Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
File:                     EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json)
Hash identifier:          yMO/tupEsV8j1qYN+37NPQnsw/PeaPgaVg8TRsGKoWY=
Subject key identifier:   99:A6:16:48:64:CF:36:20:97:CD:CE:FD:D0:36:82:92:4C:84:39:6F
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Certificate issuer:       /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
Manifest number:          C5
Signing time:             Mon 27 Jul 2026 09:09:18 +0000
Manifest this update:     Mon 27 Jul 2026 09:09:18 +0000
Manifest next update:     Mon 03 Aug 2026 09:09:18 +0000
Files and hashes:         1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: Aufg9e7F1l/lj11aTIwzN/xF1wd639J5arjdRprqEvE=)
                          2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=)
                          3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 82nHeS7CHoySaZHAiJzF0tyiNyUQq6elNqL8KAqq8/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
        Validity
            Not Before: Jul 27 09:09:18 2026 GMT
            Not After : Aug  3 09:09:18 2026 GMT
        Subject: CN=6a67203e-700c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:e8:df:ea:8f:c4:0b:83:4d:74:4e:ec:38:
                    a0:56:8f:a1:b2:3c:9e:2f:b1:ba:a3:7c:47:71:15:
                    10:c4:8d:98:97:cf:f4:b8:1a:ae:9c:54:2d:d0:37:
                    10:ed:c8:3a:cf:06:59:25:73:9d:26:67:3d:ce:c4:
                    f0:97:55:83:46:57:35:6a:40:b2:11:29:44:01:83:
                    bd:b0:a7:52:e8:8b:32:5d:cf:ce:21:0a:6d:ae:e6:
                    02:d4:22:71:71:95:94:aa:2e:28:4e:a0:5d:6c:40:
                    e7:a7:fc:14:88:6e:27:48:d4:8c:63:06:cf:c3:cb:
                    eb:13:17:df:99:28:84:68:4d:b8:59:3f:6e:f8:76:
                    8e:99:45:32:f5:66:e2:60:97:80:c9:7f:89:2b:da:
                    49:20:90:85:4e:6f:8e:40:e7:87:0a:ea:df:6f:70:
                    7f:b8:25:86:88:e5:9d:1a:6b:d9:db:d4:a2:02:57:
                    be:bf:d5:18:8a:ca:aa:f5:4a:e5:d9:99:42:48:62:
                    f0:50:e8:60:fb:f3:ab:4f:51:63:d1:d7:22:ad:bb:
                    14:f7:97:5a:40:6e:34:51:e5:8c:6b:6e:06:53:f9:
                    0f:2b:83:a6:f8:09:0a:e5:c8:63:d4:c5:40:bd:69:
                    bf:0c:6a:0f:2c:c3:4f:fc:e2:51:c9:11:0d:c6:a1:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A6:16:48:64:CF:36:20:97:CD:CE:FD:D0:36:82:92:4C:84:39:6F
            X509v3 Authority Key Identifier:
                keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:4b:fd:78:83:d0:c4:61:92:e0:8f:c8:ab:f9:91:11:85:
         57:23:3a:25:fe:28:7e:8c:23:ad:a8:64:7a:d9:60:af:c6:a0:
         3c:09:13:75:c8:ba:04:07:77:d5:64:46:45:a1:67:0e:52:37:
         26:59:0b:ee:a7:ac:dd:e9:0f:6c:db:ee:da:8f:bc:fe:82:9a:
         5d:ce:65:4b:0b:31:3d:a6:b1:79:fb:16:13:6c:5e:50:71:96:
         94:f5:01:e4:dd:d7:6e:d1:88:fe:48:59:61:9f:7a:53:da:66:
         26:b0:72:16:eb:33:27:cd:a0:2c:04:5f:35:21:6f:91:8e:14:
         e8:df:e1:ba:0d:7f:a1:39:76:a7:51:db:cb:e2:44:22:6f:d9:
         02:78:9b:16:a7:ce:8c:5e:06:fb:ee:2b:ec:0d:ea:85:e3:de:
         85:d0:f1:3d:21:72:08:37:1b:79:ad:d1:bd:61:71:0b:cc:cf:
         67:2c:7e:2d:36:99:0b:b5:d5:db:39:25:8a:4a:b0:29:47:7e:
         4d:ab:2e:69:76:fe:14:f6:1d:41:a0:ff:44:ab:db:de:bf:17:
         6c:18:be:35:ec:a1:b0:17:6c:b2:31:a2:3a:19:1e:24:d4:d6:
         11:ce:47:4f:d7:fa:47:5c:59:34:3c:8d:24:65:20:d7:03:2d:
         69:ba:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 23:30:52 2026 by rpki-client