Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
File:                     D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json)
Hash identifier:          1sd7NTEcwtglLBjaWQuP1ofRaKIGFFwzWxAIk4OSjyA=
Subject key identifier:   B0:B0:A3:AC:1A:60:F5:72:AB:A6:B0:C7:F8:D0:17:51:43:DC:D5:40
Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75
Certificate issuer:       /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
Manifest number:          69
Signing time:             Fri 17 Jul 2026 09:15:05 +0000
Manifest this update:     Fri 17 Jul 2026 09:15:05 +0000
Manifest next update:     Fri 24 Jul 2026 09:15:05 +0000
Files and hashes:         1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: HdMc+H6a27Gs8Olj26yuQI1I3BUlP/jz1Tw1e/b+KBM=)
                          2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl
                          rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
        Validity
            Not Before: Jul 17 09:15:05 2026 GMT
            Not After : Jul 24 09:15:05 2026 GMT
        Subject: CN=6a59f299-a247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:a9:11:70:b0:f2:eb:0b:78:ce:7c:be:41:
                    ed:7a:08:ee:75:c0:b2:10:48:16:66:ce:f9:f3:25:
                    2b:21:b3:d7:02:ea:5e:b5:d7:38:f2:ef:4d:54:dd:
                    2b:2a:7b:47:ec:50:2f:9b:b0:a2:93:28:aa:74:cc:
                    e7:aa:ad:55:f3:a0:b4:22:5f:d7:5f:38:0d:1f:4c:
                    90:f8:fa:25:00:9d:af:1e:f3:b9:e6:2c:40:e9:0a:
                    bc:06:07:b4:81:61:f0:80:ee:66:e5:55:56:59:80:
                    9b:89:fa:38:50:2a:b9:f3:94:88:6d:b0:0e:68:88:
                    b7:93:08:68:fc:ff:bd:2a:10:77:b0:3c:02:95:0a:
                    0e:62:81:63:ec:17:ff:91:7f:65:a9:c8:83:f7:a3:
                    a3:d3:bd:55:cc:2e:41:f4:29:a1:e4:8f:64:e8:ab:
                    65:80:f1:3a:a2:0a:c1:31:15:2e:89:64:28:0d:17:
                    1a:72:92:bb:a7:f0:e9:0a:5b:9d:88:1c:03:ff:d4:
                    62:f5:14:40:88:92:23:0c:27:24:56:7e:c1:4d:18:
                    35:1c:f3:1e:af:66:a7:a0:d4:51:cc:d8:cc:66:20:
                    1f:67:c2:8a:de:0f:cd:90:ce:70:8a:08:63:3c:5e:
                    95:d8:0f:27:aa:b9:7f:fa:03:07:0c:4b:a8:27:8c:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:A3:AC:1A:60:F5:72:AB:A6:B0:C7:F8:D0:17:51:43:DC:D5:40
            X509v3 Authority Key Identifier:
                keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:94:e2:d4:f5:d0:9c:ce:65:77:71:bb:f6:7d:7a:32:fa:
         35:d1:94:bc:0a:ea:02:b9:d2:9f:40:3c:51:21:bc:fc:79:a2:
         3a:a2:02:fd:47:c3:1d:05:e9:40:56:a6:54:4b:e0:66:a0:b4:
         b0:a2:22:ba:58:0d:c7:95:e8:92:99:60:af:87:e9:e8:ba:d4:
         79:c8:b5:aa:28:79:e3:58:bb:f8:c8:a6:53:fd:02:e9:14:e7:
         17:63:71:05:77:7c:8e:d3:25:77:f3:2d:ca:cd:0c:3f:90:84:
         a8:35:7f:61:21:ff:5b:e7:da:c8:5a:27:88:87:40:48:2d:57:
         93:8a:38:59:c5:8a:5e:5a:2b:96:d1:5f:11:59:23:66:34:19:
         52:c3:76:33:65:a7:cf:16:7f:b7:19:38:fc:a9:25:38:cb:d0:
         dd:9c:12:84:12:e3:c0:16:a9:45:a0:52:44:25:e9:77:fd:7b:
         94:e2:d0:20:42:ad:72:0d:bc:cd:0b:91:4e:d2:fe:97:97:1d:
         b0:84:71:93:92:32:e7:b8:25:7b:46:83:6e:ef:9d:69:37:f8:
         c5:10:82:81:ae:2c:45:5f:ab:cf:28:6b:66:d0:50:53:0a:9f:
         d1:81:00:18:98:e7:f8:42:6f:d4:ef:3a:4b:e4:72:d9:7d:3e:
         5f:f4:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:35:05 2026 by rpki-client