Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
File:                     iQyucO4FJzcpUQC_DPAR6zIEYrc.mft (raw, json)
Hash identifier:          BeTtoobxa2SS2rmbWnMqhjJkHWQNF1D0QpYvIboPMFw=
Subject key identifier:   6F:4B:62:BF:50:75:F2:C3:13:45:D0:B0:53:07:1D:AA:0E:5A:A6:52
Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
Certificate issuer:       /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
Manifest number:          4B
Signing time:             Sun 05 Jul 2026 09:10:03 +0000
Manifest this update:     Sun 05 Jul 2026 09:10:02 +0000
Manifest next update:     Sun 12 Jul 2026 09:10:02 +0000
Files and hashes:         1: iQyucO4FJzcpUQC_DPAR6zIEYrc.crl (hash: Me+GFHBFwwOpQPG1EiSbpBzvI9D9QwgyiuMocH43SV0=)
                          2: 28C5A13E58D711F1A51CFA3FA6833773.roa (hash: vdn++VmCdwWiyzm/zFcI+x86Ju8nJ7UCVdrrR8Mfcxg=)
                          3: 58548E7E58D711F193388669A6833773.roa (hash: 5SoJbf8FG3By3aUEH9+1tHflBLhQTGm7shpUveBVDcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
                          rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 09:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
        Validity
            Not Before: Jul  5 09:10:02 2026 GMT
            Not After : Jul 12 09:10:02 2026 GMT
        Subject: CN=6a4a1f6b-51e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:94:db:21:41:66:83:d7:40:90:a8:e8:b0:
                    be:ec:53:88:6c:5b:f8:58:70:19:7c:69:ce:33:46:
                    78:a8:33:c4:86:3e:03:7e:f3:f1:d0:d9:90:38:76:
                    48:e0:37:2d:d0:38:65:a1:8b:01:f9:09:ef:70:42:
                    38:e8:1a:8e:e5:b1:08:76:dc:a6:40:cd:6a:c8:dc:
                    bd:68:d2:98:05:16:0d:c9:7f:ec:10:c4:1d:d5:dc:
                    a3:39:fe:e1:4c:f0:eb:d9:3b:dd:71:d0:01:d6:ca:
                    bd:01:60:a5:1e:28:bc:54:9f:04:2b:97:9f:62:5f:
                    a6:0e:d6:89:4e:d7:19:62:bf:5a:4e:ea:bb:91:c0:
                    93:79:74:cd:a8:4d:c3:d7:bd:1a:d1:7d:91:5d:b6:
                    f4:12:c6:8b:44:f0:64:51:67:9c:70:c3:ba:e3:fa:
                    c7:60:7d:3a:6a:6c:ee:18:38:39:4e:4e:de:ee:91:
                    56:1b:c3:8d:23:10:c9:ec:12:03:06:23:f2:cd:a0:
                    90:47:ea:79:49:ce:c0:9e:6a:89:1a:31:6f:f4:a0:
                    8b:9d:75:37:91:4b:e7:df:47:21:f8:7b:53:83:36:
                    e1:cb:79:f2:9b:86:02:57:32:8b:8b:d0:9d:4c:24:
                    87:df:96:22:d5:b7:88:8e:d5:3f:9b:1e:22:12:d8:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4B:62:BF:50:75:F2:C3:13:45:D0:B0:53:07:1D:AA:0E:5A:A6:52
            X509v3 Authority Key Identifier:
                keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:a1:bc:87:5b:7d:70:c6:24:4b:c3:8b:29:70:ff:9e:0d:
         b9:61:85:81:99:35:ab:7b:1b:3a:67:f8:5a:b9:8d:29:74:97:
         3f:9d:cc:87:5a:78:8b:71:d5:0b:83:84:22:8a:1c:c5:33:89:
         6e:23:4d:e9:c5:4d:b5:ca:a0:7b:53:ed:01:6f:74:a8:b2:0b:
         fc:00:42:07:2c:06:b4:8c:49:dd:65:9b:28:5f:44:9e:27:1d:
         12:94:bb:7a:82:3d:cd:32:79:a2:4b:6d:c7:0a:51:5a:b2:0b:
         98:70:1b:aa:ae:5e:27:4b:1b:44:d5:3a:5e:36:e4:3c:1c:27:
         d1:b3:bf:a9:54:23:81:f2:49:0c:2f:d6:b8:df:22:97:17:e0:
         ea:61:32:c9:6e:11:08:c5:b3:28:81:a8:27:29:d8:b6:90:67:
         c8:07:0e:c5:f4:bc:72:f9:ef:6b:a1:ec:13:de:0e:2d:ca:b9:
         e2:2b:ba:97:a4:48:f7:e1:cd:c0:db:37:be:0b:07:71:c0:48:
         5b:95:65:73:fb:4b:4f:16:29:93:63:b2:5f:7e:de:d7:ec:3f:
         b9:e9:c1:3d:12:f6:a8:8a:ad:db:d2:b5:f5:d8:ba:6c:c2:a2:
         f1:26:8d:1e:7c:51:11:ce:55:8d:b4:7a:b6:68:2a:2f:2e:7e:
         5d:8b:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:16:13 2026 by rpki-client