87:71:5d:
         88:86:f1:cc:fb:16:37:18:00:aa:27:65:ea:d7:56:27:0f:b7:
         73:38:25:e7:be:f5:0d:99:98:bf:b3:17:b5:3b:46:1a:f4:75:
         a2:33:aa:03:ae:a0:ff:08:80:c6:e3:7b:f9:fd:0a:f0:32:59:
         8c:78:d0:2a:65:22:41:71:0a:bb:78:c9:be:e4:78:66:11:bb:
         de:d6:e9:9c:40:61:21:2f:51:49:80:7f:78:97:a7:c1:f7:2c:
         d7:ee:90:7c:c1:6c:50:a4:4b:ef:36:e7:d7:1b:c9:91:d6:ba:
         cc:aa:31:9e:25:c2:33:48:ed:16:ad:17:96:2e:fa:e9:34:39:
         45:9f:16:0c:1f:7b:22:f2:11:85:07:cf:1f:f3:2a:ee:21:01:
         69:27:21:17:b8:f9:bf:28:4a:a0:80:67:40:c8:18:70:eb:59:
         e4:cd:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:39 2026 by rpki-client