Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
File:                     MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json)
Hash identifier:          r+vrZO4ytt8LTjjEue2RGcUTm2YbI/OT+xE3FSvzmT0=
Subject key identifier:   50:10:16:FB:FD:C8:C1:08:54:E7:65:1A:B1:ED:F6:08:E4:25:FD:4B
Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
Certificate issuer:       /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
Manifest number:          0160
Signing time:             Mon 27 Jul 2026 06:50:09 +0000
Manifest this update:     Mon 27 Jul 2026 06:50:08 +0000
Manifest next update:     Mon 03 Aug 2026 06:50:08 +0000
Files and hashes:         1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: 7C/t8P/vbzmgWGsegOLdXbsoypzuLa88fUAHSsCVfMI=)
                          2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: jZ7jlvG+kbpMf5yr4kDr9NTPJvX7t9Ub5k4dGFxMqwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66
        Validity
            Not Before: Jul 27 06:50:08 2026 GMT
            Not After : Aug  3 06:50:08 2026 GMT
        Subject: CN=6a66ffa1-fa45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:6d:2a:87:e2:6e:19:12:2a:63:6b:32:f4:
                    51:04:a5:99:18:99:fc:55:a1:bc:d1:12:15:bc:01:
                    19:d0:56:28:35:c2:3b:1e:d1:7b:3b:00:19:1c:09:
                    23:ac:31:fd:50:ef:cf:69:71:31:65:19:79:8b:48:
                    5c:29:df:4a:ac:d0:a6:32:0c:0b:72:d5:aa:40:c6:
                    6b:a2:e7:b8:4c:48:5a:21:39:61:be:f0:87:43:7b:
                    7a:cb:22:bf:15:c9:45:cb:5d:f5:b7:df:58:8d:8c:
                    52:f7:d1:3b:ea:72:89:f9:c7:7f:0b:43:93:e4:97:
                    65:f7:d6:1e:c1:d5:00:38:fa:32:bf:8f:1a:e3:9c:
                    f6:f1:d5:7a:aa:c5:af:01:d8:50:86:db:28:0a:c8:
                    de:6f:15:20:9e:b4:05:c8:3a:ea:a4:e6:ec:00:37:
                    ec:86:83:eb:d0:c6:41:c0:d6:6f:a8:b5:a3:3a:de:
                    51:12:c8:a8:43:75:e3:f8:68:3b:a9:27:fa:c0:03:
                    db:14:2f:33:09:b1:a6:c3:2e:b6:a4:d5:9c:c2:b6:
                    7b:0b:08:46:1f:f9:1c:0b:52:0b:1b:3c:35:75:bd:
                    dd:18:f3:f8:e5:d0:83:57:c5:62:19:9a:77:13:2a:
                    04:3e:15:f7:b8:08:fa:a8:6e:fc:40:a2:5e:e1:46:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:16:FB:FD:C8:C1:08:54:E7:65:1A:B1:ED:F6:08:E4:25:FD:4B
            X509v3 Authority Key Identifier:
                keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:52:90:e3:5b:c3:db:b1:9e:9f:43:79:fb:30:2a:c0:d2:65:
         95:b6:1a:75:26:52:2a:49:d6:7b:8f:33:c2:13:ac:f7:57:c1:
         34:d7:e7:61:a2:75:00:4f:3b:be:42:9a:4e:1b:6b:51:1f:7d:
         6c:8c:4e:79:3b:2c:94:ed:37:63:19:42:2a:93:e8:a6:83:97:
         11:b0:a6:0e:81:89:67:75:bd:4d:46:59:6b:ae:05:7b:61:12:
         45:e3:78:c0:22:37:bb:92:f3:32:de:58:92:41:0c:db:fc:00:
         31:fc:31:0d:c0:42:0b:6c:ac:45:7f:b2:dc:03:70:4b:22:f8:
         e8:3a:09:38:f4:fa:91:a2:0d:91:0c:65:dc:3c:90:18:09:f9:
         77:7a:f6:08:ff:a0:eb:54:8d:27:b1:78:f1:0f:77:ad:4f:b3:
         aa:5e:56:4a:96:76:b1:b2:97:7f:0c:f7:3b:7c:f8:5e:a4:b8:
         41:aa:72:f9:f9:f6:e6:bd:f4:90:40:74:5c:ce:0b:1e:76:f6:
         26:6c:25:77:b2:da:66:9b:8b:69:10:e4:0e:4b:df:4e:56:90:
         1a:4c:f3:20:29:5b:20:cc:f5:9c:81:a2:b6:c8:d6:1d:01:68:
         c5:35:2f:1f:0b:8d:95:c5:54:6e:eb:01:11:05:22:df:f8:32:
         65:01:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:56 2026 by rpki-client