Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
File:                     f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json)
Hash identifier:          KrlkEyxbuiBeQOsKuT3H4lY3/SxHUVslaN5XsfrqJio=
Subject key identifier:   BE:18:12:24:49:7D:42:C2:93:4B:DA:A1:65:55:7A:37:05:33:5D:B6
Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
Certificate issuer:       /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
Manifest number:          013B
Signing time:             Tue 07 Jul 2026 06:33:09 +0000
Manifest this update:     Tue 07 Jul 2026 06:33:09 +0000
Manifest next update:     Tue 14 Jul 2026 06:33:09 +0000
Files and hashes:         1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: 4zExI/sx/MIRbjCBmfx5LEKU2BbiJMFX+uOchqRWeXA=)
                          2: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (hash: XxGdk2TiWSYL+s9+eYriQGRBlu9vhfdeWmlV4N+TUNs=)
                          3: DCAD7228C9DD11F0AAF51581C4F9AE02.roa (hash: I1++mHrzNJqcHerLAm9oVxqpl6Ew26O0T9gv6+CjfZw=)
                          4: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: trVTzJLMk0YYPZd2GJXZbw8hjd3VyHaYjDSjZyfSaIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
                          rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 06:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
        Validity
            Not Before: Jul  7 06:33:09 2026 GMT
            Not After : Jul 14 06:33:09 2026 GMT
        Subject: CN=6a4c9da5-bc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:29:b1:a6:35:25:6a:07:42:0b:58:f8:92:
                    71:e2:d7:b1:f9:a7:99:87:95:f6:b3:b4:1f:dd:ac:
                    46:a2:30:93:36:9e:85:9e:47:72:cf:56:04:2b:91:
                    1d:c9:aa:10:da:11:bc:67:f3:c1:5e:6d:25:6a:97:
                    13:ae:36:6c:9a:0d:fb:91:14:ab:0f:a2:03:f5:38:
                    9c:52:78:c6:c1:21:7d:1e:6a:91:90:54:7c:2f:29:
                    7a:e9:87:5b:d1:25:bf:01:ae:5b:5a:32:f5:85:75:
                    1a:5a:40:f9:4f:e6:96:b7:b8:f4:c8:bf:4b:38:58:
                    84:97:7e:f3:4f:07:96:86:58:3b:de:3f:6c:5a:79:
                    9a:72:98:4a:1f:0d:cc:64:46:b1:25:64:cc:57:7d:
                    a1:a9:c4:89:a1:e6:5d:72:e7:a0:5e:4c:2e:e4:8a:
                    bd:be:e2:ca:5a:1e:c7:8e:7f:b2:73:a8:6c:38:b2:
                    be:54:3f:1e:80:e1:4e:7f:cf:4b:9f:f7:77:fd:2e:
                    a6:2f:d4:1a:82:f1:f1:37:60:f5:a9:11:74:99:2a:
                    e4:aa:93:64:3d:2c:41:ff:fb:60:e5:47:ee:c8:56:
                    2f:fc:25:ec:fd:d0:25:c4:99:8e:2d:bf:27:01:3c:
                    a8:85:71:74:79:f0:db:6c:33:ec:6b:fa:8d:74:4d:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:18:12:24:49:7D:42:C2:93:4B:DA:A1:65:55:7A:37:05:33:5D:B6
            X509v3 Authority Key Identifier:
                keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:79:5e:1a:8f:29:2b:4d:6e:0b:48:85:8f:c9:b4:09:87:db:
         4e:dc:e4:64:a6:38:26:d9:32:ce:c7:f0:bd:ca:07:2e:58:83:
         58:6a:42:40:bc:e5:48:a5:f6:ae:af:ed:11:0b:f7:76:f2:86:
         dd:f3:1d:4f:4c:4b:a4:1a:01:a7:a2:16:a3:28:5a:64:51:64:
         ad:de:ca:5e:8c:85:d5:fe:56:9e:d1:b8:43:ee:bb:18:51:c6:
         e6:19:77:8d:e8:25:ee:3a:d7:de:76:27:af:0f:ff:5a:eb:26:
         5d:f5:9e:ad:fa:48:5e:81:0a:cb:eb:b8:1a:66:4d:84:db:75:
         0b:77:3b:13:fe:fc:9a:d6:2b:f1:cb:af:03:9f:af:b2:1a:90:
         e6:53:9b:47:f4:2e:7b:07:05:7c:f6:92:9e:ca:5b:96:3e:24:
         b8:b3:8f:51:64:03:95:94:77:06:92:a4:53:9d:71:65:99:64:
         47:0e:c5:2b:59:94:9b:ea:61:40:5d:31:24:a4:b1:e5:55:10:
         01:fb:d9:77:99:87:7f:a4:1d:bd:10:3e:d2:0d:9e:40:e9:52:
         5b:9d:c8:be:fe:ba:d5:26:9d:c2:01:a8:4a:4f:cc:2a:42:b3:
         88:93:c4:d8:09:25:42:10:c7:42:56:4b:8e:c0:c9:7c:a9:eb:
         71:4b:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:46:53 2026 by rpki-client