Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
File:                     jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json)
Hash identifier:          oefMMwP7prIeottGESuz0Bnh0Ld+GIkAmGMfrQyzbx4=
Subject key identifier:   35:9E:9B:E3:85:01:60:7F:F0:38:7F:79:CF:BF:00:91:77:D0:28:A6
Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
Certificate issuer:       /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
Manifest number:          DC
Signing time:             Wed 05 Aug 2026 08:08:39 +0000
Manifest this update:     Wed 05 Aug 2026 08:08:38 +0000
Manifest next update:     Wed 12 Aug 2026 08:08:38 +0000
Files and hashes:         1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: kYNS6yCFawH1kdeyNyfHVN/npZojutnnp63TuroYt24=)
                          2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: iIlQkxBmgXt47gVpNAYfQJLsTOog95JafpEPwLPUz/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
                          rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Aug 2026 08:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
        Validity
            Not Before: Aug  5 08:08:38 2026 GMT
            Not After : Aug 12 08:08:38 2026 GMT
        Subject: CN=6a72ef87-bdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:24:72:e6:14:d7:d4:96:c9:4a:f8:3e:36:
                    98:f1:3f:fb:0d:4f:2f:3f:6e:55:e6:cc:55:42:78:
                    b3:93:a5:89:1e:fe:fd:50:3d:f9:bf:ed:b9:87:70:
                    37:38:77:af:6a:f6:df:9b:8c:f3:45:b1:44:0c:be:
                    b6:93:9b:ce:94:8f:0e:80:2a:5a:83:9f:4c:8f:34:
                    bf:84:83:84:e0:40:9c:35:1d:3b:1a:74:12:e8:7b:
                    ef:73:df:44:07:02:93:3c:41:fb:31:82:d4:46:0f:
                    48:84:4b:e2:1d:57:84:d8:db:43:d5:c1:66:83:79:
                    2f:53:d3:58:62:8c:f3:74:82:49:0f:fb:e2:d0:66:
                    83:ac:30:df:34:46:0a:91:52:26:a2:10:29:29:61:
                    f9:85:e0:54:91:c8:62:4c:30:e5:a7:4d:c3:25:be:
                    48:8b:c7:a4:8c:41:90:a6:fc:af:b4:fc:f6:0c:e4:
                    56:37:20:21:51:35:fd:68:47:bf:92:d3:27:48:55:
                    84:d2:84:a6:d2:94:20:b0:59:b4:af:9c:f2:83:3d:
                    0d:9b:2c:46:11:35:53:39:af:1b:47:34:20:4e:97:
                    85:cc:12:57:de:6d:41:49:39:9b:fa:62:35:ed:9b:
                    92:c5:85:b9:da:1b:dc:53:af:f9:30:64:6d:d5:bc:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9E:9B:E3:85:01:60:7F:F0:38:7F:79:CF:BF:00:91:77:D0:28:A6
            X509v3 Authority Key Identifier:
                keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:ea:5d:d4:f7:8e:a9:56:15:76:08:85:aa:91:14:b4:46:
         fe:46:2e:9c:96:9a:0b:58:b5:89:7d:3d:34:0f:b1:b3:82:86:
         2b:08:b8:77:94:cf:31:61:29:48:15:5b:03:69:ca:91:3e:81:
         16:dc:90:d7:4b:18:3f:c9:11:45:10:7d:2f:70:71:2e:7c:bd:
         87:08:f4:13:bf:e8:4f:64:e3:99:00:a0:d5:de:e8:81:35:1e:
         8e:25:4e:3e:db:3f:48:cf:6e:46:02:a0:5a:a6:b0:f6:d6:8d:
         a1:c2:9f:81:78:e3:02:2b:3d:a4:98:43:8b:62:48:d5:22:8c:
         ac:34:9d:15:bc:20:d6:87:56:b6:c1:d7:9c:80:fd:ff:bf:9c:
         a1:b7:7b:a6:86:40:c4:1d:47:11:dd:ad:d9:13:66:8d:20:38:
         af:a0:22:1f:88:0b:3f:88:2e:55:33:df:ec:cb:6b:dc:b1:5d:
         85:ae:30:d6:88:48:cb:6d:44:2d:2c:8c:29:c3:d5:13:1a:05:
         9b:48:af:38:36:8f:b2:cb:9a:a1:e5:42:ad:d6:22:37:1e:f5:
         ac:a2:b6:d5:40:48:55:e9:ba:03:fd:cb:b8:72:16:e6:c4:03:
         75:27:a6:9a:02:44:b0:5b:5f:cd:ca:5e:98:5a:3b:76:90:e1:
         00:8c:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 01:45:16 2026 by rpki-client