Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File:                     4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier:          3tXwuY/M9z3Z5cVWXotX/HYOh8GJet4O3m1y5fB8MEs=
Subject key identifier:   CA:E5:BC:AA:1D:10:55:57:C7:4E:E9:83:E7:74:3B:3D:8E:4B:D9:D4
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer:       /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number:          0229
Signing time:             Sun 05 Jul 2026 03:19:39 +0000
Manifest this update:     Sun 05 Jul 2026 03:19:39 +0000
Manifest next update:     Sun 12 Jul 2026 03:19:39 +0000
Files and hashes:         1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: 0d6/67S2/qDfq5zKwmHQSXzdWt0x2MMM2wp2lULf05k=)
                          2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: oIFWU2U3FpoDzzLzWPnxsOr677OIj+OUoCa9oBm5yVg=)
                          3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: pEZ4PzrQv6b6ndP0HpfE6ghr1BZrsxRE21MGz3Ej87E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 03:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
        Validity
            Not Before: Jul  5 03:19:39 2026 GMT
            Not After : Jul 12 03:19:39 2026 GMT
        Subject: CN=6a49cd4b-53c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:82:7c:56:ad:e3:d2:76:a4:cd:f5:42:ca:
                    f6:c6:ea:85:a0:0a:88:1b:e1:d3:4b:ae:e9:e1:52:
                    c2:e0:7f:48:30:27:44:98:68:e3:39:56:e9:9c:3a:
                    45:16:af:6e:0b:71:f9:3f:f1:0e:bf:b0:12:9c:ab:
                    db:02:1c:6c:ff:ca:11:57:cc:85:1a:a1:ae:a5:03:
                    bc:c0:fa:c9:e7:43:b7:3b:8d:c1:eb:b1:69:ea:14:
                    34:4d:1f:b0:7e:07:46:1d:a2:1f:89:2a:2a:20:ec:
                    fa:d5:12:e6:3a:6f:46:30:b2:f3:2f:42:30:61:57:
                    1f:15:d8:4b:30:8d:ba:20:10:08:18:88:3c:3f:65:
                    3e:47:da:3a:bd:2e:b4:91:ae:bb:a7:7c:95:64:cb:
                    f7:c2:9e:7f:5a:e6:0f:e5:9a:c5:4e:78:27:a3:48:
                    dc:f2:53:6b:8e:fe:47:fc:0b:2b:3f:33:4a:dc:f9:
                    01:f9:dc:7a:c7:58:86:db:34:ec:5b:a1:12:f7:00:
                    9c:a9:e1:cf:a5:62:6a:bd:4f:23:be:7b:27:bd:3d:
                    b6:82:65:92:e2:19:ad:c7:13:e3:d4:9c:b2:59:65:
                    af:7e:02:f6:a4:24:54:1c:a1:9a:64:3a:cd:12:01:
                    06:e5:62:96:be:f0:27:1c:32:06:61:eb:5c:cd:e7:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E5:BC:AA:1D:10:55:57:C7:4E:E9:83:E7:74:3B:3D:8E:4B:D9:D4
            X509v3 Authority Key Identifier:
                keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:03:ef:4c:8d:08:f2:69:2d:8d:2a:59:6c:57:6e:bc:81:16:
         b8:5d:22:92:41:f1:ab:8e:3f:e0:19:3d:03:81:57:15:12:0e:
         5a:29:c5:b5:df:3b:4e:c9:6b:21:3a:40:da:7e:6d:3b:e4:af:
         3a:2c:dc:f6:7a:7e:06:4a:74:b8:d3:21:24:fd:35:9a:c1:95:
         80:a8:c4:44:f8:41:20:c0:08:42:d8:08:e7:75:76:d0:4d:cf:
         19:9f:18:fe:a0:d3:57:4a:fe:f3:72:ab:9a:ce:8b:d4:32:f1:
         cb:b2:3d:0e:86:77:26:56:7f:cd:07:41:1f:3d:01:b9:4e:de:
         ad:b3:bc:78:a2:d2:53:74:0b:a1:95:04:43:fd:8b:20:3e:d7:
         7c:87:b1:d3:6b:02:f0:84:55:85:32:35:0b:fb:78:ad:de:3f:
         4e:6b:20:c1:b6:4f:3a:21:29:d1:c2:55:97:9e:77:16:0e:94:
         c9:bb:a6:61:e0:0c:d5:4b:bd:c9:a8:a9:38:ee:f6:cd:18:d6:
         91:31:5a:06:fa:5c:62:1f:d9:47:0c:3e:bc:9e:5a:b2:c9:c7:
         4b:c9:a7:a1:a8:cd:ca:9c:6f:41:81:e4:fc:e8:ba:c5:01:5a:
         c9:2f:44:68:50:c9:85:b5:c7:08:4a:47:a5:00:ec:a9:66:18:
         16:15:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:13 2026 by rpki-client