Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File:                     bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier:          9X5HsTvELv/khiBQYWwOGiL3WSP5JfGCP1B0/wFdEI0=
Subject key identifier:   F7:81:21:8B:AD:00:46:8D:47:40:22:14:C4:76:09:09:EE:F8:BD:12
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer:       /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial:       0594
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number:          0565
Signing time:             Thu 02 Jul 2026 23:49:53 +0000
Manifest this update:     Thu 02 Jul 2026 23:49:52 +0000
Manifest next update:     Thu 09 Jul 2026 23:49:52 +0000
Files and hashes:         1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: qLWY2gq9LqU+IgmEUmWapf0cTjzY+MU4SllBWOY5lyA=)
                          2: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=)
                          3: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=)
                          4: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 23:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
        Validity
            Not Before: Jul  2 23:49:52 2026 GMT
            Not After : Jul  9 23:49:52 2026 GMT
        Subject: CN=6a46f921-69cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:64:9e:45:32:1c:86:f5:47:ee:e0:ae:e8:
                    9e:94:94:0d:08:03:98:5b:0e:46:8d:d1:75:b4:40:
                    18:3a:0d:86:c5:56:cc:b8:52:9d:01:c5:3f:14:18:
                    12:6f:ee:84:1d:fb:6e:61:f3:6f:4c:26:4c:92:c9:
                    c0:0c:ff:31:bf:60:3d:88:fc:eb:eb:76:73:26:47:
                    21:56:34:95:18:80:18:89:f1:5e:32:36:90:76:ab:
                    fa:cf:a0:7b:db:9d:d5:bb:82:a7:b1:8b:9f:6c:c5:
                    52:ee:1b:06:7f:14:33:02:0d:36:91:64:63:12:9c:
                    29:79:7e:2c:40:42:3c:38:42:2e:2d:94:22:5a:7e:
                    d8:87:f3:ba:e1:f2:c7:68:b8:57:d7:f8:87:b8:78:
                    c7:04:4c:0b:22:7c:2f:b3:8e:2a:0c:43:a5:df:c3:
                    3e:27:8c:86:35:1e:cb:89:c1:d3:f1:a3:80:eb:17:
                    80:52:19:74:3d:73:c8:75:ec:d6:be:ac:cc:37:20:
                    b0:64:e3:ad:06:6d:5f:5e:69:d7:dc:06:ac:70:8c:
                    8c:d3:fd:7f:55:fa:60:78:ec:8e:23:16:ed:8d:56:
                    67:d5:61:8d:ad:5f:2c:40:39:24:95:6a:0b:10:b0:
                    23:b6:95:d7:6c:c5:56:51:85:af:cf:16:df:77:3f:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:81:21:8B:AD:00:46:8D:47:40:22:14:C4:76:09:09:EE:F8:BD:12
            X509v3 Authority Key Identifier:
                keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:cf:48:f1:92:92:50:f5:a1:b8:46:59:02:ee:71:b6:88:d2:
         b7:0f:a5:34:d7:2e:1d:d1:fa:03:49:d3:b6:8e:cc:bc:f3:ff:
         d6:8f:1f:e1:96:9d:de:b5:a1:7f:d8:29:18:2d:76:70:5a:c9:
         19:50:84:01:1c:47:b4:66:23:08:04:68:2d:be:e1:a9:01:0b:
         82:04:c4:c6:5e:18:76:ca:9b:7b:bd:ee:1e:db:70:08:f9:dd:
         46:a1:c4:d8:ac:bd:76:2a:ff:04:f4:37:98:2a:0f:90:8d:e6:
         7c:fb:ae:de:e9:a7:3b:5a:15:6d:3e:d9:c2:b0:7a:31:34:e1:
         85:9d:1b:95:e8:dc:36:f3:21:2b:e8:78:ef:47:4f:30:48:d2:
         4d:10:59:4a:e0:98:da:24:6e:88:b8:2d:87:c3:ab:80:28:75:
         82:d5:2f:43:38:5a:52:cf:ed:8c:d5:63:10:52:62:9a:bd:98:
         ef:9f:cb:38:30:4a:9d:1b:1a:71:20:da:74:ac:16:8d:ec:3e:
         27:2e:f4:16:a6:75:2d:56:00:83:a0:18:28:76:62:1b:28:d8:
         88:d4:23:db:7b:71:ee:fe:8c:3b:97:a3:d1:ee:78:ff:94:4f:
         42:ee:fb:3a:32:19:21:55:5b:eb:88:6d:c3:d6:ea:4d:0c:68:
         9a:09:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:22:49 2026 by rpki-client