Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier:          6cR1eIRT18yYmhtfVhEEeeIDt9eJRbguKyausIqEjvw=
Subject key identifier:   11:2A:0B:49:EF:A9:C1:4E:CF:26:FD:2F:5F:7E:2D:F2:5A:F1:27:44
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number:          0154
Signing time:             Fri 17 Jul 2026 06:21:50 +0000
Manifest this update:     Fri 17 Jul 2026 06:21:49 +0000
Manifest next update:     Fri 24 Jul 2026 06:21:49 +0000
Files and hashes:         1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: v/5KBXePKrkwWXJ0JJi0uwUXQ2f2m5Cd++gGMozPBTA=)
                          2: 900E2938699411F19844B5108747A888.roa (hash: jus1+o58HPMre2DMSzeD+2S7keAR6F7xQ/skabW/OhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Jul 17 06:21:49 2026 GMT
            Not After : Jul 24 06:21:49 2026 GMT
        Subject: CN=6a59c9fe-c079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:3c:8b:70:1c:c8:3d:c4:92:e4:dd:72:66:
                    0f:a3:47:a9:81:63:2b:b4:e7:e2:5a:82:4a:aa:83:
                    06:f2:f0:e0:56:68:07:67:ae:26:83:9c:09:88:ca:
                    b3:68:57:fa:05:ae:fc:6c:58:ac:31:b3:88:1c:34:
                    51:bb:49:a1:f5:6b:39:7c:fb:85:e9:75:51:cd:07:
                    c7:1a:cf:23:94:a1:17:a4:ad:bb:fe:4e:3f:18:31:
                    1a:4f:ac:8a:4a:79:60:8b:3f:7f:8d:55:1f:ce:8f:
                    2d:71:be:94:71:6b:ae:9f:87:3e:dd:06:d8:f3:10:
                    d7:af:b1:2d:90:74:a5:be:e4:a2:5e:c2:8c:fa:e2:
                    05:a7:cd:24:82:60:79:d6:5f:24:28:76:35:18:5c:
                    fc:6d:a1:db:ee:ec:a4:32:7f:67:2a:cd:c6:a7:4e:
                    b7:3e:f7:ef:e2:5c:df:da:d7:38:ab:0a:6b:5e:02:
                    29:4f:5c:93:ee:e1:20:a4:a0:06:20:48:2a:17:b8:
                    2f:1b:97:72:06:25:b4:59:ce:3c:9f:41:fa:1d:f2:
                    9a:e1:83:dd:fd:28:80:ae:05:f4:de:c0:09:a3:a1:
                    1f:02:a4:a5:f7:ab:64:7c:79:91:f3:c5:92:bf:2b:
                    00:af:21:89:d5:b5:e7:a8:90:cb:d0:dc:7b:1c:d8:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2A:0B:49:EF:A9:C1:4E:CF:26:FD:2F:5F:7E:2D:F2:5A:F1:27:44
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:06:1e:be:be:a8:04:38:1a:de:e2:d2:d4:b8:c4:c4:24:
         65:8b:88:85:d8:c3:88:bc:ce:ed:99:9a:0a:f9:3b:3b:f0:5c:
         d2:cc:00:46:f0:4e:4c:60:19:e8:ea:76:97:58:bf:83:7f:5e:
         d7:84:76:45:ff:2d:58:fd:42:b2:5f:13:c2:08:39:17:4f:f5:
         67:ee:3b:56:38:06:9c:b1:5f:12:ca:90:62:cd:4b:71:35:73:
         38:a7:b6:46:9f:b7:10:9d:fb:a3:dc:96:f8:52:ed:77:2d:d8:
         2e:bc:a1:d5:51:1d:8b:5d:ab:ed:ef:9c:0f:34:d3:67:4b:de:
         ec:53:a5:5b:8e:40:a5:3d:8a:7b:16:67:23:6e:da:c4:75:0a:
         79:34:70:e2:fa:36:5d:e5:5d:c2:8a:e9:ba:0b:95:92:ae:be:
         5a:22:35:72:5f:db:bf:00:e8:b2:9b:0f:01:6b:ec:b6:c5:78:
         45:62:f3:8d:b7:6f:ac:07:e1:3d:e2:84:d8:c7:67:f6:66:8a:
         f4:4f:c3:8a:2a:7f:f2:a1:6d:dc:54:e3:20:65:f1:6c:ba:33:
         e3:c3:13:86:ab:c2:24:ee:20:31:3f:16:0c:1e:d6:03:96:e0:
         54:0c:10:69:0b:5e:c4:62:cc:29:e6:5a:0a:62:65:6b:06:d6:
         18:e9:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:28 2026 by rpki-client