Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
File:                     p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json)
Hash identifier:          eDg98dLfnRwZruP9sA4wa9aM52jXRAC39HvbWvwslVU=
Subject key identifier:   04:B5:8D:C0:61:25:BB:72:35:D9:86:1F:CA:2A:00:F4:33:27:F5:87
Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Certificate issuer:       /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
Manifest number:          92
Signing time:             Mon 27 Jul 2026 09:38:16 +0000
Manifest this update:     Mon 27 Jul 2026 09:38:16 +0000
Manifest next update:     Mon 03 Aug 2026 09:38:16 +0000
Files and hashes:         1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: Ezegz+HLMbTLLmkWzhTqyB7xwUIRN0LYev1CiOwQ0Hs=)
                          2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: KbzUtTPtGCQ3I/N5KWpd9MwtuQNamm+9Vruv3vtMr6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
                          rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
        Validity
            Not Before: Jul 27 09:38:16 2026 GMT
            Not After : Aug  3 09:38:16 2026 GMT
        Subject: CN=6a672708-d532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:1b:13:4f:6e:fc:12:87:81:01:08:6e:84:
                    5e:9d:81:95:60:bb:01:b2:3a:fc:cb:96:5c:7f:34:
                    bb:06:b1:33:86:f2:14:52:fe:5b:f4:60:cc:10:a4:
                    60:bb:0a:ec:c2:be:38:9b:85:bf:cd:b3:30:79:32:
                    c3:0a:54:2d:ed:12:60:26:df:51:86:9b:ec:fb:d1:
                    60:ca:d8:7d:8e:22:46:fd:b9:c7:63:93:cb:da:76:
                    f3:84:d1:b0:21:c1:48:1a:f7:8b:f3:cc:07:83:8c:
                    5d:38:14:13:36:17:61:b3:91:6c:09:ac:e8:fc:34:
                    e5:5a:39:be:57:c2:4f:c8:af:6c:75:e1:bc:da:c3:
                    c1:d3:f0:8e:2e:3c:65:6d:09:31:f3:3e:19:e7:c5:
                    36:a6:48:81:72:3f:20:2c:a8:c7:93:d3:0c:02:20:
                    9b:e4:cf:b0:36:ef:ee:0e:a7:0a:2d:5b:27:6a:09:
                    e3:cb:f6:ad:90:bd:2c:1f:03:7e:4f:e4:e4:8b:25:
                    1a:52:95:31:01:34:8e:15:8d:9f:87:e7:1b:d2:3b:
                    02:be:60:f8:30:79:35:80:26:60:92:01:76:7e:0d:
                    ce:9a:c5:f5:4d:29:ad:2f:62:63:ef:9c:0f:6e:20:
                    a0:f5:9b:d5:75:18:ca:e2:e7:05:c3:72:2d:86:93:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B5:8D:C0:61:25:BB:72:35:D9:86:1F:CA:2A:00:F4:33:27:F5:87
            X509v3 Authority Key Identifier:
                keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:aa:9d:42:7c:e1:f9:fc:de:dd:b5:ec:83:29:9a:15:1c:5a:
         fa:b3:78:77:35:3c:ba:0b:69:52:0f:40:4f:93:59:82:7a:de:
         1f:0e:8a:15:cf:a7:79:64:e6:11:28:e5:b0:8b:f5:1c:54:cf:
         10:bf:1c:00:da:a9:86:3d:2b:76:e2:14:ad:dc:2c:e8:3f:23:
         86:d8:9a:3a:90:84:72:7d:8d:62:e7:3f:d5:e3:0e:53:63:75:
         01:f5:0e:2a:be:e1:92:b2:cb:96:70:3d:2d:2c:76:0f:78:11:
         e5:a5:63:e7:6f:d2:1d:f1:ef:3c:04:f1:ff:04:9c:35:80:69:
         92:fa:a0:7b:bb:8f:b0:3a:1c:b1:25:f0:db:00:60:d8:00:fb:
         37:e2:76:22:fb:95:9c:d1:19:af:32:3b:8e:82:ef:57:c3:a3:
         14:c2:17:b9:f4:8f:a9:91:e0:b7:fb:66:53:0b:cd:fb:8d:1e:
         ff:ee:02:44:57:e0:dc:93:71:6d:53:6f:4d:3d:57:f1:b5:c3:
         1b:fa:ee:61:9d:23:8e:26:4c:62:fd:42:71:bf:bf:9a:f8:5b:
         8c:a3:0e:1b:03:61:de:00:09:1a:93:bd:72:12:e9:9e:8c:f0:
         34:32:aa:3e:f3:fd:9c:0b:c2:5e:f7:d0:fa:22:10:a2:41:e4:
         de:98:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:44 2026 by rpki-client