Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
File:                     BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json)
Hash identifier:          QhsjmEBSN3Qxw1RwHHillcZ3Uo6a0AQudjHUXHTIpKE=
Subject key identifier:   F0:97:FB:79:ED:D6:C0:28:0C:4B:03:04:38:AB:F1:DA:13:F2:36:F0
Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
Certificate issuer:       /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Certificate serial:       07C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
Manifest number:          079D
Signing time:             Tue 28 Jul 2026 21:39:53 +0000
Manifest this update:     Tue 28 Jul 2026 21:39:53 +0000
Manifest next update:     Tue 04 Aug 2026 21:39:53 +0000
Files and hashes:         1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: blZ/Ir7gdHmraZy0Ux1GttJ5U/GIwCgV6zS7At681/Q=)
                          2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: Bnf+utMQMnh8zQjddBOCbwOT7nCJfAIRhLCPTrWZ8Xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
        Validity
            Not Before: Jul 28 21:39:53 2026 GMT
            Not After : Aug  4 21:39:53 2026 GMT
        Subject: CN=6a6921a9-5a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:5f:b4:3c:95:2e:0b:a6:16:cf:5f:ee:a4:
                    d0:b7:7a:e0:fd:a0:51:46:83:a9:b8:2a:9c:52:b9:
                    16:23:34:53:cf:dc:05:ce:72:35:b5:64:54:40:58:
                    88:7a:a9:1d:98:47:e1:37:44:05:0e:64:ca:6b:2f:
                    78:96:16:c6:7f:0d:09:68:0c:d1:f3:2d:a8:74:0a:
                    70:7c:fd:48:26:80:7e:25:38:ec:91:80:67:44:e2:
                    e7:de:01:8f:5a:25:05:f4:11:b1:22:91:81:48:0d:
                    79:95:cd:dd:cb:b5:9a:f4:f4:f8:34:09:3c:a2:1d:
                    c7:ce:a7:f4:18:76:50:40:8f:ae:ac:10:db:3a:29:
                    31:1f:0d:c7:4e:61:8c:d9:5f:7e:6c:f8:c9:cb:dc:
                    79:7f:86:bf:1e:9d:3e:0d:01:9f:a6:cf:41:7f:c3:
                    e8:19:94:b3:87:c8:ae:4b:08:65:e6:2b:75:4c:83:
                    eb:09:55:63:63:78:cf:0a:74:80:1b:fe:4f:88:70:
                    0a:be:d3:60:48:4a:db:9c:4b:3e:d1:5d:f5:3a:e6:
                    cf:f9:99:a4:17:1d:71:90:0c:62:c6:9f:93:34:9b:
                    97:06:10:4a:99:fa:a1:b6:64:59:90:1a:20:14:33:
                    ab:20:a2:91:6c:da:5c:35:89:87:c1:7c:d4:b7:07:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:FB:79:ED:D6:C0:28:0C:4B:03:04:38:AB:F1:DA:13:F2:36:F0
            X509v3 Authority Key Identifier:
                keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:20:1e:79:14:de:d9:5e:4f:55:27:fa:cc:65:55:3e:ba:f3:
         25:13:b8:71:08:d1:3b:37:b5:0e:d7:b4:2e:49:39:d4:06:3c:
         5b:a7:fa:4a:b0:98:15:8e:46:43:fd:e2:6c:6a:80:76:72:ce:
         bd:fb:98:f4:c3:06:80:ac:f6:c2:fb:c9:03:2c:1a:0a:22:d6:
         89:62:e0:08:5a:89:01:df:6b:53:b9:af:53:31:cb:68:38:38:
         12:8b:68:e5:75:34:c1:bc:cd:b6:14:72:dc:5e:90:4a:61:0a:
         c2:ef:20:54:8f:54:de:b7:be:04:7a:97:9b:e4:13:8b:51:e1:
         35:17:db:20:f7:ef:85:a7:9b:0f:de:52:94:d0:9a:a8:68:f2:
         49:75:a9:9e:20:51:a3:9c:c7:9f:00:71:40:1c:35:4c:9d:4f:
         cb:34:57:49:fc:86:6d:3b:16:e7:46:72:72:2f:fb:70:4e:6e:
         f8:02:9a:12:2e:65:0b:de:90:45:37:a6:2b:54:ee:01:c8:91:
         95:46:2b:8c:28:5b:72:3b:7c:a2:20:01:cd:7f:85:17:5d:21:
         31:4e:64:0f:53:b3:6a:f9:8c:97:3b:f4:ba:8e:64:88:23:b7:
         b5:f7:87:a9:52:74:74:76:70:68:3a:33:7c:02:24:26:ef:1d:
         6e:ea:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:36 2026 by rpki-client