Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File:                     bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier:          3SBo6nxAOxzwHyQorSMQT6pLxhldyaOKl+eCbRKYjzU=
Subject key identifier:   31:37:63:88:83:46:C9:60:C5:A8:B2:55:00:80:7F:0D:82:0E:8F:AA
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer:       /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial:       0A77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number:          0A67
Signing time:             Sun 26 Jul 2026 20:09:10 +0000
Manifest this update:     Sun 26 Jul 2026 20:09:10 +0000
Manifest next update:     Sun 02 Aug 2026 20:09:10 +0000
Files and hashes:         1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: OFCNY2xHeyFspA+uGB6Qwxs9CDTiC2ZsbxKDxOtxM4Q=)
                          2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: 1mRV89mqNc+nLOCZGSyR4uuy7wclwLlHSJ3xFNf7VPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
                          rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679 (0xa77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
        Validity
            Not Before: Jul 26 20:09:10 2026 GMT
            Not After : Aug  2 20:09:10 2026 GMT
        Subject: CN=6a666966-1272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:f8:df:42:a4:24:ed:fa:fb:87:83:c0:34:
                    b5:02:11:db:91:7a:6a:fc:a1:33:77:3e:5a:cb:83:
                    06:e3:f6:8a:97:6d:db:5d:31:23:08:2f:62:41:5f:
                    39:6d:86:a6:1f:bc:30:b0:ab:20:13:72:75:b8:10:
                    4e:b0:2e:64:11:52:5c:52:61:d7:82:5b:62:02:fe:
                    dd:c7:eb:0c:1c:b8:0d:5c:8f:43:11:1e:3e:e8:6b:
                    a4:7c:61:eb:b1:ad:ab:d9:1b:b6:22:9e:dd:25:3b:
                    db:c1:19:30:1f:0d:42:cc:7b:68:b8:e2:54:b3:ac:
                    4d:29:7b:ec:9b:74:ea:1d:a0:bb:c7:e6:b4:7b:38:
                    bd:ca:35:02:8e:33:f0:f0:71:3c:17:80:3e:55:dd:
                    5b:9f:3c:be:d4:02:23:ce:5d:97:36:dc:24:9f:1a:
                    4a:f8:cf:62:5b:da:b3:ba:cd:26:3e:c2:43:9c:17:
                    10:6e:8f:1e:a1:d2:31:01:55:8d:d1:be:c7:96:bc:
                    20:64:00:17:96:a5:7b:54:9d:7d:5a:03:8c:3e:78:
                    58:28:b4:db:ba:70:59:91:2d:8c:1a:e6:76:ec:a4:
                    97:24:27:71:5c:e9:f8:e7:76:c4:5c:a1:d0:6f:42:
                    32:d7:30:3a:c6:5b:80:3f:51:79:e1:98:54:28:7e:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:37:63:88:83:46:C9:60:C5:A8:B2:55:00:80:7F:0D:82:0E:8F:AA
            X509v3 Authority Key Identifier:
                keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1f:89:0a:95:6e:6d:3c:c6:c2:c8:cf:3c:ba:8c:5c:5c:1c:
         f7:c1:36:40:88:90:30:89:37:0c:b9:59:34:18:41:cc:05:ba:
         76:c0:65:a4:77:1a:11:3c:dc:7c:0d:4e:85:02:d3:35:e8:a5:
         7c:38:3c:7c:95:15:a7:6e:37:e5:27:d6:b5:72:8f:bd:ef:d0:
         0b:c8:52:9f:c7:7d:41:69:d9:f8:9d:7d:bd:c2:f1:83:a2:b8:
         cf:ed:62:1b:cd:91:be:24:8c:0e:7f:37:03:06:48:92:01:21:
         ad:3a:4e:11:6b:b9:b1:07:71:b3:d5:6c:ef:6b:87:cf:3a:ec:
         70:2e:7a:2c:21:63:ad:b2:21:0a:76:b7:32:58:11:1f:3c:f3:
         5c:eb:9f:7f:88:ac:54:d5:8a:af:73:7f:fd:4e:7c:24:90:a8:
         84:0f:26:5a:2f:c7:b7:b1:6a:9c:b2:88:a9:f7:4e:cc:1f:b4:
         f6:5a:cf:fd:c7:88:12:94:7a:15:e2:ac:18:24:a5:2b:cc:66:
         58:ce:53:c7:28:e3:c3:a2:bf:31:07:c7:af:17:97:8d:34:9d:
         4d:66:93:59:68:8c:2e:df:35:d8:3c:e6:f3:15:0d:1b:84:d1:
         85:42:00:47:77:47:47:ed:0b:3d:c8:ba:73:eb:50:46:72:f8:
         69:f4:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:52:09 2026 by rpki-client