Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
File:                     SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json)
Hash identifier:          sO8/OJzdeog0wNtcwGfDV3Zqjm2T039UWIh1ZxU3c+c=
Subject key identifier:   0E:B0:8A:C2:61:01:B5:FD:C9:B1:3F:69:C9:93:FA:5D:BB:ED:F3:AC
Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
Certificate issuer:       /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
Manifest number:          0268
Signing time:             Fri 17 Jul 2026 02:58:10 +0000
Manifest this update:     Fri 17 Jul 2026 02:58:10 +0000
Manifest next update:     Fri 24 Jul 2026 02:58:10 +0000
Files and hashes:         1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: yisTMRGK1KhwJyC3OSKAT8XvsAwWUANmWi3bM3JrDF4=)
                          2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: h5AorI3QkOoBAwObfVPrh+bfy5EutI9s6EKcaVcQGYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
                          rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
        Validity
            Not Before: Jul 17 02:58:10 2026 GMT
            Not After : Jul 24 02:58:10 2026 GMT
        Subject: CN=6a599a42-9f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:bf:a6:6b:12:b2:9c:5b:8a:ba:ed:9c:8b:
                    14:34:bf:77:2d:69:40:c8:c5:a0:af:6f:83:26:7b:
                    cc:06:61:c9:dd:b7:c3:dd:36:29:e3:30:62:59:ab:
                    05:aa:de:9f:a0:d2:64:0f:91:82:73:87:25:59:1d:
                    da:74:74:e6:4d:51:9b:8a:95:89:8b:17:66:b1:dc:
                    14:ad:d0:c2:19:bf:36:d2:25:53:e9:83:2b:60:ca:
                    1b:e7:0e:69:36:fa:0e:b2:71:c7:00:39:c1:a7:e9:
                    fa:36:4f:fb:37:19:60:e0:2f:09:ab:c5:d1:e2:17:
                    d4:df:93:36:28:b2:74:07:d9:ed:f7:cb:c3:f1:63:
                    19:92:d8:e4:b5:39:e4:0a:7c:8c:08:fd:7c:db:89:
                    61:18:a9:7e:00:62:08:c6:73:9f:55:2c:7a:a4:38:
                    e1:82:5f:3a:10:c5:e7:ef:42:93:0a:99:5f:fd:59:
                    a8:af:00:6f:f6:03:e9:a9:55:a9:c4:5c:20:50:3b:
                    75:69:7b:9a:1a:10:33:88:85:51:e1:28:74:fa:e4:
                    51:cb:fc:84:15:69:ea:65:7a:40:af:09:b1:8c:be:
                    b0:91:92:50:06:ea:f3:3d:fa:eb:b0:60:d1:ae:69:
                    dc:f0:1a:97:9f:9f:96:ab:51:b0:b1:c5:c8:32:71:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B0:8A:C2:61:01:B5:FD:C9:B1:3F:69:C9:93:FA:5D:BB:ED:F3:AC
            X509v3 Authority Key Identifier:
                keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:57:46:62:49:68:8e:61:e8:38:bf:69:75:1e:96:b3:d7:a3:
         c7:c4:27:fb:2f:85:74:c9:1d:60:b7:e6:7a:50:8e:ee:f6:91:
         b8:ca:49:77:cb:4e:49:07:e5:06:fc:62:05:5f:cb:4d:c2:7e:
         aa:cc:d6:cc:7a:a7:1a:f1:bf:fb:f5:e4:e8:58:69:62:9c:81:
         04:09:53:98:8f:68:fe:c4:af:0c:1b:3b:b4:43:81:43:fe:59:
         25:8a:0a:99:22:2d:0b:e6:ec:48:25:4c:9b:e2:cb:cb:fa:d9:
         93:12:9c:7a:9d:c6:49:09:b5:04:37:81:04:a2:d0:5f:cc:57:
         96:ff:c5:65:6b:98:4c:03:09:fb:55:1f:8c:a8:f9:2a:59:30:
         f7:c4:40:be:b7:47:1c:52:69:32:c2:5d:77:4a:e5:a1:7e:fa:
         9a:7d:74:ae:35:84:72:13:00:64:88:a6:c6:f1:28:5a:91:7d:
         6e:a7:ae:6f:75:62:4c:ba:3a:d4:61:99:84:51:33:34:b1:b7:
         2d:a3:48:de:03:e0:59:cb:9c:e2:98:b2:25:ad:ce:c4:cd:92:
         d8:77:31:7e:47:cf:1b:f6:0f:7a:28:b1:67:bd:81:83:5a:f1:
         4d:77:05:43:d1:81:13:b5:23:90:c7:c5:28:a5:27:f9:1d:29:
         ad:2f:6b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:22:55 2026 by rpki-client