Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File:                     IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier:          Sonk3gjPD3oH4orazMm3+mM2teu68vuRro8uPnoSZNM=
Subject key identifier:   47:E2:20:08:B5:7C:BE:7C:15:A7:84:55:CE:FE:1D:EB:E3:D7:31:EA
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer:       /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number:          BB
Signing time:             Tue 21 Jul 2026 08:46:02 +0000
Manifest this update:     Tue 21 Jul 2026 08:46:02 +0000
Manifest next update:     Tue 28 Jul 2026 08:46:02 +0000
Files and hashes:         1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: vdOc0SMnIRS4oqRsLtxudO5SxQnnSsarHa3WDdzCCWE=)
                          2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: yNRoRcrSs2idnKKKQBvpZT7hGrIPyAJ/BqXKminAWZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
        Validity
            Not Before: Jul 21 08:46:02 2026 GMT
            Not After : Jul 28 08:46:02 2026 GMT
        Subject: CN=6a5f31ca-5098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:57:49:ab:81:6a:1b:16:34:45:f8:08:ff:
                    40:a7:a4:cf:3f:5d:b9:30:47:43:c4:2a:1f:a9:d4:
                    b8:72:58:69:c5:db:d9:34:e8:49:e6:0f:02:a2:20:
                    13:f7:8b:19:b7:2d:cb:bc:6c:44:e6:2d:04:aa:06:
                    e6:69:10:13:7e:d1:55:6d:1d:e6:82:01:ec:c1:67:
                    e5:22:e9:50:ab:de:fa:46:f8:9b:8c:13:80:96:b6:
                    06:fe:36:e3:21:c5:c4:90:88:3c:a3:7d:55:a7:e9:
                    be:59:c4:99:3f:1d:6c:41:b7:b7:a9:ab:da:45:7b:
                    ae:89:9f:ef:dc:44:b4:4e:78:22:3a:13:d6:9b:af:
                    03:f6:a1:1b:0f:75:46:ee:bb:7b:d4:0f:b9:bb:9a:
                    fc:b6:a8:8a:28:04:43:66:7b:6a:9d:a3:e1:b8:65:
                    8c:e0:41:f7:6f:72:97:e5:a1:24:1b:cd:a5:ae:ef:
                    45:fe:83:2b:9c:87:f5:90:25:76:e2:f0:25:60:92:
                    3b:c5:29:e0:ed:31:57:1c:c5:9b:f2:6c:02:41:15:
                    05:8e:e8:09:e8:02:f1:24:4f:af:16:2b:38:e4:72:
                    b6:c0:de:be:b3:cd:87:4f:ee:6d:e1:1c:13:8f:58:
                    f4:54:74:c8:92:af:61:f5:1e:43:1e:86:56:5d:ef:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E2:20:08:B5:7C:BE:7C:15:A7:84:55:CE:FE:1D:EB:E3:D7:31:EA
            X509v3 Authority Key Identifier:
                keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:24:51:46:09:0c:40:bd:01:c3:88:9d:9a:8a:49:99:52:51:
         df:81:e6:9e:c1:ea:c9:26:90:b5:60:fc:30:a2:2b:c3:a9:62:
         0c:b9:95:26:d9:1b:46:c9:1d:2a:3a:d9:88:2e:c6:a8:aa:93:
         10:74:e0:6f:e5:96:d4:34:af:50:49:61:e4:f2:39:5e:ca:eb:
         51:34:c9:dd:0d:10:72:40:a4:60:22:78:81:c4:13:ce:23:c8:
         c1:e6:21:4b:cd:f7:21:bc:a2:ff:20:16:e4:c0:ad:f2:f9:cd:
         6d:16:d5:06:d8:c8:db:04:af:a0:a0:fb:1f:53:b7:7c:4c:62:
         74:c2:d8:31:af:db:90:26:91:ea:ab:c8:98:3c:3b:7a:2a:ae:
         a6:29:3f:5c:73:9f:eb:14:24:a6:b8:85:c4:b0:01:de:af:ae:
         09:ba:98:33:de:45:48:af:81:b6:e9:f1:72:e0:25:8b:f8:16:
         dd:f4:72:8b:fd:18:9f:7c:04:36:a8:05:32:4d:75:cf:ce:c1:
         e2:61:ae:1e:2b:6e:ff:39:67:1e:5a:28:8d:ff:98:06:17:d3:
         ef:08:ba:34:92:5d:85:50:09:b9:17:7f:cb:d3:22:2b:d7:b7:
         e4:c0:66:7b:90:01:fa:2c:c1:3a:ad:56:1d:31:d5:17:e6:81:
         e8:2f:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:28 2026 by rpki-client