Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
File:                     1cgQTMoJtQwAk-50IwWIXbT_N9M.mft (raw, json)
Hash identifier:          qWwQomxtmE9jhr25qaX9azl1sh9aQKIN2vsi74C1DLA=
Subject key identifier:   09:52:8F:20:61:8F:5F:B5:6B:FB:4A:51:5E:9A:93:EC:AA:69:D0:A6
Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
Certificate issuer:       /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
Manifest number:          29
Signing time:             Mon 27 Jul 2026 11:08:42 +0000
Manifest this update:     Mon 27 Jul 2026 11:08:41 +0000
Manifest next update:     Mon 03 Aug 2026 11:08:41 +0000
Files and hashes:         1: 1cgQTMoJtQwAk-50IwWIXbT_N9M.crl (hash: GZq0+7Ng6xc0Kk50J3Kxsw7GRmU/AL2PZRgSL6PlqJE=)
                          2: C25C2A1A4A3211F1BD5DF90392833773.roa (hash: iVkTRkOcMKD5H0a8Zq7n5fJ183jZidSEFDRuqOcWQeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
        Validity
            Not Before: Jul 27 11:08:41 2026 GMT
            Not After : Aug  3 11:08:41 2026 GMT
        Subject: CN=6a673c3a-fb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:92:d3:a7:8e:73:f0:d7:94:7b:bf:c7:5e:
                    c0:ae:2e:0c:a4:89:13:ce:61:99:e4:22:3b:e1:78:
                    82:32:55:59:d8:3e:ef:a3:11:0d:77:b4:84:f7:3c:
                    b4:30:5f:0f:e6:9e:53:68:b8:de:60:a9:ac:75:cc:
                    3f:3c:2f:ad:e8:db:09:e6:d0:7c:24:2c:19:1a:cd:
                    3e:b5:5d:29:3d:00:e9:57:77:17:2a:b0:4e:94:9b:
                    27:67:9a:bb:b5:6b:02:e8:d2:fd:bc:02:8b:8e:8a:
                    ce:d0:83:2a:f9:fa:4a:ac:97:4b:30:a8:0a:b6:0e:
                    bd:1d:f7:10:b4:4f:6c:93:93:f5:9b:3b:b0:5d:93:
                    0b:84:42:e1:d3:2e:c1:0f:dc:91:55:76:a2:ef:b4:
                    45:31:be:bb:93:31:a4:82:5a:8a:ba:9f:56:e0:cd:
                    1b:44:91:09:bc:e1:d7:bd:a7:7e:49:3f:81:bc:f9:
                    ed:1f:76:81:6b:67:a4:94:61:d6:be:a1:7d:3c:c9:
                    e1:be:ca:84:5d:93:74:f2:fe:ae:68:89:80:f6:79:
                    fb:59:8a:d3:aa:6d:93:c5:76:bb:59:d2:59:b0:26:
                    e2:1c:fc:d0:1c:3b:0d:3e:a6:9b:81:64:78:a7:70:
                    d2:31:03:11:4b:84:91:fe:76:b2:93:ac:cd:a7:82:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:8F:20:61:8F:5F:B5:6B:FB:4A:51:5E:9A:93:EC:AA:69:D0:A6
            X509v3 Authority Key Identifier:
                keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:52:88:f1:de:7d:f5:f2:81:cc:12:ae:99:72:17:63:68:32:
         eb:5a:07:01:cc:ac:c3:b3:3b:2a:84:89:63:80:09:c0:11:b9:
         a7:a5:c7:9c:38:68:a1:72:58:81:e4:cd:9c:22:aa:dd:00:89:
         7a:9e:02:6d:a3:08:06:48:88:8a:ae:ee:47:20:c5:24:3b:d9:
         c1:46:31:3b:25:47:34:d5:83:0b:02:ef:db:db:cb:57:ed:0c:
         6b:b5:e1:be:66:fc:bf:64:9a:e2:d1:00:76:be:4f:ce:69:e4:
         c0:67:fa:03:73:22:bc:6d:6c:3e:de:a6:7a:91:92:e3:61:db:
         6f:ba:ab:a8:06:76:3c:64:5d:0e:b9:0c:02:53:84:3e:31:3f:
         21:18:4f:74:7e:9a:04:37:84:38:1a:f2:48:06:bb:ea:fc:4d:
         95:fb:82:10:17:bf:e1:70:34:2b:c3:36:da:90:f1:86:3f:73:
         c7:2c:16:22:cf:77:e2:48:ed:ad:ca:b5:59:ec:27:b6:a6:a7:
         80:59:1d:2f:29:b1:f9:e9:9b:ba:1f:78:cd:31:58:cb:ee:23:
         d7:d8:bc:6d:e2:fc:a7:9a:19:a9:11:96:37:d5:1e:15:18:26:
         19:89:49:ae:82:f9:41:f1:84:1b:4e:28:b9:b9:6b:58:1e:f4:
         24:e0:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:44 2026 by rpki-client