Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
File:                     ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json)
Hash identifier:          L0TwR5eo3g107BCjFEzgF9ohyrsTsVIlw08QGwG6PJw=
Subject key identifier:   0C:B2:D0:AA:C9:C1:79:17:C7:0E:1F:16:F7:0E:EC:45:70:C9:B4:A5
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Certificate issuer:       /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
Manifest number:          028F
Signing time:             Wed 29 Jul 2026 02:50:06 +0000
Manifest this update:     Wed 29 Jul 2026 02:50:05 +0000
Manifest next update:     Wed 05 Aug 2026 02:50:05 +0000
Files and hashes:         1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: CzccybsLMxhVfPDiUzLvX7G9ZHR9Ijht20jJd65UixE=)
                          2: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: iYPsjiDlnP7T4RRO1PS1UwzoVnwYvaILMXvi6/quXcc=)
                          3: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: b4J/mYBm2hWS1nmxPAt6Hfta5HnSTHjYDCufGmuVc3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
                          rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
        Validity
            Not Before: Jul 29 02:50:05 2026 GMT
            Not After : Aug  5 02:50:05 2026 GMT
        Subject: CN=6a696a5e-bd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:3d:cf:69:ca:25:87:e0:7b:c4:01:26:10:
                    88:4a:d1:c9:ad:bd:d9:e5:b6:e0:aa:5c:23:8c:c9:
                    15:53:81:97:53:bd:c4:4a:e0:97:1a:98:50:f6:07:
                    34:b5:1b:42:9b:53:1c:80:c3:0b:30:cc:27:dd:a4:
                    2d:d3:97:02:53:f6:05:4d:b6:9d:26:b9:47:58:c7:
                    66:38:d7:fa:bf:ba:27:12:07:0b:48:76:e7:a4:26:
                    8f:f4:dc:97:ef:b1:a4:a2:7f:c2:c4:d8:fc:ff:07:
                    c0:7a:20:cf:36:61:ec:66:14:6d:b2:62:b1:48:fb:
                    3f:ff:44:68:a6:2a:33:94:2c:a8:b0:a6:41:c7:4a:
                    11:31:de:d2:c2:30:33:7e:ca:68:72:f7:b0:f3:de:
                    22:14:e1:73:f8:fe:ad:08:17:27:17:07:be:2a:90:
                    22:6b:ac:ff:f7:0d:ff:f5:34:c0:67:3a:5d:f0:25:
                    d5:94:c4:69:35:2e:28:21:52:ba:45:e9:15:11:a4:
                    c8:c6:ac:a4:83:fb:35:5f:c2:1d:61:66:3b:9d:bf:
                    c0:9f:49:af:b9:4e:bb:3b:6d:24:f5:1b:f5:99:a8:
                    d1:bb:96:2b:a8:44:db:9c:2a:85:4e:be:75:e9:94:
                    b6:18:cf:78:dd:d2:c2:9a:bf:71:09:a4:57:6f:69:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B2:D0:AA:C9:C1:79:17:C7:0E:1F:16:F7:0E:EC:45:70:C9:B4:A5
            X509v3 Authority Key Identifier:
                keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6b:8c:0d:16:82:c8:bf:bc:8d:97:b8:0b:1b:76:cf:7b:58:
         d7:1a:a5:db:20:55:12:52:05:42:d4:38:cb:55:01:75:88:85:
         cd:fa:4c:33:e0:14:70:f6:20:74:68:45:7c:0e:f5:b2:bf:29:
         6b:3f:93:36:33:8f:7d:0a:4c:c9:10:85:30:79:08:e4:b4:f1:
         e2:23:29:5f:a0:fc:5b:8c:92:44:57:f0:3d:2b:90:4f:ef:2d:
         ac:c9:1d:76:55:b6:bc:21:1b:e6:10:c8:9f:16:fb:01:1c:e5:
         67:98:66:31:b3:b2:24:f9:c0:ba:22:b5:0f:3a:e1:b9:05:10:
         8c:f9:ec:9b:9c:a2:4c:eb:25:63:27:44:aa:5d:07:fa:e6:dc:
         fe:47:c4:d4:9d:c9:92:de:58:63:b8:da:71:0f:9f:9f:7e:5a:
         45:5e:97:48:10:63:b6:6c:c9:47:fb:d6:03:c7:6a:04:ed:8a:
         01:b7:a0:b5:ef:50:df:b6:ab:2a:da:0c:01:7d:f1:50:3a:39:
         bb:f8:be:ae:5e:26:52:ca:f5:2c:cf:91:d8:0d:03:2a:6a:37:
         3f:ac:32:fb:ca:91:5e:05:01:af:e6:c3:74:23:d7:a0:5f:f7:
         76:f1:d5:03:11:b9:ec:f4:69:14:36:04:d7:8a:fd:d2:cc:e7:
         12:ec:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:16:57 2026 by rpki-client