Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File:                     dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier:          NQVnAWMogLBYtuKfHZKZ/smY21gIhQa668qdGMtaU0s=
Subject key identifier:   99:0F:28:B7:A0:F7:66:56:FE:B6:32:80:02:44:A5:83:2F:97:82:C0
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer:       /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial:       1B4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number:          1B3B
Signing time:             Mon 20 Jul 2026 16:22:25 +0000
Manifest this update:     Mon 20 Jul 2026 16:22:24 +0000
Manifest next update:     Mon 27 Jul 2026 16:22:24 +0000
Files and hashes:         1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: EDlxCi2/Kdra4G1qUf8VqD77NsIqtC+EqOZUsE51ipA=)
                          2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
                          rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6986 (0x1b4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
        Validity
            Not Before: Jul 20 16:22:24 2026 GMT
            Not After : Jul 27 16:22:24 2026 GMT
        Subject: CN=6a5e4b40-074d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:90:29:19:46:5d:f8:e8:03:6e:66:74:d0:
                    ff:34:99:92:f4:9e:e5:a1:1c:be:48:b0:91:cd:25:
                    24:a3:1e:9c:ad:50:eb:76:e7:67:1d:99:c8:42:47:
                    a3:f5:87:90:c4:2b:e5:b2:14:63:44:3f:c3:74:50:
                    33:30:28:36:51:00:a9:ef:50:e0:b5:d2:dd:b5:f8:
                    6d:d4:3d:4b:96:65:e2:74:21:90:af:91:09:ee:b3:
                    09:28:b5:ff:d6:5f:5c:cd:b0:da:98:ac:ed:75:32:
                    2f:15:a3:10:2c:09:49:05:c7:f7:50:45:10:f7:75:
                    95:e4:c1:8a:e7:d0:14:05:38:be:39:25:f1:b9:ed:
                    8e:a6:be:b3:85:e1:ae:42:b2:76:39:30:84:e9:ca:
                    07:16:9d:ab:36:e8:c7:94:48:b7:51:11:7b:36:e1:
                    ce:a4:f7:39:af:e6:73:9f:e8:57:8c:b2:f5:db:4c:
                    28:ec:fd:8b:fb:ce:6b:bf:3e:d3:a8:9c:da:04:3c:
                    29:ba:b7:56:85:83:e6:7a:e8:15:87:95:5e:ed:ea:
                    30:62:39:2c:4c:51:5b:ec:0d:d2:79:a5:a5:91:e8:
                    5f:af:1b:1c:54:e3:bc:5f:af:d1:ed:1d:ed:29:fb:
                    0a:04:01:3d:a4:47:c0:4a:2c:9f:09:7c:9b:8c:4e:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0F:28:B7:A0:F7:66:56:FE:B6:32:80:02:44:A5:83:2F:97:82:C0
            X509v3 Authority Key Identifier:
                keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:52:95:b9:ac:3b:21:bc:7c:fc:e3:f9:13:d9:6b:f6:6f:
         96:42:bd:c7:84:eb:3b:9a:c0:c1:58:ca:38:7b:e5:9e:bb:c4:
         1c:bd:c7:3b:c5:6e:fd:e4:6f:c4:6b:95:df:da:cf:05:d3:80:
         62:c9:df:a0:84:33:19:87:42:7b:0f:fe:c6:b5:3d:be:c8:14:
         12:19:f3:e6:8b:e2:c2:2f:20:17:1d:e2:a1:bc:cc:4d:9b:be:
         ad:e4:be:e2:e3:15:67:b7:f7:06:6b:74:0f:96:d3:73:19:34:
         8c:27:0b:7b:2a:18:ef:ce:3d:3b:34:d2:ad:65:67:d0:9a:7f:
         2a:6c:05:83:74:3a:8a:ca:fd:02:a4:4a:ea:31:65:a7:cf:32:
         09:88:5c:ab:ee:38:6f:6c:36:29:5c:cd:ab:c5:4d:bd:21:b8:
         e4:c6:90:b3:7e:28:c6:c9:db:c6:7d:86:20:39:e8:de:90:0e:
         37:7c:29:ad:d3:56:6b:7c:63:86:b2:23:f5:46:99:53:5a:6b:
         d9:7e:e1:79:23:59:9b:c7:f6:f8:c8:fd:34:9e:62:c8:90:21:
         3d:f6:2e:b3:3a:e9:59:c6:30:ec:ff:d8:e7:61:bd:66:bf:90:
         dc:43:8d:31:60:5f:3a:1b:cb:06:8b:0c:2a:74:3b:f7:8c:52:
         bd:b5:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:40:15 2026 by rpki-client