Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
File:                     D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json)
Hash identifier:          r36fjgXKUEgFfHNgxT8urq7FKz6F1imwyA3MntKJS98=
Subject key identifier:   03:7D:47:6A:17:FC:F8:C2:F5:3D:9C:01:CA:2F:4E:7C:AA:46:0B:98
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Certificate issuer:       /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
Manifest number:          0196
Signing time:             Fri 17 Jul 2026 05:23:43 +0000
Manifest this update:     Fri 17 Jul 2026 05:23:42 +0000
Manifest next update:     Fri 24 Jul 2026 05:23:42 +0000
Files and hashes:         1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: uTXYNJvD7PYinNkdyklQxKr9/xoGszP0usxvG7DslxY=)
                          2: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: iX2Fa2bKeusUD7e1kk7qEOazrDitQAwWU/vzKbzi2Es=)
                          3: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 0xEtLNXzgQLI5eu4N0PHbVDzi3ImrQGP3QrG+KX9gfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
                          rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
        Validity
            Not Before: Jul 17 05:23:42 2026 GMT
            Not After : Jul 24 05:23:42 2026 GMT
        Subject: CN=6a59bc5f-f8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:3a:2f:57:19:32:0f:d5:8a:30:1d:cd:61:
                    10:12:2e:95:4e:ff:64:40:8d:75:96:3f:5e:d5:42:
                    16:60:ae:bb:90:1e:7a:9b:f1:f7:45:cd:55:e2:e3:
                    ab:44:f9:12:c2:32:6c:29:2d:c0:52:db:b5:3d:5b:
                    17:97:d6:e6:99:00:a8:dd:a2:56:03:29:d7:b6:d7:
                    29:aa:da:7e:71:1c:36:1b:95:09:1d:ee:ce:d1:10:
                    bd:c0:a7:26:d4:18:90:72:d8:b9:62:a5:cc:ab:71:
                    21:ab:ce:46:d2:23:a4:91:0e:ee:5f:9d:11:ef:27:
                    5d:c4:7d:e5:c5:b8:7c:07:29:01:4c:4e:bd:c7:40:
                    63:35:cf:3d:f6:61:e7:e1:0d:b6:71:66:34:ea:4f:
                    f1:46:7b:14:d3:e2:ae:a9:f9:94:76:94:d1:cc:b9:
                    7c:3e:7a:12:2e:2d:7d:f0:46:2e:f8:6c:42:70:6b:
                    9e:55:d1:8b:ed:19:ed:6b:5d:51:68:72:82:12:30:
                    19:07:1f:35:8b:ec:5a:b5:3c:c7:f4:8c:6e:6c:2f:
                    29:6f:e1:ed:6d:29:ff:f2:52:60:91:12:19:02:12:
                    e0:e5:42:ec:3e:f9:fe:50:fa:68:ad:ae:3f:7a:85:
                    28:5d:24:63:6f:8a:aa:a4:af:5e:d9:4f:be:38:f6:
                    db:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7D:47:6A:17:FC:F8:C2:F5:3D:9C:01:CA:2F:4E:7C:AA:46:0B:98
            X509v3 Authority Key Identifier:
                keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ba:04:a7:fe:85:ef:b4:3b:6b:46:a0:ed:e1:84:86:a7:17:
         4a:45:20:12:d9:1e:19:e0:92:1b:21:5d:76:7b:ce:9e:92:5f:
         cd:7d:f1:1d:4b:4d:2f:26:22:91:6e:67:0d:49:a8:18:55:db:
         73:33:42:f0:dd:ae:5c:56:a0:b3:33:45:42:67:bc:58:ec:63:
         4b:22:30:63:e6:e8:0c:a8:f4:fb:0e:67:99:5c:d0:70:34:c3:
         ee:54:a4:9a:0d:ad:8c:8c:81:39:d1:35:42:92:d8:73:5e:33:
         47:5c:ec:ae:b3:0c:98:54:fe:b3:fe:ea:d0:40:04:ab:11:68:
         23:af:1c:4a:47:8a:32:5a:b6:74:90:d9:9c:95:5d:3c:f2:c8:
         3a:84:3e:d2:5a:28:a1:7a:2d:d7:d5:cf:5c:ad:3e:46:23:73:
         9d:14:e3:78:ef:03:c6:50:bb:1f:85:b6:3e:05:63:f2:da:9e:
         b5:61:1a:28:78:b3:54:3e:fa:f1:53:58:c3:ce:69:08:e4:d1:
         4c:db:1e:48:8b:c4:4e:b5:f9:f6:17:72:64:c7:6e:93:d3:82:
         01:87:2f:c2:f5:26:0b:df:5a:30:0b:29:98:43:89:32:5f:2d:
         3b:4e:84:c7:3f:02:6a:db:51:3f:a4:74:e2:d4:9c:3f:a0:25:
         89:d5:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:14:19 2026 by rpki-client