Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File:                     MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier:          0lfVKlVcAU3ArKLCJdoIKujOXcUlrMsLUm71oWj0iws=
Subject key identifier:   50:C1:E4:3A:E0:BC:5B:F0:79:00:0F:66:5F:CE:22:F6:8D:4F:BA:00
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number:          0290
Signing time:             Mon 27 Jul 2026 03:26:46 +0000
Manifest this update:     Mon 27 Jul 2026 03:26:45 +0000
Manifest next update:     Mon 03 Aug 2026 03:26:45 +0000
Files and hashes:         1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: KzbBl9vwwbnplMS/iernTEy4YERlDOkOfiTFyCyLKiw=)
                          2: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: QbYcHC8sEaaqzKI4aZ+szj1qFExhkAsjpip5wt7ACvM=)
                          3: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: /Xmk4tz+mCwExZGnlLqC5Zkmn9dPaTMI2+1ZySEn0OI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: Jul 27 03:26:45 2026 GMT
            Not After : Aug  3 03:26:45 2026 GMT
        Subject: CN=6a66cff6-e0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:e0:ff:ee:7c:4c:1e:6e:ce:28:2b:87:8a:
                    4c:ba:2c:ab:39:2c:10:1c:e7:36:ba:74:9b:fa:66:
                    f6:eb:68:a4:44:cd:21:c5:51:0e:d8:90:ad:5e:bd:
                    93:62:67:17:ae:8a:30:9f:be:99:81:ae:ca:96:6e:
                    a9:e7:52:43:c6:e4:9d:49:a4:f8:57:81:1b:98:e9:
                    30:9c:0e:77:6a:95:fb:11:31:6d:89:93:c7:ad:ca:
                    6a:ba:41:9a:86:ba:8d:e6:71:a1:94:19:cb:18:bc:
                    32:c4:10:d6:26:c3:87:72:3c:d7:1d:e2:1a:a0:86:
                    64:c9:7a:bc:e8:9b:45:e0:75:6b:5e:0d:3d:77:db:
                    6b:cd:ea:47:1a:1b:20:53:f4:c3:bf:0b:c4:6c:57:
                    65:16:8d:79:39:f3:6e:b9:81:85:86:3f:a4:6a:80:
                    90:37:89:85:5b:4c:5e:c7:20:15:c9:fe:56:60:91:
                    1c:67:4f:ff:59:59:20:00:d2:af:a7:4a:e6:5b:7a:
                    9b:d7:88:db:0f:da:3a:67:dd:cb:09:f7:bb:a3:a8:
                    7d:be:76:ad:35:23:22:4c:4e:62:68:ad:e8:4c:b6:
                    8e:e3:75:f2:fc:c4:ea:a9:ff:bc:54:a8:04:08:16:
                    2d:7c:b7:dd:34:2f:bb:85:e6:06:be:c2:e7:c9:9b:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C1:E4:3A:E0:BC:5B:F0:79:00:0F:66:5F:CE:22:F6:8D:4F:BA:00
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:5f:93:af:f7:16:d6:00:3f:b6:84:dc:34:d4:3c:b6:66:
         01:e3:9e:17:f3:27:09:18:25:50:b2:32:e0:a8:56:5b:7e:bd:
         c3:de:77:3d:af:91:a8:1c:d0:88:27:26:82:08:84:0e:d9:fb:
         12:3b:53:dc:c7:72:ef:da:9d:5b:42:b8:4b:f5:73:d8:84:5c:
         be:5b:d5:7d:c1:71:70:f3:87:1f:2a:03:72:e0:a6:ba:89:68:
         0b:70:c5:09:8a:77:ae:bc:f1:cf:e1:a3:7b:bc:04:ec:bf:4b:
         e3:7f:a2:48:29:17:50:78:2f:dc:ed:b9:ca:d2:56:14:2d:dc:
         c3:d8:a2:51:a9:86:01:a8:35:fd:48:30:00:e3:f7:25:12:bf:
         cb:a8:b3:01:bf:ea:79:78:ba:b1:9a:31:c3:cc:1e:5f:5d:89:
         fe:62:85:49:80:38:d0:37:eb:86:14:00:7b:62:57:01:72:a9:
         7b:0f:ba:10:23:76:c9:3c:ba:c9:7d:cc:0c:9d:83:06:72:09:
         50:8a:95:ce:ab:1d:f5:59:c9:eb:15:8b:ad:f8:a6:02:af:bf:
         f7:66:a7:bb:2a:6a:70:ef:b3:fa:c4:81:8b:75:c0:47:75:ef:
         65:30:cd:f7:a0:46:c8:14:dc:f5:b8:31:f7:39:95:75:90:e8:
         b1:85:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 23:29:56 2026 by rpki-client