Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
File:                     cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json)
Hash identifier:          9AGC8eFD3AHsAXKKkqgYXI7U/daKJbHNJdLnw/XpfTY=
Subject key identifier:   52:22:C1:D6:3C:6A:64:3A:EF:2B:9D:7F:CC:E7:A0:00:3D:56:3F:4F
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Certificate issuer:       /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
Manifest number:          01E5
Signing time:             Sun 05 Jul 2026 03:59:25 +0000
Manifest this update:     Sun 05 Jul 2026 03:59:24 +0000
Manifest next update:     Sun 12 Jul 2026 03:59:24 +0000
Files and hashes:         1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: LKXLSs72oYeLZFx9qmwJv4VJZWSqi4PM+N3ocNaiFyY=)
                          2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: 00LuaUNmIyPdgmkhjWdXCJt4yLwtEm0sc7JiqhVSo/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
                          rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 03:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
        Validity
            Not Before: Jul  5 03:59:24 2026 GMT
            Not After : Jul 12 03:59:24 2026 GMT
        Subject: CN=6a49d69c-9352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:f5:97:1c:03:3b:4e:ef:56:fc:c6:86:27:
                    54:72:e3:08:14:b7:d8:45:2e:ed:90:50:14:29:ca:
                    db:bc:d8:06:a1:06:01:2a:9d:9c:83:f2:e8:66:44:
                    19:21:8e:46:e0:10:e8:61:1c:cd:73:24:d5:ca:7f:
                    07:b5:fe:7f:37:76:b9:f1:8e:21:d5:79:3e:1d:03:
                    57:5e:87:ed:89:41:d3:0b:c1:35:a3:10:82:75:68:
                    6d:dd:fb:8a:ce:a2:41:58:34:07:2c:61:f3:d2:de:
                    43:7e:6c:3c:be:cc:12:96:9e:4a:10:68:8f:21:92:
                    88:44:e3:03:ee:2e:8d:e1:dd:3d:7d:09:03:66:43:
                    db:86:6a:47:e2:f5:6e:52:41:e5:da:f9:93:39:82:
                    4e:82:62:94:4a:ea:b0:a4:6f:e2:09:29:2b:41:eb:
                    5c:56:a6:7c:86:11:0a:2f:3b:d9:8f:59:be:ff:ac:
                    ef:05:06:be:74:39:2f:2d:98:3d:35:01:8c:73:f0:
                    78:a6:7f:ab:ee:cf:36:40:69:ec:fe:41:74:5f:a0:
                    67:17:9e:ca:26:c3:64:54:46:14:3c:b9:80:c1:83:
                    40:2a:df:1d:89:98:1c:80:3e:36:df:2c:98:dc:45:
                    c0:ad:bf:6a:a7:f3:26:f9:d2:e9:49:2c:73:b2:09:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:22:C1:D6:3C:6A:64:3A:EF:2B:9D:7F:CC:E7:A0:00:3D:56:3F:4F
            X509v3 Authority Key Identifier:
                keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6f:ce:04:62:dc:cc:cf:56:86:09:dd:1f:37:92:1e:59:3d:
         68:8c:e8:31:dc:d6:43:b6:27:68:ba:25:0a:2c:d3:83:d1:fe:
         b8:40:5f:9e:06:ee:a5:c3:d7:a9:fd:c5:98:9e:7b:ae:c9:07:
         ff:87:69:b0:08:0e:12:eb:41:e2:e7:f2:a3:67:79:ac:72:83:
         b0:02:3b:09:36:36:f1:de:28:f4:7d:30:d8:82:b3:68:2d:23:
         ef:94:ca:b0:a5:eb:2b:eb:42:09:e0:3c:46:6b:b1:4d:46:3c:
         37:de:a8:82:a2:9a:cc:b5:1a:25:34:61:bd:4e:df:23:fd:b1:
         7b:09:36:13:b7:a4:2b:4e:4e:ad:8f:31:33:4b:75:d8:ae:09:
         56:b5:d4:33:a4:f0:82:f7:70:c7:79:45:c4:0d:26:94:ef:63:
         2f:22:eb:32:48:67:dc:a7:9c:ba:a5:de:3f:6f:fe:db:4d:15:
         16:5b:9d:0f:48:2d:51:eb:ec:73:8a:71:37:a3:ce:fd:19:9b:
         7f:47:2e:f8:8a:27:a6:9e:28:a5:0c:a2:b8:4c:52:6c:cf:4c:
         18:9d:16:fb:23:65:a1:27:b7:fa:6a:e1:d6:0d:81:fd:2d:c8:
         42:52:2c:68:58:2a:e8:b3:62:08:7f:9b:59:b0:68:1d:15:9e:
         bc:8c:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:13:59 2026 by rpki-client