Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
File:                     Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft (raw, json)
Hash identifier:          QAetE11583fA59LLei4CtOQivWIsSU69EZqEPSdyALU=
Subject key identifier:   E3:C0:9D:DF:DE:12:03:5C:A6:79:CC:BF:89:C8:DA:F7:4C:7D:4D:97
Authority key identifier: 46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73
Certificate issuer:       /CN=A91CCE09/serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
Manifest number:          51
Signing time:             Sat 25 Jul 2026 10:10:19 +0000
Manifest this update:     Sat 25 Jul 2026 10:10:18 +0000
Manifest next update:     Sat 01 Aug 2026 10:10:18 +0000
Files and hashes:         1: Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl (hash: +fevDNwGBApIqEurrn7dOvDO+lQOByJdQa8/vBAwUgI=)
                          2: 5396275C112A11F1ADC700F81B3D8C67.roa (hash: wxsoV6n9bNMMjGcsLAWPPKxBCyMgY8xWZ0QUFwcjolY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 10:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE09, serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
        Validity
            Not Before: Jul 25 10:10:18 2026 GMT
            Not After : Aug  1 10:10:18 2026 GMT
        Subject: CN=6a648b8a-4020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:30:c2:5b:8a:a0:df:08:46:a6:cb:31:70:
                    7a:89:98:ba:fd:eb:a6:bf:34:39:94:1d:5f:e2:56:
                    8f:93:74:ad:fa:a8:a7:1a:da:b4:23:60:2b:00:e5:
                    de:63:ae:e6:b5:93:f2:16:6c:a0:b6:9e:b5:2b:e9:
                    99:53:eb:7a:db:6b:e8:03:19:71:43:47:0a:ed:5c:
                    31:12:ac:d7:f3:1a:cc:f7:77:a3:95:2f:6d:9c:35:
                    ae:01:b7:da:28:7a:c7:61:12:ed:98:7b:c3:a2:b9:
                    a7:c9:36:e9:e9:5b:c0:18:3e:a2:76:a4:00:46:22:
                    87:53:fa:96:95:c1:c6:1e:b9:87:90:30:79:39:c2:
                    81:de:18:64:ed:80:5d:11:43:dc:69:b9:34:47:1f:
                    d6:f3:95:fd:e8:b0:81:4f:c6:74:d0:59:00:9a:2c:
                    92:01:0b:a6:14:93:a7:32:ce:17:fc:34:1f:2f:92:
                    01:1c:84:55:5a:d6:b4:74:e1:9b:0b:a0:27:43:2b:
                    83:63:93:7d:39:9f:44:70:51:db:27:21:d0:8a:66:
                    20:ef:0a:1b:d8:b2:59:56:51:2d:58:4a:8d:b9:61:
                    4e:f2:5d:3f:09:a1:39:1c:29:e8:88:83:ae:11:c6:
                    96:28:26:57:1b:c6:ec:96:39:ce:09:6c:9f:aa:13:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C0:9D:DF:DE:12:03:5C:A6:79:CC:BF:89:C8:DA:F7:4C:7D:4D:97
            X509v3 Authority Key Identifier:
                keyid:46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:60:68:6c:63:41:af:7e:c6:8e:71:f6:89:ca:7d:4b:b3:d8:
         ef:a9:70:0f:6a:ab:81:df:d8:b9:be:03:df:5c:fd:74:6b:cd:
         6a:a2:71:93:3d:52:5a:ac:f3:82:0e:eb:47:4e:91:9b:2c:61:
         6a:c7:d1:de:77:be:de:e6:57:fa:95:dc:cc:94:42:81:d0:23:
         fd:91:12:53:6e:4b:77:e7:a7:50:5b:0c:df:43:ca:b4:78:a5:
         b7:0c:3b:c4:6d:35:e3:1f:de:ca:99:cc:58:f0:e7:0f:10:2f:
         87:44:ec:9e:a4:5e:c6:c6:40:52:27:ad:51:21:f3:b5:1a:37:
         6e:82:6f:59:b0:ca:1b:e6:84:3f:35:d1:16:aa:b0:31:14:2c:
         c4:4e:d2:12:6b:bb:08:0e:4a:1b:e9:25:0f:55:53:53:54:51:
         ec:d0:49:c7:fc:e0:3f:45:ec:65:26:cf:3d:6c:8c:32:a9:e0:
         cb:1a:93:5f:8c:a1:62:68:cd:2a:7c:02:38:1b:b6:a9:ab:bb:
         72:f7:0d:0b:91:56:bd:22:ab:d2:95:d6:fd:40:e7:c0:07:82:
         98:93:7d:35:59:9e:cd:ba:8e:31:de:8a:e7:a4:2f:cf:dd:89:
         8c:36:24:e7:40:13:be:a1:6e:39:6f:3d:db:a9:30:4c:1b:f3:
         29:18:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:57:56 2026 by rpki-client