Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          th315pee4Jb7+96XsJgAm5U1YggNFxec3gPAbirmOrU=
Subject key identifier:   E9:B7:DE:B8:C0:C6:17:65:91:36:3F:11:71:08:8E:1A:20:CF:67:F2
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2842
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          27D9
Signing time:             Mon 20 Jul 2026 15:43:42 +0000
Manifest this update:     Mon 20 Jul 2026 15:43:42 +0000
Manifest next update:     Mon 27 Jul 2026 15:43:42 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: qCq2nqTAFJjDD52HfbGDh+wXg5paAM0cXHjcF/+7vmw=)
                          2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
                          3: 79393030926D11F0B792FC45C4F9AE02.roa (hash: tLT2kndqqx6tGSH4PRFsNm8v32IFyxMwIpYkP8MKXpg=)
                          4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
                          5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10306 (0x2842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Jul 20 15:43:42 2026 GMT
            Not After : Jul 27 15:43:42 2026 GMT
        Subject: CN=6a5e422e-9aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:6a:5f:2b:fc:36:1c:ad:8e:2c:6d:c5:a1:
                    91:db:86:63:65:c5:69:66:e3:b1:06:79:fd:1b:71:
                    e1:fb:e7:b6:6c:86:d7:91:c7:f7:39:74:54:07:d5:
                    15:7e:9b:c5:3b:bb:1d:19:06:fd:b1:3d:72:64:1f:
                    51:53:f3:f1:b7:eb:15:e7:d9:ea:09:93:f9:4e:59:
                    f7:9b:f3:32:52:2f:e9:7d:33:dc:68:c9:d3:76:21:
                    66:a3:3c:ec:b0:e3:6d:2e:9c:f6:41:88:9e:ff:b2:
                    0b:3c:6a:98:b8:a2:99:2c:53:7a:ca:ba:dc:95:6f:
                    62:5f:b2:53:6e:08:3d:5b:f8:8e:2b:27:57:d3:df:
                    30:99:5e:3e:45:d6:48:13:ab:29:f6:76:4a:bd:a0:
                    70:d6:4d:61:f1:a9:b4:80:4e:2e:68:0f:e1:b6:c5:
                    81:3f:54:eb:24:e9:f6:8f:81:8a:70:a7:33:b4:37:
                    f3:a2:44:f0:b1:d8:73:08:67:1b:a2:d7:b6:83:23:
                    2c:2f:59:83:ed:ee:7c:59:b1:df:d2:b4:cc:a3:cd:
                    4a:a8:24:dd:b8:78:0e:ac:0f:91:fa:c7:07:c2:9e:
                    a6:c3:bf:68:a5:cf:6f:9e:28:40:6f:6f:e8:06:1e:
                    bf:82:c4:34:0a:bd:bc:7e:6c:5b:3d:4c:70:21:93:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B7:DE:B8:C0:C6:17:65:91:36:3F:11:71:08:8E:1A:20:CF:67:F2
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e0:80:a9:0c:2d:55:fb:5b:07:2c:f7:fc:b4:2c:4f:78:26:
         94:38:63:f8:13:6f:06:d3:2b:dd:d0:9c:0b:60:60:79:b7:85:
         5d:af:55:c5:ae:72:7a:9b:56:80:b9:0a:2e:24:e5:a4:8c:40:
         51:94:16:a8:84:ff:1e:b4:d3:58:12:04:f4:4f:98:14:a0:04:
         7b:28:17:40:c2:78:22:44:af:09:f8:19:48:73:f8:49:e0:93:
         4b:14:cb:70:0a:75:c2:2d:f0:d9:61:57:f0:4d:64:57:a5:9e:
         c5:59:d4:56:ed:2f:6f:50:9a:ca:da:ad:ad:79:c2:3c:b5:10:
         e8:dd:e0:e2:46:3e:d4:7e:82:38:07:01:49:1f:26:62:71:82:
         b4:87:ab:96:af:0c:52:68:c2:ce:5b:16:d2:60:f6:53:4b:62:
         12:1f:0f:6a:6d:7a:8c:fb:ae:2d:3c:6e:de:12:bd:8b:49:0e:
         3b:cb:cc:f4:54:df:9e:4d:cb:af:29:ea:93:a5:2c:de:ff:af:
         57:d4:19:04:ca:5b:18:76:9f:87:de:3c:76:d3:fc:4d:a2:1b:
         5a:7b:91:36:76:a3:b3:35:39:5d:90:d8:43:c2:d4:8c:93:aa:
         48:a0:4d:06:91:ca:46:22:bc:93:e9:62:7c:ff:db:bf:0f:55:
         48:dd:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:08 2026 by rpki-client