Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File:                     9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier:          QgBjnzLLhdAfF3bR+JfHBfSLN6EzF++KWQ/ZIMd3eH4=
Subject key identifier:   5F:EB:29:3F:47:C2:11:20:A1:CF:20:07:4F:94:9C:D3:7F:37:8C:7D
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer:       /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number:          0113
Signing time:             Tue 21 Jul 2026 08:03:03 +0000
Manifest this update:     Tue 21 Jul 2026 08:03:03 +0000
Manifest next update:     Tue 28 Jul 2026 08:03:03 +0000
Files and hashes:         1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: QGdESnjv26FOdryg8xRy5rN+QVANPjEyrNmXNy6l0zI=)
                          2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: /oG+kh2eKtakm2rIYi2rKJyApYpZtiilOJOldegtuSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
        Validity
            Not Before: Jul 21 08:03:03 2026 GMT
            Not After : Jul 28 08:03:03 2026 GMT
        Subject: CN=6a5f27b7-67f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:be:57:6f:38:e9:f2:2a:ac:2a:a4:63:21:
                    45:5f:92:18:39:58:b0:9c:88:ac:a7:6d:11:3d:bc:
                    6c:6c:a1:55:b6:84:bd:c5:3a:97:c0:de:08:f9:b9:
                    f1:e8:94:c2:f4:e1:08:99:ac:0a:e8:17:e1:44:e4:
                    b6:0c:05:5f:e3:0d:84:3a:66:fc:66:0c:5c:10:29:
                    25:4b:cf:a9:58:0e:5c:11:78:03:27:00:7d:c7:00:
                    18:e4:01:8f:d1:dd:d1:0a:59:fc:9e:11:5c:9e:ec:
                    97:6f:a9:02:cc:9d:f4:ba:e1:6a:8b:03:8f:fd:65:
                    16:52:49:05:85:73:a1:b1:c5:28:0c:e8:16:a8:36:
                    9f:66:69:0b:27:a2:7b:2f:98:95:8e:e3:91:4e:05:
                    ab:bd:cd:11:43:11:48:83:be:b7:83:eb:5b:a8:af:
                    5a:c3:db:6a:98:bf:fd:a7:7b:05:02:fb:f2:7e:22:
                    03:e1:50:3f:10:0c:60:a6:ef:4d:df:5e:b6:b4:d0:
                    20:b5:83:41:a2:44:d2:bd:cb:96:07:f2:8b:4e:24:
                    6b:4e:92:9a:dd:cb:e6:ba:09:58:66:67:b5:b9:ae:
                    5b:a8:e9:f3:7e:2c:74:23:a1:d7:69:58:a7:bf:f2:
                    c3:c6:9a:0d:d4:8a:8d:19:35:09:c0:48:87:7a:35:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:29:3F:47:C2:11:20:A1:CF:20:07:4F:94:9C:D3:7F:37:8C:7D
            X509v3 Authority Key Identifier:
                keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:22:61:8f:a0:3a:6f:3b:2b:1d:34:be:64:f8:c0:76:25:56:
         18:d6:1d:ff:4f:14:2a:c7:3a:b8:5a:83:ca:f1:3b:2f:63:c1:
         e2:7d:13:26:df:2e:44:59:61:60:2a:48:c9:11:66:af:ca:3b:
         f6:2f:25:ae:e8:42:a0:ff:32:24:06:53:1b:e1:ab:a4:fd:89:
         65:b4:7c:e8:82:ae:cd:4f:21:9d:47:ed:c1:16:ac:05:f0:1f:
         b1:01:ee:33:43:18:d8:e9:ce:27:4f:d4:1b:a4:85:e1:38:36:
         7c:69:5f:af:5d:18:40:dc:df:11:dd:59:53:d1:db:f4:5f:5b:
         e5:db:30:db:7a:b6:53:1f:07:de:5e:0e:92:fa:f7:64:ce:6f:
         87:a0:80:09:d1:08:38:82:c6:cc:3b:9e:b8:73:48:c5:72:dc:
         eb:38:40:45:94:63:4a:9c:49:e4:a8:d5:35:f0:90:6b:bc:d8:
         09:6c:e8:de:2a:a4:f0:56:95:e7:2b:b8:46:10:12:28:f2:89:
         98:03:af:02:17:e4:f5:c1:d6:4b:99:ff:6f:4f:1a:f9:09:9b:
         d4:9c:aa:e7:9c:69:16:76:f7:c8:0f:cd:51:83:46:5a:f6:1a:
         5e:73:f5:e5:4f:b1:77:de:fd:d3:da:24:6a:fc:39:29:b0:9e:
         41:3c:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:15:46 2026 by rpki-client