Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
File:                     Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json)
Hash identifier:          1PVDhzcFrWdsGwyFIVnAats5qBewI37e/VrtdZIav8g=
Subject key identifier:   93:28:EA:13:60:59:E0:4D:76:63:B1:E6:FD:B2:F7:C0:C1:BC:56:A0
Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
Certificate issuer:       /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Certificate serial:       0BD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
Manifest number:          0BC4
Signing time:             Sat 04 Jul 2026 19:08:28 +0000
Manifest this update:     Sat 04 Jul 2026 19:08:28 +0000
Manifest next update:     Sat 11 Jul 2026 19:08:28 +0000
Files and hashes:         1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: aT+oEFr6SSj9eFH8Bjv4VOxmrHF+kweH6uwtXUpPUL8=)
                          2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: TOj5s+aNQC9Z5ZqVlC2yt7q1plWezfus1BZx0sUNSs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 19:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3028 (0xbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
        Validity
            Not Before: Jul  4 19:08:28 2026 GMT
            Not After : Jul 11 19:08:28 2026 GMT
        Subject: CN=6a495a2c-6851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:a9:e5:ee:1d:df:e8:7d:16:85:ff:54:e2:
                    c5:d7:23:87:4a:26:39:4e:bc:30:7d:d8:65:f2:e9:
                    a8:05:de:d3:fb:3c:e9:bb:a7:0c:5f:40:60:fb:f2:
                    2a:03:bf:3a:00:ce:31:98:fe:73:af:16:0c:8a:d3:
                    dd:02:77:74:9f:9f:62:e8:cb:16:f8:25:b5:d0:2d:
                    97:6a:ff:8b:9b:eb:c5:47:10:f4:9e:06:b9:ed:44:
                    4b:d2:81:63:57:de:c5:10:4a:dd:24:18:93:aa:d3:
                    97:ca:0b:18:c4:2a:cc:ca:a3:cb:04:7c:97:3b:0f:
                    89:b8:26:4b:46:da:6e:ef:d6:64:cb:ac:be:33:52:
                    9b:77:94:4f:df:8d:99:0c:4d:60:8e:d8:51:20:9e:
                    48:f0:97:02:10:92:84:af:d3:fe:30:cb:b6:5a:11:
                    97:a2:d8:24:43:3f:ce:c0:a5:8c:b5:b2:c1:11:c3:
                    ea:13:fd:27:4d:bc:37:0c:00:ff:d8:01:0d:2e:64:
                    ad:b7:6b:59:f2:dd:31:cc:e4:0c:2b:95:99:54:ff:
                    d3:7a:7b:3d:86:a9:16:50:1a:7a:b6:4d:be:5e:6a:
                    b7:a4:9e:d2:8a:87:52:89:47:1f:08:d0:36:86:93:
                    71:2f:76:c0:e1:7b:61:0e:56:ef:22:9c:14:d2:df:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:EA:13:60:59:E0:4D:76:63:B1:E6:FD:B2:F7:C0:C1:BC:56:A0
            X509v3 Authority Key Identifier:
                keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:54:c1:11:78:fe:7a:1a:fa:56:2a:85:a9:57:d2:66:4a:e1:
         7a:8e:06:e5:e8:62:1a:78:9d:ce:eb:5c:f3:42:28:8c:c8:f3:
         51:70:52:e1:cb:42:48:54:85:12:09:54:23:e4:55:f6:9d:f0:
         51:87:a3:fa:1f:dd:94:5b:54:8a:3b:cd:e8:53:84:f3:6e:38:
         e1:8f:be:83:80:b4:06:49:0e:72:0d:fc:65:de:3a:7c:67:2b:
         7b:68:d0:b4:00:03:0a:7d:dc:eb:7d:de:76:15:a7:e3:67:49:
         35:1e:74:3a:43:6d:1c:46:7b:14:85:af:03:d0:64:49:60:71:
         ab:c4:93:9b:98:f3:74:4d:33:5d:36:4e:6c:06:93:e5:56:23:
         64:93:1a:64:be:3d:60:88:aa:6d:af:e4:72:25:01:b5:c1:83:
         cb:b6:47:d1:a3:25:4b:ea:3c:37:43:a3:5f:ae:89:ae:03:69:
         b6:40:8d:a1:3c:de:0d:74:7a:b8:04:ff:53:0b:08:d1:5b:0c:
         4e:ec:b2:c4:58:65:cf:c1:79:ad:0c:65:e1:b9:74:d2:db:4d:
         f8:fd:13:49:e4:e3:fc:9b:b3:eb:3f:5d:3e:53:bb:e7:37:fc:
         2e:0e:c1:6b:22:6d:84:dd:30:cd:05:41:b0:87:0b:2d:f5:d5:
         ab:98:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:07 2026 by rpki-client