Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
File:                     bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json)
Hash identifier:          HWNyxiabcYsIapOrEB5Q8OHyP+k3rW8pEEjF+pyMijs=
Subject key identifier:   7F:6E:EE:9D:E4:77:29:9E:8B:66:38:B7:9B:BC:D2:7D:A0:21:C1:49
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Certificate issuer:       /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
Manifest number:          01D0
Signing time:             Mon 27 Jul 2026 05:22:07 +0000
Manifest this update:     Mon 27 Jul 2026 05:22:07 +0000
Manifest next update:     Mon 03 Aug 2026 05:22:07 +0000
Files and hashes:         1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: S3kWEYTUGnl/4eDMZNIBuZH/0OAqm9z+MmCpE5DXsic=)
                          2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: b/pfyAz5rp6mzw6WWGb7CmVVosPd7X9N4rdBir+XR2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
        Validity
            Not Before: Jul 27 05:22:07 2026 GMT
            Not After : Aug  3 05:22:07 2026 GMT
        Subject: CN=6a66eaff-8cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:9f:da:a0:93:72:ca:3c:fa:56:3e:32:45:
                    24:52:14:21:1a:35:65:15:9b:31:11:14:65:69:62:
                    78:94:84:7b:b0:db:5f:68:79:03:55:ce:03:5c:a9:
                    f5:b4:67:2c:ec:3e:b7:03:5f:fa:8a:00:31:92:25:
                    3c:c4:59:8c:a6:53:dc:02:bb:b0:7d:35:04:70:9c:
                    25:d9:8a:09:15:5c:1c:3b:48:7e:a6:93:1e:f4:b1:
                    20:d9:d0:0d:09:81:8a:b4:6a:27:07:da:a2:ee:90:
                    8c:60:5e:14:67:94:de:40:8b:60:fb:61:8f:23:de:
                    4f:6f:81:8f:ac:f3:5c:42:72:2e:33:53:b9:42:5f:
                    1a:15:1b:fe:42:cd:a5:2d:a2:56:df:b5:20:0a:b4:
                    88:7f:4a:1f:91:52:9c:0b:9c:9e:8a:f7:7d:05:a1:
                    ba:ac:5c:4d:84:3b:74:fb:75:2d:85:d2:80:3c:24:
                    85:2c:a7:67:77:df:f1:6f:a2:97:82:e1:c5:8e:6e:
                    93:9b:e7:0c:3c:57:39:91:1b:6b:a8:4a:c2:52:55:
                    4a:7d:0d:ba:ba:f6:9e:b2:dd:a0:ac:07:d5:f8:27:
                    a0:db:f8:0f:65:d8:1a:1f:98:67:4c:55:36:ca:87:
                    bc:b0:97:4c:7d:84:9b:4f:a9:e7:36:2f:76:6d:a0:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6E:EE:9D:E4:77:29:9E:8B:66:38:B7:9B:BC:D2:7D:A0:21:C1:49
            X509v3 Authority Key Identifier:
                keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2d:81:9c:af:94:22:d7:e6:b9:d0:86:66:69:52:1a:e8:d1:
         25:39:31:b8:39:50:65:26:0d:02:66:ac:f2:26:71:88:ad:03:
         1e:c7:25:b9:eb:31:c3:1e:9e:cd:ff:34:60:bb:72:ca:5e:1e:
         c5:8d:0c:49:fc:f2:66:73:df:8f:3b:8c:01:8f:82:6e:49:3f:
         6f:6c:f2:71:8f:d3:53:e7:a5:da:da:34:83:00:43:5c:37:12:
         7e:67:72:ad:cd:e3:ad:6f:55:46:f3:39:b2:51:16:31:a5:c0:
         bb:80:53:11:9e:54:10:82:f1:70:4a:2e:d9:72:1e:f0:5b:19:
         cd:95:12:e0:e4:0d:d0:8b:ec:45:9d:21:02:62:2a:88:07:fb:
         b5:0d:89:c3:66:da:d6:5f:f4:7f:11:db:20:6a:0c:27:06:6b:
         40:76:4c:0e:e8:f1:01:04:8e:05:8a:13:73:1e:bd:ac:0c:ce:
         2d:22:6a:55:ab:9b:a3:77:1c:fb:05:db:60:49:86:2e:e5:a0:
         8a:88:9d:25:a5:cd:88:8f:48:2c:c2:6b:6c:63:67:eb:9f:c1:
         9b:74:cb:c4:9a:7f:9f:9b:a6:11:6d:71:f2:4a:d5:c8:06:eb:
         d4:c6:ba:7e:6c:f9:d1:00:88:bf:e3:3d:3a:3b:a6:3e:36:21:
         d5:f5:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:43:53 2026 by rpki-client