Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          /rKPDd0EdxokWMm8wKDfsKdI8U0wTFmuetd0le3K3HI=
Subject key identifier:   B8:75:53:1C:0E:6E:6B:5D:2B:FE:B5:38:1E:8C:1E:14:25:F3:7E:69
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          EF
Signing time:             Fri 17 Jul 2026 07:35:25 +0000
Manifest this update:     Fri 17 Jul 2026 07:35:24 +0000
Manifest next update:     Fri 24 Jul 2026 07:35:24 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: DmvZDC6KcjuAd3LLUNINIz5bEPDI21NXa9pDr6iEC6U=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: SY3BwzCftGVZ3723+P2mum60QxTDJL2Satr/FIkLJnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Jul 17 07:35:24 2026 GMT
            Not After : Jul 24 07:35:24 2026 GMT
        Subject: CN=6a59db3d-3b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:5c:f0:7d:aa:13:21:94:07:c6:ab:37:5f:
                    b2:42:64:3c:be:6d:ca:ea:bc:cf:64:84:88:4a:4a:
                    ae:ea:b3:c8:76:bc:57:6e:2e:0e:89:db:bb:21:66:
                    7a:99:78:d2:53:bd:bd:dd:f7:f1:f1:06:bd:80:79:
                    b3:f9:a5:5d:97:f7:fa:d8:a8:58:7f:25:57:68:f5:
                    73:5f:9b:6c:aa:9a:b1:70:cb:37:7e:24:5f:fa:ac:
                    a2:85:01:f9:c6:3e:d6:54:e7:cc:4e:06:5a:d3:c9:
                    72:79:d6:ab:b7:ea:83:a2:49:05:c4:c4:1e:14:68:
                    a7:bb:1c:41:68:35:1f:67:f5:ba:4c:9d:26:58:45:
                    57:05:08:76:d4:0e:ec:50:70:35:d6:de:5c:03:9e:
                    b0:08:59:28:28:24:ff:2f:dc:5e:ab:55:b0:70:e2:
                    c6:7f:9e:93:de:a6:98:28:6e:ae:21:c3:68:e8:98:
                    68:4a:61:3f:49:d8:e9:98:45:a5:70:29:88:17:6e:
                    71:8f:0d:2e:66:79:d7:0e:f3:1b:c2:b7:f4:79:ca:
                    32:3d:aa:54:2a:0f:5d:37:fd:85:b3:ac:c5:48:50:
                    5d:b6:45:fe:22:6c:83:c9:7b:4e:cd:5a:d3:31:f8:
                    73:bd:cc:1e:d9:de:06:4b:20:a3:23:1f:1e:9a:9e:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:75:53:1C:0E:6E:6B:5D:2B:FE:B5:38:1E:8C:1E:14:25:F3:7E:69
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:72:29:45:56:d4:05:69:25:28:7b:5b:83:6d:96:68:34:
         dc:43:c4:08:2e:4f:72:7d:d3:5e:2e:76:1a:0a:b9:11:f1:67:
         70:7c:63:f6:7a:d6:4c:b3:59:87:ab:95:05:ca:29:85:56:53:
         c9:47:06:39:a2:79:56:5b:de:31:e2:ea:57:7a:47:38:46:c1:
         ae:5b:63:3a:09:b9:aa:f2:d2:2a:b5:1e:56:de:70:19:bc:16:
         67:ef:8e:e3:40:71:97:15:70:84:a0:ac:c3:0f:19:67:54:ca:
         82:35:93:3a:fd:ab:a3:89:bd:cd:f5:d1:87:18:df:8a:40:de:
         55:91:47:4b:76:23:c7:4d:e1:09:0d:10:01:f3:a0:ec:de:33:
         63:5a:a0:46:d8:a0:78:b7:bd:c1:b9:2a:d7:7a:2d:7e:d4:60:
         0f:98:5e:5f:dc:4f:db:f0:dc:e5:36:03:8c:10:9a:6e:b2:f1:
         18:e4:29:90:9a:cb:ce:8e:c9:5f:4d:10:1e:8f:5f:79:ea:cc:
         f9:fb:68:68:c9:fd:67:50:fd:76:a2:b8:ca:26:da:4b:b8:3a:
         60:f0:fe:78:10:e9:32:6f:0a:ba:97:70:97:57:50:a1:91:02:
         5a:ad:b9:a1:fd:9f:28:a9:ae:07:8a:1b:29:9f:8d:90:a3:13:
         74:8c:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:11 2026 by rpki-client