Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
File:                     i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json)
Hash identifier:          Bmyq5008/VQMPxLBwRPcVBSHVWChjRP5CGR7whOLL4M=
Subject key identifier:   00:F8:17:F8:80:A8:CF:18:0A:F0:EC:EC:95:1A:90:41:6E:B0:C2:72
Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
Certificate issuer:       /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Certificate serial:       0669
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
Manifest number:          0662
Signing time:             Mon 20 Jul 2026 23:18:47 +0000
Manifest this update:     Mon 20 Jul 2026 23:18:46 +0000
Manifest next update:     Mon 27 Jul 2026 23:18:46 +0000
Files and hashes:         1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: 00xjG2tW7a4NsGl8kOv4mJnSo90T39Ns4HujnWIIwp8=)
                          2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 2z/07142KRcC5lJIKi6aYRS5wWoeJVFtsDdL/K6XB7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
                          rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
        Validity
            Not Before: Jul 20 23:18:46 2026 GMT
            Not After : Jul 27 23:18:46 2026 GMT
        Subject: CN=6a5eacd7-e88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:2b:5b:66:c6:56:23:d4:19:8a:0e:00:1f:
                    9f:49:3a:ff:ee:f0:23:48:0d:e0:0e:14:b4:96:c5:
                    18:73:be:06:7f:44:c2:a7:63:b8:21:b5:99:17:ba:
                    eb:61:02:97:c3:2c:ee:4f:d3:75:59:55:5b:82:6f:
                    45:9b:b1:56:78:6d:bb:b8:35:94:b2:16:c7:70:75:
                    96:a1:25:91:23:76:b2:c6:17:0f:cd:44:00:c1:00:
                    37:ac:ae:4f:5a:16:73:21:50:83:2d:38:2b:eb:36:
                    fc:fc:de:89:4f:8d:44:e9:2d:86:d1:ac:39:d0:74:
                    60:30:d0:bc:8d:94:5a:93:e2:74:8e:75:d3:d5:1a:
                    11:3e:0b:64:c7:6b:11:06:4a:be:13:76:7c:8c:33:
                    20:77:4a:37:19:46:96:b8:7c:2a:ea:7a:5e:64:79:
                    e5:c5:a3:86:a3:40:ee:23:b9:dc:fe:f7:a6:ee:ae:
                    85:b7:3c:eb:ab:7d:d2:19:70:12:e1:ac:f8:85:b7:
                    bd:3a:dc:09:d9:34:8d:62:50:97:bf:48:ec:81:3e:
                    78:5c:2a:a0:d0:38:0c:42:9c:2b:58:47:49:31:ac:
                    8d:e0:4a:74:82:d8:d7:05:d8:aa:24:39:b1:96:8a:
                    19:bc:62:b7:9d:77:7c:fc:02:3e:38:76:1d:1d:40:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:17:F8:80:A8:CF:18:0A:F0:EC:EC:95:1A:90:41:6E:B0:C2:72
            X509v3 Authority Key Identifier:
                keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:a8:c6:0d:0c:19:78:a4:8e:1d:a1:ed:31:40:1f:37:55:
         8d:bb:05:15:83:e2:88:42:29:40:52:97:20:0b:13:25:1b:78:
         81:04:58:63:6c:58:6a:9a:01:ee:5d:c1:78:df:e4:ec:27:3e:
         79:37:71:c2:d9:fd:a9:8a:10:33:e3:8d:84:59:02:84:9e:03:
         7b:1a:93:a1:b0:31:fb:10:f3:04:dc:a7:00:f4:b2:e7:3f:84:
         0b:72:9c:84:1d:27:01:a5:e0:b5:36:61:0c:d1:a0:7e:ac:44:
         6f:7e:87:48:02:81:84:d5:c1:db:b8:73:e9:3e:b3:fb:7d:8d:
         d1:0d:be:28:d7:99:5e:09:d0:5f:fd:8a:ba:62:8a:50:19:13:
         79:24:79:d5:e0:ee:d7:02:6d:0f:57:39:c3:c0:af:8f:1d:0e:
         7d:d2:84:0c:8e:c2:09:00:28:30:df:ea:d4:3c:4d:16:78:54:
         d6:14:e5:15:1e:24:63:2f:8f:a8:41:74:70:9b:7a:b5:65:37:
         56:31:cb:d6:01:02:47:98:19:8d:cc:a4:a6:98:ed:04:35:7d:
         a7:19:2c:c8:a5:ca:12:bf:c0:92:af:31:2f:c0:d9:81:cb:91:
         af:14:59:e1:19:c7:95:0b:49:e2:7d:02:f0:60:0b:43:44:0b:
         bf:2b:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:38:05 2026 by rpki-client