Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
File:                     Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json)
Hash identifier:          Vc3HLy6uCLbJ52MTPXIrummD0AKcVN3l7mwzjmRYDsY=
Subject key identifier:   F2:B5:94:66:B9:58:73:A7:26:11:A8:0A:01:9E:48:8D:89:52:71:C0
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Certificate issuer:       /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
Manifest number:          01DA
Signing time:             Sun 19 Jul 2026 04:35:11 +0000
Manifest this update:     Sun 19 Jul 2026 04:35:10 +0000
Manifest next update:     Sun 26 Jul 2026 04:35:10 +0000
Files and hashes:         1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: yzF9EpA4Is7d+fIWWv9PY/2vdbbR5SSbxZNCoPQ2N8k=)
                          2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Jul 2026 04:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
        Validity
            Not Before: Jul 19 04:35:10 2026 GMT
            Not After : Jul 26 04:35:10 2026 GMT
        Subject: CN=6a5c53ff-17b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:5c:a7:71:2f:ee:0d:03:0e:4b:2f:23:33:
                    5a:8c:f5:61:89:df:c4:f2:af:f4:c4:b9:18:d7:ab:
                    a5:91:5a:a3:89:af:79:47:c3:15:8c:ea:e4:55:e8:
                    73:69:00:1b:c8:88:6a:09:5a:1b:57:4a:af:65:1c:
                    45:a9:47:a4:15:00:b3:fc:7e:a3:fb:a9:2b:8f:d7:
                    00:e8:63:83:5b:79:7a:34:04:e5:e6:f0:1c:58:aa:
                    73:f6:d9:49:60:b5:f2:7b:d2:3e:d9:45:aa:f6:44:
                    99:54:50:7b:81:28:d5:c3:2c:64:e4:39:24:af:66:
                    29:4d:a8:97:0c:3d:dd:bc:ee:3a:d7:9b:87:47:76:
                    a3:0c:5b:14:00:31:d0:43:f7:25:0d:48:d9:a1:48:
                    2c:dc:69:10:76:23:94:96:ba:d2:f8:0c:4c:9d:d9:
                    08:43:b8:ec:2c:35:d5:0b:32:6e:db:e7:be:83:ad:
                    fb:f4:ef:94:36:59:db:14:60:0b:a6:dc:8d:dc:f3:
                    75:78:a8:75:e3:8e:4c:43:82:4e:c3:6c:10:1f:bc:
                    d6:c6:66:16:3f:53:c6:5b:02:a2:69:83:b9:64:28:
                    fb:a9:9c:66:f4:b3:1c:d6:b9:e1:65:b9:1f:ca:b4:
                    d0:07:dc:9a:5f:6a:2c:ab:b5:c2:79:35:fb:fe:e6:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B5:94:66:B9:58:73:A7:26:11:A8:0A:01:9E:48:8D:89:52:71:C0
            X509v3 Authority Key Identifier:
                keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:02:bc:33:e9:e9:dc:dc:0a:8b:69:78:b7:80:f0:db:a1:e9:
         a3:02:f9:02:09:98:42:89:3b:74:01:d9:05:30:65:2d:3e:b6:
         30:20:3b:7b:f8:ba:e0:ce:62:e1:42:8b:1c:55:ba:6d:9c:89:
         c7:70:d0:a0:c1:cc:30:cb:63:fc:b7:c4:1b:c1:88:cc:28:a6:
         37:c1:a9:08:f0:7c:28:61:bb:ce:15:48:71:13:4a:71:8d:58:
         d2:3a:5c:22:eb:74:7b:b3:9c:ab:a4:89:98:a2:b7:b8:ba:ce:
         e9:95:89:c3:c9:66:e1:f7:76:f0:be:b1:1e:da:ad:b7:b5:52:
         b1:90:6d:8f:4e:6f:04:f2:0f:ad:d0:4b:0b:d5:e7:15:37:24:
         5b:d3:ee:59:99:55:e5:0d:34:fc:21:70:24:e3:d3:b7:61:86:
         3d:54:f3:16:ed:0d:d3:58:57:2f:10:ec:a2:e0:93:35:2b:af:
         cc:c1:cc:3a:9b:70:27:5a:3f:f5:7f:1d:c1:3a:fe:34:ee:c1:
         b3:ba:11:e6:31:c3:32:8c:e3:38:c0:e7:7c:0a:88:36:1c:12:
         97:35:4b:ce:2f:ba:27:74:c0:16:8e:49:65:b6:c3:70:df:95:
         ca:dd:11:b8:61:49:b4:74:40:5b:0a:04:7e:cf:ce:05:cd:fa:
         f1:3d:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 09:59:27 2026 by rpki-client