Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
File:                     2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json)
Hash identifier:          rvsuFfG84mIkat2UntCZ1j6mwLOIWDktJWNBfMvWxb8=
Subject key identifier:   D8:13:CF:49:5C:11:3A:70:4D:04:A4:7B:B7:52:07:25:64:AF:80:FC
Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19
Certificate issuer:       /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
Certificate serial:       07A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
Manifest number:          079B
Signing time:             Sat 20 Jun 2026 21:29:31 +0000
Manifest this update:     Sat 20 Jun 2026 21:29:31 +0000
Manifest next update:     Sat 27 Jun 2026 21:29:31 +0000
Files and hashes:         1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: 3RbXC2W83NiuvjpD0793cAqMFUXFmWHkKbfYc1CxQy0=)
                          2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: UpKWNsrFUE42wx2E4QP7VPhKp5/RmK8tPocECrEYnRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl
                          rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Jun 2026 21:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955 (0x7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
        Validity
            Not Before: Jun 20 21:29:31 2026 GMT
            Not After : Jun 27 21:29:31 2026 GMT
        Subject: CN=6a37063b-d452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:ed:ad:f4:00:df:b0:5f:9b:cd:31:5d:e6:
                    b9:f1:f2:b1:fd:36:4f:ce:b7:99:73:93:81:d7:06:
                    69:47:62:6d:16:31:44:a4:7c:b4:fc:e9:31:f2:05:
                    d5:34:9c:18:42:e4:54:8d:14:d9:47:5b:38:58:3a:
                    af:c8:06:68:97:fd:93:79:09:92:4f:ec:23:97:ae:
                    0d:9b:ca:11:33:f6:72:35:5e:aa:67:91:4a:80:7f:
                    ae:d4:e6:de:8b:4a:95:7e:99:2c:ee:d9:8c:d8:aa:
                    8e:37:ed:45:ed:b2:05:df:96:c8:95:32:bf:93:1d:
                    e3:2d:f7:ea:b5:29:9e:de:e1:9f:90:15:1f:d8:89:
                    04:03:be:1b:d9:60:2d:83:ac:66:77:8f:6c:8c:07:
                    5a:71:7a:9b:a6:93:87:86:b2:c5:e9:27:bc:6e:08:
                    ca:97:1c:6d:9f:64:ff:86:90:27:29:52:26:08:bd:
                    38:7c:fd:61:b0:2a:d7:d7:2e:03:d4:ef:62:ed:23:
                    ff:0f:64:5b:84:05:2f:17:0c:5b:a9:dc:cd:c7:78:
                    2b:92:27:bb:bd:ed:99:e9:cb:26:83:2e:95:ff:6b:
                    99:83:27:12:a2:39:dc:a7:66:f6:d0:32:64:4a:f1:
                    b6:fb:8e:1e:1e:86:d4:62:73:a0:72:e9:0b:9e:8e:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:13:CF:49:5C:11:3A:70:4D:04:A4:7B:B7:52:07:25:64:AF:80:FC
            X509v3 Authority Key Identifier:
                keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:b9:32:ee:21:4e:4a:41:45:de:cd:f4:b0:b7:75:61:ea:
         80:7a:88:5e:11:24:18:6b:ed:71:5d:12:95:c2:43:bc:e8:4b:
         a6:d6:d8:b5:6c:88:1f:a1:8a:77:b8:a4:bf:54:4d:e5:51:2e:
         83:63:9c:af:16:a4:c6:b6:df:a4:7b:59:d2:9a:e3:c2:6a:77:
         74:91:07:e0:77:9f:be:cc:fa:b3:67:a1:be:28:ed:8d:fc:3b:
         8d:56:e7:7d:b8:c4:f6:db:c8:2f:a1:f2:7f:01:a6:94:11:7d:
         d9:f5:25:fb:7e:9f:85:c0:9a:53:84:6e:95:e8:a0:01:92:9b:
         a6:65:18:eb:97:ee:ec:99:69:26:61:c5:89:01:10:d1:c8:4e:
         3d:ad:70:2d:c1:78:28:be:de:43:d6:9e:ff:59:13:d9:9f:b7:
         7b:9d:eb:b9:b2:80:1f:7b:12:6c:78:a7:3b:21:e2:fe:05:db:
         fb:42:13:54:39:a9:5c:0c:e9:75:07:9e:74:4d:07:5a:6a:52:
         f4:6f:0c:83:1c:97:94:ff:c5:95:9c:0b:68:1b:4d:43:5e:f4:
         47:40:12:d0:c6:e0:a1:ba:02:c9:d1:cd:32:93:5e:e7:56:15:
         b7:e6:86:22:8e:fe:68:3a:3f:d9:a7:fa:dc:1e:b3:71:46:14:
         43:36:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:33:41 2026 by rpki-client