Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
File:                     80gH4oZFUlDDf1PcB78ego0Zpi0.mft (raw, json)
Hash identifier:          pTLPQvCCk2phn79zos5bcpBtIJQLCHT/o+TY14OEpGw=
Subject key identifier:   9D:13:3F:1F:00:1F:09:3D:BE:66:15:E2:E5:C1:85:C0:2F:C0:C9:3D
Authority key identifier: F3:48:07:E2:86:45:52:50:C3:7F:53:DC:07:BF:1E:82:8D:19:A6:2D
Certificate issuer:       /CN=A91AE317/serialNumber=F34807E286455250C37F53DC07BF1E828D19A62D
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
Manifest number:          36
Signing time:             Tue 21 Jul 2026 10:28:51 +0000
Manifest this update:     Tue 21 Jul 2026 10:28:50 +0000
Manifest next update:     Tue 28 Jul 2026 10:28:50 +0000
Files and hashes:         1: 80gH4oZFUlDDf1PcB78ego0Zpi0.crl (hash: QBCAwWN2PhbbhMRM+OeF78uTgv5tK+QHV4Xx5/DsvGM=)
                          2: 6AD7B83833F111F1BEF90B0CBC833773.roa (hash: 8WPkjnCq5gWzPkDaukbewo2KFmM/DSl1x5vnl/o5OAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.crl
                          rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE317, serialNumber=F34807E286455250C37F53DC07BF1E828D19A62D
        Validity
            Not Before: Jul 21 10:28:50 2026 GMT
            Not After : Jul 28 10:28:50 2026 GMT
        Subject: CN=6a5f49e3-d447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:22:e0:b6:61:2b:0c:d8:47:ee:4c:b6:94:
                    8c:92:2e:aa:5b:42:f1:2a:fc:e5:e3:2c:9a:4d:0b:
                    40:b2:90:8f:46:3f:a8:d8:74:0d:53:ec:45:fe:b8:
                    29:98:45:e8:82:fc:1e:ea:c7:0d:86:75:19:8f:08:
                    20:ed:9a:70:5d:59:df:bc:df:90:64:25:ec:2b:23:
                    0c:39:08:46:71:a2:89:ad:6c:9c:26:66:dd:06:e6:
                    f9:11:c9:cd:bc:a3:66:04:56:35:04:32:db:17:f8:
                    f3:5d:a0:37:b1:a6:24:94:29:38:f1:2b:0e:c1:44:
                    b9:83:51:aa:9c:58:84:16:ed:71:64:ee:56:0d:4c:
                    a6:94:c9:03:3d:43:8d:e5:9a:b1:f2:52:8a:36:89:
                    6d:45:a5:74:c6:ed:14:3e:f8:b5:39:02:40:da:b3:
                    bc:e0:7d:c5:e1:cc:41:c1:f3:49:9f:d4:b5:8e:bd:
                    5e:96:67:12:3c:7c:75:67:7f:df:e0:cd:b1:1a:53:
                    1e:91:7e:8b:70:5b:a4:f2:3b:2f:61:b0:de:ca:34:
                    6b:38:69:d0:13:11:61:6b:e4:7e:59:99:b9:02:bf:
                    a4:98:50:ab:a5:61:bd:06:d0:09:7a:79:d2:60:f4:
                    f3:54:28:8c:f0:d2:96:f2:93:65:8e:be:2f:bc:b0:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:13:3F:1F:00:1F:09:3D:BE:66:15:E2:E5:C1:85:C0:2F:C0:C9:3D
            X509v3 Authority Key Identifier:
                keyid:F3:48:07:E2:86:45:52:50:C3:7F:53:DC:07:BF:1E:82:8D:19:A6:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:cb:81:8b:47:65:a3:e8:b6:ad:96:5d:36:d7:ff:78:fd:9d:
         fb:50:73:5e:55:5e:2c:58:a0:66:a8:73:5f:c8:63:d6:a9:22:
         35:ae:94:f8:e1:9e:b0:91:41:98:0d:e0:7d:08:11:fc:64:95:
         9e:16:0c:32:ca:ea:6a:60:bc:03:b0:ed:91:20:09:39:dd:fa:
         13:48:19:b0:0e:59:cb:ab:91:5c:f0:c3:7a:da:04:7c:fb:bd:
         c6:89:b7:78:10:03:45:20:d7:73:bd:65:07:23:31:f1:a5:ed:
         67:70:a0:9a:77:2f:47:9b:d7:08:1f:97:19:f3:85:0e:ee:b1:
         74:b7:8b:cf:6b:c8:5c:6b:fb:62:5f:98:52:f2:cd:8b:00:c4:
         12:af:50:4c:37:82:e7:68:fb:60:69:fd:2a:c8:98:0c:9c:33:
         b0:a4:68:6f:a6:a0:d0:a2:3e:d4:72:51:e5:8d:d7:d7:8a:d3:
         a5:5f:85:7b:ff:1a:7f:bf:78:7c:4c:33:3a:71:1d:f1:45:80:
         53:11:b3:52:a2:b8:ce:73:fc:98:ec:fa:4a:48:e1:19:a8:0f:
         75:05:59:c1:56:d1:57:8a:bd:05:fb:b1:00:d6:00:13:c6:79:
         18:35:87:b1:82:18:c9:a8:5f:5d:51:d2:0e:e8:50:f9:bc:b4:
         0c:66:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:45 2026 by rpki-client