Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File:                     31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier:          dVo6cC9834pQddbpD6j+5eQPA6Y3XQvwEsLBD9s3z9M=
Subject key identifier:   A5:DD:5F:C7:FF:30:09:D2:A5:C9:43:41:A6:E6:33:8B:31:8B:0C:93
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer:       /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial:       0252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number:          024B
Signing time:             Tue 21 Jul 2026 03:34:05 +0000
Manifest this update:     Tue 21 Jul 2026 03:34:04 +0000
Manifest next update:     Tue 28 Jul 2026 03:34:04 +0000
Files and hashes:         1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: tRZIYrmu6e+bZKc2nsU7VR+Ct/zy2Qu5OrB62xm3KFg=)
                          2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: LwADRNH2zXke5XeuF1Oo6gjD6e4ZUXmZaNArwtimmJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
                          rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
        Validity
            Not Before: Jul 21 03:34:04 2026 GMT
            Not After : Jul 28 03:34:04 2026 GMT
        Subject: CN=6a5ee8ad-a692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:0c:43:71:04:40:d3:5d:ff:4a:5e:57:46:
                    10:81:5f:d0:5e:ca:84:c2:af:94:7d:5d:bd:d7:db:
                    75:d5:d4:ad:b1:c0:62:9e:7f:d5:5b:51:24:cc:db:
                    0a:a8:91:f9:d5:ad:b1:bf:54:8b:f4:91:f8:99:7a:
                    f5:03:aa:a0:0c:3a:96:65:32:0c:c2:1e:ce:f4:2a:
                    6b:c3:69:59:f4:3d:33:4f:9f:ae:0f:f4:81:4e:4c:
                    4d:1f:f2:2a:40:cf:dd:5a:03:d8:b7:9c:a3:1b:ed:
                    c6:e8:44:00:e7:dd:9e:ce:47:8f:bb:4c:b0:e2:33:
                    0e:fb:e5:90:ea:70:4f:95:3f:41:e4:39:28:f5:08:
                    29:89:0f:85:38:5f:5e:fc:b4:7b:58:e5:2b:fc:87:
                    7b:2b:12:48:84:db:5d:34:0c:da:98:ca:f4:91:36:
                    e3:c9:07:7b:7a:20:c1:f7:2c:73:fe:07:e9:ed:16:
                    48:92:3e:3f:dd:d1:70:70:79:f2:b2:9c:78:76:e1:
                    fd:e7:a4:f2:72:4f:bc:11:66:4f:32:b1:f3:d1:b8:
                    97:dd:c9:97:4d:9e:34:31:52:8e:6f:49:52:6c:71:
                    5e:80:5b:20:cf:07:17:3d:b8:5e:9f:c8:f2:df:e4:
                    b7:93:cb:c3:44:f0:44:91:1d:65:d5:46:5d:1c:ec:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DD:5F:C7:FF:30:09:D2:A5:C9:43:41:A6:E6:33:8B:31:8B:0C:93
            X509v3 Authority Key Identifier:
                keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:f3:49:d8:93:c7:f8:fc:d1:e6:cf:3d:7d:ef:3a:6f:a8:
         bb:f3:18:68:dc:3f:c4:7d:cd:31:a2:1c:74:fe:20:f4:11:c3:
         b0:00:77:1a:77:20:0b:7a:9d:21:07:1f:aa:19:87:59:5a:eb:
         e7:ce:b7:e5:0b:ad:ee:60:68:65:09:7d:61:14:a0:89:db:96:
         e5:56:da:d0:b4:db:3a:da:08:2a:c1:44:e6:34:2e:63:a3:94:
         b1:93:4d:39:ca:b3:1f:8c:59:d7:0c:d0:e2:05:f4:b7:ed:90:
         da:c6:4a:17:5b:48:93:ea:ed:f9:f4:1c:fc:9e:4e:fc:50:03:
         74:5a:73:76:52:8e:6d:3e:fb:3f:12:67:92:30:da:ab:10:76:
         c3:e5:07:cc:d0:74:8e:4f:35:e1:f5:45:ba:f8:c1:1f:cd:1a:
         ab:47:6a:7f:07:fb:55:82:4b:88:d0:f6:17:0b:cc:fa:8e:65:
         d7:58:e7:c8:d0:49:9b:f5:e8:88:8b:80:5e:60:74:f4:64:4b:
         9e:9f:c9:02:b2:65:bf:79:3b:eb:79:99:c7:64:e8:62:d9:c9:
         ea:ac:97:42:47:d3:2e:53:d7:c2:7d:04:45:52:d2:8d:51:e1:
         c6:5a:da:47:45:c9:40:50:3d:02:02:5d:09:8d:cd:b2:b6:8d:
         eb:a7:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:14:26 2026 by rpki-client