Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File:                     fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier:          uEyDu9kgXE+xC/3Q+3xKJNU0fAWgDu/+WoArMZwglQA=
Subject key identifier:   69:E7:DB:99:0E:58:C3:3F:91:E6:F5:A8:C9:F0:08:FF:70:6E:04:C0
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer:       /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial:       052F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number:          0525
Signing time:             Fri 17 Jul 2026 00:09:51 +0000
Manifest this update:     Fri 17 Jul 2026 00:09:51 +0000
Manifest next update:     Fri 24 Jul 2026 00:09:51 +0000
Files and hashes:         1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: CbmZKeGTFLI98xYYUi4QDy/MxnFSKAnWE9hxld+a4rg=)
                          2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: 0Yuj8jwsHlCnMcg0SGtiJaONeRl25wMXy9ufRSKcIXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 00:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
        Validity
            Not Before: Jul 17 00:09:51 2026 GMT
            Not After : Jul 24 00:09:51 2026 GMT
        Subject: CN=6a5972cf-c4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:28:31:b3:26:92:e2:b8:9f:d2:1a:e5:38:
                    6f:18:b1:67:4d:68:1d:fd:3c:f7:72:cc:4a:8a:4e:
                    9f:55:86:19:1c:56:ec:2f:1b:4f:53:63:65:f6:0d:
                    31:42:df:e2:57:2c:27:a7:b3:cf:34:f4:74:69:6b:
                    b7:db:b4:0a:78:c4:c1:7b:df:7b:f9:8f:26:6b:22:
                    6d:9c:a4:66:14:f0:64:4f:74:67:a4:b1:33:f1:b4:
                    21:d7:2a:4a:0e:2f:2a:08:b8:cc:35:d3:0b:bf:ff:
                    a3:2f:71:2d:ef:30:74:0f:c1:ba:97:25:cd:19:b5:
                    f2:71:2c:cf:58:8e:a8:7a:fd:e7:28:ad:78:5d:fb:
                    ba:f3:11:02:e4:b0:c6:23:68:b4:c9:18:2c:50:72:
                    6e:26:58:d7:fa:a2:fe:a7:ad:60:f4:4e:42:45:bb:
                    bf:29:58:87:e4:4c:28:60:df:7a:fe:98:82:93:51:
                    79:be:f0:be:6b:b6:1d:90:bd:98:3e:b3:0c:ac:38:
                    79:f6:59:e8:63:63:27:22:14:c2:6a:5f:b1:94:7a:
                    62:e8:40:aa:10:1b:f5:72:4f:48:60:7e:ad:7f:c1:
                    24:96:54:66:e9:d4:63:20:b3:c5:37:45:dd:7a:03:
                    01:7f:02:99:52:2a:48:40:4b:93:04:8d:31:fc:74:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E7:DB:99:0E:58:C3:3F:91:E6:F5:A8:C9:F0:08:FF:70:6E:04:C0
            X509v3 Authority Key Identifier:
                keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:52:9f:7f:f8:d0:3b:da:14:82:08:83:2b:f5:63:7e:18:92:
         ea:1f:5c:95:44:59:85:39:f2:c8:f4:ee:78:46:77:a1:b2:cd:
         7e:b1:e5:27:cf:36:d7:af:a9:e2:2d:ec:de:a5:4c:67:26:07:
         93:0b:53:33:47:f4:f2:8d:b5:3a:4f:36:4e:9e:c7:08:d8:ae:
         e4:40:10:62:17:99:25:d9:6a:2b:ab:5d:ce:52:47:86:ea:bf:
         77:a4:44:5c:18:c0:ed:b5:db:61:52:39:3d:da:17:9c:8b:0c:
         00:47:15:0c:c6:46:ea:39:f9:fe:1e:b1:83:2f:db:b1:04:30:
         96:aa:ab:a5:6d:ac:7a:7d:36:b4:18:2e:2e:85:38:50:c0:5d:
         42:aa:8c:bd:e6:5c:cf:e1:ce:59:5f:01:67:07:e6:18:46:42:
         49:c4:66:d8:80:dc:9e:08:6d:5d:55:71:8d:49:b4:20:28:6a:
         79:3b:d1:f1:c8:e1:0b:86:9b:bf:63:52:86:cf:18:76:84:1c:
         dd:a3:fc:ae:9c:74:fb:61:61:2f:83:de:a2:45:15:f7:bb:57:
         a8:25:2d:e1:06:9c:7a:5e:3a:a5:97:1e:2c:e4:08:01:71:e6:
         a7:8f:f1:5a:d4:9b:8c:4f:fc:80:01:62:47:25:5b:50:7f:7f:
         2a:8e:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 13:31:17 2026 by rpki-client