Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
File:                     9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json)
Hash identifier:          FOqBYPcC7sWBNXFljaWnyyLg+Or6eKBmFmKkegMQTqc=
Subject key identifier:   05:B8:99:C1:4F:3A:A0:A2:74:44:9A:9A:7F:8D:A5:3D:96:DC:47:93
Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
Certificate issuer:       /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Certificate serial:       04D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
Manifest number:          04D2
Signing time:             Mon 27 Jul 2026 00:46:45 +0000
Manifest this update:     Mon 27 Jul 2026 00:46:45 +0000
Manifest next update:     Mon 03 Aug 2026 00:46:45 +0000
Files and hashes:         1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: bjF9yFOqqlwMOwTfhGQWkyUsYjfKX+MGFrGZRfw/m6M=)
                          2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: jsBQ4IjJHGtGDAZLpB0JonWlKEkmPOsB+LjjK4ifeUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
                          rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
        Validity
            Not Before: Jul 27 00:46:45 2026 GMT
            Not After : Aug  3 00:46:45 2026 GMT
        Subject: CN=6a66aa75-04fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:82:3c:88:78:51:8a:08:ea:b3:29:3d:2b:
                    5c:46:09:77:58:b8:b8:d1:73:30:4a:78:14:31:a7:
                    5b:84:e9:2f:46:21:72:4f:03:a1:cf:01:e5:9b:15:
                    50:e6:7d:f0:03:ea:a8:86:6e:f8:65:6c:5b:62:9f:
                    0e:88:7a:76:e1:b2:6d:5e:1d:9b:19:ea:97:10:3d:
                    80:24:23:8e:a0:79:67:c1:1b:70:3c:57:90:50:0a:
                    07:4a:41:40:a1:48:26:e0:14:ff:3e:be:c4:3e:f9:
                    29:ed:39:f1:4b:1d:75:68:13:2a:f0:8b:5f:3a:b8:
                    9f:45:ee:08:c8:d0:e1:70:f4:76:4c:bc:a0:16:c4:
                    7d:67:38:1d:80:ac:2c:bf:a4:4c:c7:54:4e:d1:98:
                    bd:bc:29:c3:e3:f7:5b:8e:eb:ab:3f:ce:09:aa:c3:
                    3d:47:3f:f2:ce:9c:0a:68:da:2e:f0:fd:41:13:b9:
                    9e:d3:b4:9a:b2:92:ec:25:e8:32:ab:35:a2:76:cf:
                    bb:ae:80:bb:5c:df:88:20:8d:73:61:60:b4:3d:e2:
                    03:46:02:32:bb:3a:be:b3:a3:a3:da:90:29:e8:6f:
                    31:e2:bd:b0:08:bd:fe:03:5a:d3:e4:9f:fe:81:c4:
                    b6:0f:e0:cd:1c:6e:07:92:e6:0a:e6:a5:fd:d5:f0:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B8:99:C1:4F:3A:A0:A2:74:44:9A:9A:7F:8D:A5:3D:96:DC:47:93
            X509v3 Authority Key Identifier:
                keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:cd:ee:78:cc:17:b2:a8:65:c0:7d:9c:0c:da:85:9a:59:
         ab:ae:b5:0f:a0:87:65:68:45:25:7d:e0:8a:72:8c:a8:6b:e8:
         41:14:7b:49:93:3b:e9:d2:10:80:d9:fe:dd:a5:61:2c:d3:4a:
         e6:06:42:30:16:20:af:40:31:51:80:29:de:87:ad:f6:8b:2f:
         78:d0:6b:bc:9b:c9:8e:1d:6e:87:20:ef:28:95:34:08:62:4f:
         73:20:8f:fc:ce:5d:b5:13:47:30:03:1e:80:76:35:f8:9e:89:
         79:3b:c4:85:50:52:5c:d6:b3:75:eb:be:29:3e:07:95:6e:4e:
         7b:73:62:ad:25:1c:35:66:b4:89:e0:54:6c:9b:00:63:c8:9a:
         e0:cf:57:0b:32:f2:18:61:63:19:63:f1:f3:1b:25:86:5c:bd:
         5a:3c:c4:22:1a:9e:b8:ce:87:5e:a9:fa:f7:ae:ed:b8:d5:e4:
         3d:8a:37:31:23:92:1a:ea:45:4a:40:8f:95:53:8a:a8:89:ec:
         c0:db:1c:08:cb:db:ef:41:7a:dc:db:73:79:dc:a2:ea:ce:5b:
         04:44:19:07:48:3d:e5:b1:a5:0a:5e:60:e0:93:36:86:54:fa:
         02:15:a8:03:1b:9c:96:9d:d8:b4:69:ce:d6:a4:2d:98:62:7a:
         c6:9f:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:49 2026 by rpki-client