Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File:                     0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier:          m9uxj5VUHcR1o3EXaheMTCEtb0j0bp1LxwX4jfcYAH4=
Subject key identifier:   71:70:AF:B9:82:56:7C:58:D3:E0:68:54:CB:E1:37:0B:C8:B9:19:E4
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer:       /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number:          029A
Signing time:             Fri 17 Jul 2026 02:33:34 +0000
Manifest this update:     Fri 17 Jul 2026 02:33:33 +0000
Manifest next update:     Fri 24 Jul 2026 02:33:33 +0000
Files and hashes:         1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: BYSpZCm6Uuy6FaSRX484gXbUX8NpUw28IAHGgHdLx/U=)
                          2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
                          rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
        Validity
            Not Before: Jul 17 02:33:33 2026 GMT
            Not After : Jul 24 02:33:33 2026 GMT
        Subject: CN=6a59947e-ba46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:03:20:d0:1e:cc:78:ff:0c:83:22:4c:83:
                    2a:8a:6f:63:d7:08:80:16:d4:a4:8d:d6:c3:72:c8:
                    ac:3a:a7:15:51:71:d1:18:e5:90:a7:0a:b8:01:df:
                    42:b1:99:3b:32:e2:d3:bc:64:ce:cb:91:77:86:99:
                    32:87:52:67:e8:d6:e0:20:e7:7a:4c:48:66:ba:b9:
                    09:f5:4c:c6:aa:a2:f7:8b:6a:68:54:36:3b:d0:56:
                    dc:15:ea:ae:f9:58:f1:a6:35:1f:f9:7c:d6:8f:e0:
                    39:75:f5:dd:ce:b6:13:b9:a8:86:21:30:1d:a8:b9:
                    a7:4e:a0:c8:23:80:d5:92:ea:c0:f4:04:94:87:1c:
                    28:07:84:c6:3e:3a:7e:62:90:1f:60:27:bc:2c:68:
                    06:84:d8:0e:f4:80:17:d2:07:2f:8c:47:32:d5:9e:
                    c3:74:25:9c:5c:f2:3f:cf:2e:54:6e:c7:3f:7f:e4:
                    5b:ca:3f:2a:f5:9b:70:61:83:d0:de:2a:3b:48:18:
                    51:8b:91:24:39:1c:19:b2:56:1b:35:52:2e:4b:eb:
                    ab:66:9a:b3:b2:d3:db:ea:ae:73:95:6a:e7:7f:b5:
                    03:21:db:b4:b2:ff:4b:eb:14:48:3c:b0:0d:69:a5:
                    8a:e0:fe:89:d9:e0:3a:8e:21:2f:05:fc:db:7a:25:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:70:AF:B9:82:56:7C:58:D3:E0:68:54:CB:E1:37:0B:C8:B9:19:E4
            X509v3 Authority Key Identifier:
                keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:65:02:f6:be:ae:5d:93:ee:38:24:22:74:80:ba:14:dd:
         0a:7a:57:02:94:84:0f:2f:4e:4b:39:f8:c3:bc:7a:bc:62:bf:
         c7:08:de:2e:25:05:a5:05:23:72:70:05:c5:57:ae:09:e4:9d:
         d6:c8:88:07:4e:36:48:df:7d:9b:ad:a6:ba:73:45:c9:cc:4a:
         a3:d2:f1:b9:55:d3:23:b1:3c:ab:a4:9d:62:35:7d:02:af:5e:
         e5:e4:30:7b:54:5a:50:3c:9e:4d:0a:ef:90:1a:00:53:21:9e:
         a6:96:11:17:c3:69:d4:bc:ff:27:e8:90:e9:f0:2b:22:18:c9:
         a0:27:96:43:0a:f7:66:87:51:fe:05:88:74:ba:b0:65:16:2c:
         ce:73:cb:eb:39:29:fc:e0:63:90:ed:4c:9b:12:96:6d:56:06:
         25:ae:b3:94:38:54:99:ba:e0:f7:c3:bd:1d:72:29:5d:a2:94:
         12:0d:73:d6:11:1a:e3:91:6b:aa:a3:96:42:7a:e7:45:cb:25:
         f4:4d:7e:b6:51:38:56:c7:e9:25:1e:7f:01:bb:69:94:cc:63:
         7f:7f:7b:75:1c:13:a3:be:85:e4:93:eb:dc:70:0a:a7:92:52:
         ce:20:40:7b:7b:88:c8:51:f7:89:c0:7f:c8:54:db:c0:40:1e:
         68:d5:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 08:17:40 2026 by rpki-client