Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File:                     a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier:          +dq2pvEuUMxmkiDwNwPLiJahvZm0hortWqCUMpd/DrA=
Subject key identifier:   2A:EC:ED:E2:8F:99:37:4A:C3:7B:68:CB:49:BB:8A:DE:F4:1C:83:70
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer:       /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number:          BE
Signing time:             Fri 17 Jul 2026 08:10:38 +0000
Manifest this update:     Fri 17 Jul 2026 08:10:38 +0000
Manifest next update:     Fri 24 Jul 2026 08:10:38 +0000
Files and hashes:         1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: F7+SJfgBEUWi3CY3RaNBLGdrHbsvOkgZyv5QpuX8qgU=)
                          2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
                          rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
        Validity
            Not Before: Jul 17 08:10:38 2026 GMT
            Not After : Jul 24 08:10:38 2026 GMT
        Subject: CN=6a59e37e-6b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:8e:84:f9:5c:da:4e:f4:78:1a:2c:08:20:
                    34:32:1d:65:09:49:09:34:d6:57:be:4b:15:85:34:
                    3f:0b:e7:60:5c:bd:25:c4:22:38:bf:61:40:c3:81:
                    33:46:49:1d:cb:aa:ad:c5:88:62:a2:4f:28:34:75:
                    7b:1a:fa:7b:59:69:62:2c:74:97:e8:82:d5:3b:ec:
                    c5:15:7f:c5:01:72:a9:c5:2f:04:b9:3b:5e:1d:7e:
                    1e:04:35:0a:9e:2b:10:a1:f2:88:e4:cd:f4:5d:2c:
                    3d:1f:ea:b4:44:2f:c9:e8:d7:46:99:1b:7c:97:b8:
                    e0:9f:27:aa:28:c5:f7:9c:cd:f1:37:c2:af:13:fa:
                    fc:fd:ff:dd:cc:3c:b1:70:f7:51:71:ea:f6:b4:bd:
                    2f:94:48:0e:b3:e1:f5:9a:a0:9b:6c:a6:62:3a:66:
                    a1:f1:d9:30:d3:d3:a2:25:1c:5c:8a:03:90:2b:3f:
                    85:a2:be:3e:fd:f0:76:a7:af:76:f7:a1:9b:58:7c:
                    55:83:2c:61:bd:75:62:cf:52:64:1a:2f:8e:f9:a0:
                    eb:9e:db:0e:f4:95:3c:52:4d:37:72:c3:af:57:49:
                    ab:d5:71:a6:2a:d3:02:e2:44:85:e3:e5:d9:03:3a:
                    b1:37:42:e9:10:70:7a:aa:b0:60:0b:8b:66:cd:4c:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:ED:E2:8F:99:37:4A:C3:7B:68:CB:49:BB:8A:DE:F4:1C:83:70
            X509v3 Authority Key Identifier:
                keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:86:48:42:c0:9d:1b:3d:4f:41:b8:3c:64:81:5e:17:21:17:
         2c:8d:e9:66:e4:b0:58:f6:94:99:3a:6c:c0:e8:7f:ed:a2:cb:
         16:be:a0:a2:81:d9:61:f0:67:21:d9:c4:92:c2:c1:0f:18:d6:
         90:03:19:01:f2:35:5d:84:0d:6f:b5:7c:4d:40:ec:38:86:61:
         81:79:dd:48:e9:8a:94:8e:02:74:18:3c:1e:2c:8d:04:60:1f:
         8d:9b:2e:53:96:bb:4a:ad:52:82:30:92:6d:8b:71:b7:05:17:
         75:c9:7e:5a:66:b3:27:0f:b3:de:ef:74:21:ef:fb:22:e2:58:
         7d:1b:68:f2:17:9b:09:ab:5c:40:e9:f5:0a:77:12:06:e3:10:
         65:dd:ce:4e:1d:22:e9:2c:7b:44:0a:55:a0:2a:47:fc:97:f4:
         f9:5b:62:d1:80:43:e7:0b:9f:dc:61:68:cc:a9:ba:17:5c:93:
         df:04:e6:fa:f4:8a:0f:2c:be:bf:d4:86:c8:b4:68:fa:c8:af:
         c1:a9:9e:8a:a6:74:3b:84:26:03:2f:03:1b:f1:0b:0b:03:0d:
         05:9f:d2:8c:1e:0a:5f:2d:8a:71:16:b1:5a:50:9e:fa:64:09:
         80:4a:70:da:4a:da:33:3f:24:05:5e:6e:8c:26:2b:cc:9c:f8:
         93:7a:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:11 2026 by rpki-client