Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
File:                     4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json)
Hash identifier:          b1rMJjvH0dAeTAXtQwAlPEhTSerl8CHGfkrHeMMgd1g=
Subject key identifier:   71:3F:AF:B6:BA:4B:BA:A7:C0:08:90:C8:69:B0:6D:81:0D:AD:3C:C0
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Certificate issuer:       /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
Manifest number:          028D
Signing time:             Fri 17 Jul 2026 02:36:14 +0000
Manifest this update:     Fri 17 Jul 2026 02:36:13 +0000
Manifest next update:     Fri 24 Jul 2026 02:36:13 +0000
Files and hashes:         1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: +/4YXPZEsFD8lbKgB4BbEXvALbICAmTzp41jJ9Fj6no=)
                          2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: nnTjgZ46HqO0Mpo0brQW7RdIt/A/0sbmdcDjLarFt5g=)
                          3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: ruF2i3AOGgPYwroRD2rSZSmDfGWURXx0prKXNcqPrNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
                          rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
        Validity
            Not Before: Jul 17 02:36:13 2026 GMT
            Not After : Jul 24 02:36:13 2026 GMT
        Subject: CN=6a59951e-561b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:b7:04:c4:23:50:e2:2c:b6:38:c8:9e:01:
                    09:e3:d8:86:4b:16:9e:9a:7f:27:c5:4a:df:6e:61:
                    e8:68:f2:6b:8d:0d:2a:14:38:35:46:82:07:64:da:
                    3a:43:f7:ce:1e:b1:3d:f6:55:e1:73:3c:12:c9:02:
                    6a:b7:a3:be:87:11:45:ab:c8:ab:0f:b2:d7:e6:1f:
                    b9:3c:69:2d:4f:1f:73:0f:6d:12:3c:5f:c9:88:50:
                    da:fa:84:18:e9:c4:08:c7:8e:e4:7a:54:0b:d9:37:
                    74:72:99:18:be:cb:7c:cc:0b:64:a6:ed:fd:98:d9:
                    16:0d:51:91:b9:bc:bb:fb:e0:21:d7:bd:e3:4b:e3:
                    4d:3d:62:12:6b:a5:12:3a:02:e4:b2:0b:47:58:fe:
                    48:ab:17:dd:57:b0:a6:a4:01:b0:84:f8:a7:50:f4:
                    ad:43:76:47:23:b1:98:3d:29:ab:e0:23:3c:65:d8:
                    67:92:b4:7d:9a:70:92:5a:4d:0e:3c:58:84:8c:8d:
                    c3:9f:4a:55:a8:38:3b:3a:ed:73:e9:b5:85:62:e6:
                    40:45:c7:f3:3f:81:53:dc:71:4c:18:53:a9:10:b3:
                    71:8b:d8:e8:64:26:18:25:2e:2b:1c:af:99:62:0a:
                    a2:3e:19:2b:8d:27:74:2a:12:5c:d6:8d:89:90:25:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3F:AF:B6:BA:4B:BA:A7:C0:08:90:C8:69:B0:6D:81:0D:AD:3C:C0
            X509v3 Authority Key Identifier:
                keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:15:e7:2e:22:3a:8c:27:a7:32:0d:0c:46:d1:90:6a:37:fe:
         68:a2:61:fd:bc:07:8c:7e:a2:04:36:80:ee:88:95:0a:0a:10:
         c9:d0:2f:14:e6:56:64:53:54:37:7d:7d:b2:ba:dc:d0:ba:6e:
         46:43:be:a5:ac:d6:3e:15:47:82:c6:2d:3d:67:63:ed:6d:64:
         ae:ab:d6:85:9b:30:70:16:df:73:d5:59:de:d6:03:10:4c:0e:
         94:6b:f7:18:6a:51:ab:fc:29:f7:28:09:46:70:cf:40:85:3d:
         25:01:77:73:cb:b4:21:ea:dd:a6:4c:81:b1:4e:ad:7c:46:f7:
         aa:57:1b:20:60:2e:d5:ce:b7:bb:29:2f:69:2e:72:c6:9d:9a:
         9d:77:26:46:e1:f4:aa:4e:1c:8e:35:bd:a2:23:98:20:97:54:
         cf:98:8f:33:c0:86:86:6f:b0:d1:28:6d:15:ce:e8:5d:a7:37:
         45:d5:20:1d:3c:ea:5a:c8:a3:66:16:5e:d3:d5:3d:4c:7c:16:
         c3:6e:13:06:be:e3:6a:a5:3f:80:d4:9d:6a:bf:99:d5:61:92:
         c4:9d:ec:82:3c:0c:48:38:97:25:42:30:10:4b:6a:d8:c7:5c:
         7e:cc:d3:f9:ed:0e:d3:9f:76:b6:5a:bd:e2:70:cb:0a:17:ee:
         c2:e7:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:14:38 2026 by rpki-client