Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
File:                     Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json)
Hash identifier:          k/tHumvdegCsFg0eJUqColcQIXrF/+aIh7L7/72zpGM=
Subject key identifier:   E8:59:AB:82:16:2D:A8:E3:EE:B3:E0:A3:39:C8:22:A8:90:40:14:50
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Certificate issuer:       /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
Manifest number:          0176
Signing time:             Mon 20 Jul 2026 16:24:31 +0000
Manifest this update:     Mon 20 Jul 2026 16:24:30 +0000
Manifest next update:     Mon 27 Jul 2026 16:24:30 +0000
Files and hashes:         1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: VXa4p4konlTxCEyRKaipz0F1EkMttaYmRrN/f5fO1yk=)
                          2: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 9ayUJbTwLRPcJporlzoTUwIv2h9R8DWkz2gQBFVIj/M=)
                          3: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
                          rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
        Validity
            Not Before: Jul 20 16:24:30 2026 GMT
            Not After : Jul 27 16:24:30 2026 GMT
        Subject: CN=6a5e4bbf-a37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:b7:81:22:49:97:4b:39:bc:20:fe:ac:e4:
                    f9:9c:d5:dc:82:c5:9c:81:78:8e:c2:a8:b7:35:ad:
                    e6:82:ea:d4:65:46:13:1d:5d:56:ac:c0:2e:cc:fb:
                    f9:03:b1:cc:32:58:3b:bc:08:fb:6d:cc:3d:35:7b:
                    b5:17:a7:82:16:f2:2e:12:d4:64:77:3b:d4:23:32:
                    b1:8e:ef:df:3e:9a:38:3f:09:08:b1:52:cd:4e:3b:
                    8b:79:d7:ee:4b:b3:26:e6:18:e2:ff:05:03:d7:e0:
                    86:1a:ad:b1:59:54:c6:c3:81:70:05:be:a3:c7:48:
                    38:00:cd:54:23:09:78:44:a2:1c:e0:88:45:20:06:
                    5e:a3:ac:02:1a:b7:63:86:a7:d8:0f:d5:1f:0e:66:
                    27:cc:31:72:68:61:b9:26:c0:67:46:8a:a5:36:50:
                    a9:76:38:21:fc:4c:37:5c:89:f7:a0:06:de:7e:db:
                    28:19:23:90:03:3b:8c:0d:8e:8d:dd:db:38:08:ee:
                    b0:e9:8b:f5:76:59:57:4b:bb:31:ab:46:f3:9f:53:
                    e8:36:00:60:ed:81:ad:44:a8:f0:cb:bd:9e:67:19:
                    df:f8:40:8c:df:51:69:af:7e:0e:50:be:72:85:a0:
                    03:ec:d1:99:1c:27:af:8d:d9:91:f1:63:c9:83:b7:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:59:AB:82:16:2D:A8:E3:EE:B3:E0:A3:39:C8:22:A8:90:40:14:50
            X509v3 Authority Key Identifier:
                keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6c:de:f0:60:fd:17:fb:0e:54:81:56:38:94:7c:72:1e:89:
         07:fc:74:10:f6:b8:e8:be:c1:d2:49:c6:c7:ad:ba:74:76:92:
         5d:76:be:4f:e2:59:9f:81:bc:ed:3a:58:65:46:55:b5:a4:b9:
         40:89:51:fa:b3:f6:d4:0f:86:59:ca:64:cd:52:05:58:67:50:
         7c:20:77:0e:8b:df:ab:4f:aa:1f:c5:3e:76:8c:5e:bf:69:21:
         a7:12:b7:0a:40:89:88:a0:3c:58:09:8b:b2:0a:c5:25:ee:c4:
         8c:ce:b0:ae:eb:82:a9:68:86:1c:14:03:c2:2a:07:fd:51:d1:
         7f:01:41:a4:1e:b0:d5:3a:e0:67:fc:5e:5b:1e:c1:42:73:c6:
         1f:85:52:cb:b4:15:f6:5f:08:91:24:79:26:df:11:b7:af:b3:
         dd:cb:08:08:a4:37:86:d5:72:1b:05:eb:62:9a:e4:c2:f5:e9:
         17:d3:b0:9f:0f:53:99:43:c9:4e:67:d6:3a:72:bc:ff:c3:1d:
         99:33:53:f1:62:d5:d5:33:52:d6:5e:66:9b:06:8c:91:0a:c5:
         58:8f:a9:e8:42:8e:bc:34:e0:16:d4:ea:a6:06:3a:c7:b3:ef:
         26:12:b1:f6:d8:61:19:45:c7:56:47:dd:ac:b7:ab:ff:e5:c0:
         24:ab:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:15:31 2026 by rpki-client