Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File:                     ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier:          yl4j0FAkrLoKAqf56vvE92pZycGTm/DMePfPuAIyxYA=
Subject key identifier:   15:79:AD:6E:DF:8D:92:C9:1B:4A:43:F5:A8:8D:E7:5C:88:07:91:E6
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer:       /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial:       0D5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number:          0D40
Signing time:             Mon 20 Jul 2026 18:22:32 +0000
Manifest this update:     Mon 20 Jul 2026 18:22:32 +0000
Manifest next update:     Mon 27 Jul 2026 18:22:32 +0000
Files and hashes:         1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: Knpot76OUOC0K3OzMmO5f+SSglOq31xUakw4dzl2peA=)
                          2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: t2CWkBXQYpfXnKjT2eidVo6yQZfsGFOZhOTBTaGrl0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 18:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3419 (0xd5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
        Validity
            Not Before: Jul 20 18:22:32 2026 GMT
            Not After : Jul 27 18:22:32 2026 GMT
        Subject: CN=6a5e6768-91f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:71:e7:58:82:e8:e3:82:b2:59:3b:54:26:
                    66:23:bc:8d:fe:1d:af:9a:13:a4:eb:9f:b7:ed:0d:
                    fb:91:76:52:72:be:c6:98:66:42:ee:78:00:02:2a:
                    26:61:19:05:34:de:fc:78:7d:8b:92:f6:14:93:fe:
                    38:d8:28:db:78:71:b5:0c:04:ad:fd:71:8a:ca:f0:
                    e8:13:2e:e0:6b:40:d8:2e:cf:4e:fb:c9:80:7f:4b:
                    ab:f6:79:e6:b4:db:fd:a7:06:ed:07:7c:07:82:5a:
                    2f:7f:e0:a8:01:7b:2a:72:44:c8:cf:6a:2d:12:79:
                    4b:6d:a9:41:52:14:6e:51:fe:b9:bd:7d:e5:67:8c:
                    3b:9a:7d:b4:b7:21:03:7c:f4:8e:7f:ff:6b:8c:04:
                    0d:f2:35:8e:70:91:2f:cd:9b:97:eb:f3:57:5b:cb:
                    62:c8:6a:19:2d:d3:ce:5b:f6:5d:ba:e2:24:88:df:
                    41:dc:d7:81:1a:36:49:8c:69:85:aa:ef:17:72:44:
                    58:0b:1c:08:70:78:73:b8:95:d2:f8:c0:1a:13:aa:
                    28:84:05:86:0d:03:7f:9b:e8:1f:f2:7f:05:de:91:
                    ea:0c:3e:c5:1c:2b:bd:06:79:32:c1:2b:12:9a:1e:
                    ac:b1:71:d5:df:44:69:eb:df:c9:d0:5f:8c:11:bb:
                    67:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:AD:6E:DF:8D:92:C9:1B:4A:43:F5:A8:8D:E7:5C:88:07:91:E6
            X509v3 Authority Key Identifier:
                keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:98:3c:18:39:37:d2:2f:53:bd:c2:e1:39:20:96:e7:9e:
         09:75:a6:94:d4:10:ae:d6:fd:f0:d6:de:52:27:a3:db:42:2b:
         24:c1:c9:e5:e4:6b:5b:14:9c:d9:a3:80:b6:65:4b:d0:db:5b:
         ab:fa:a7:49:15:b7:cf:66:90:94:dc:8e:fa:4d:63:5f:0d:11:
         13:b7:c2:93:60:05:ff:a3:f7:77:a6:2b:19:ca:7e:22:e0:a4:
         79:8a:84:cc:1f:4e:b8:2c:b2:1e:1f:12:dd:39:d4:78:f7:85:
         5e:f2:07:a3:e2:ed:a8:87:62:eb:34:fb:07:75:de:89:11:59:
         bc:50:2c:9b:d8:0c:40:7e:cb:bd:d8:94:10:1c:d8:91:37:b4:
         06:7f:df:8b:c1:cb:a4:64:37:31:89:e9:91:15:98:44:06:ee:
         18:23:72:0c:a9:3c:0b:85:ad:02:b6:b2:cc:82:58:09:35:81:
         de:58:69:02:25:7b:32:88:3a:d7:07:61:37:06:c2:d7:86:2e:
         fc:ec:1d:d1:94:f2:4d:d9:34:0f:90:2e:49:a3:d9:15:76:3b:
         97:7a:eb:44:81:1c:2b:e9:67:c9:e7:10:b7:c7:36:a4:1c:14:
         3a:e8:2b:5f:38:ff:c1:02:cf:52:7c:7c:ea:99:1e:46:ae:29:
         f7:0d:f0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:01:23 2026 by rpki-client