Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
File:                     _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json)
Hash identifier:          4sv80/wwTN9fvgqA04Bt/TkHJAuGR/Jx6SFRZR1V3xg=
Subject key identifier:   4B:81:FC:26:76:F5:E2:87:9F:34:91:06:5B:D9:8F:28:14:E7:A5:38
Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B
Certificate issuer:       /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
Manifest number:          011D
Signing time:             Thu 16 Jul 2026 14:37:15 +0000
Manifest this update:     Thu 16 Jul 2026 14:37:15 +0000
Manifest next update:     Thu 23 Jul 2026 14:37:15 +0000
Files and hashes:         1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: ITHw5JUoWDzqeDCFAJWrngezK888nSQbecLo0cRmdqI=)
                          2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: I8tb2z2Hm/oVZ+/EtUi2cTvMADHbbnwoMnZaKJ+3/z0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl
                          rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 14:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B
        Validity
            Not Before: Jul 16 14:37:15 2026 GMT
            Not After : Jul 23 14:37:15 2026 GMT
        Subject: CN=6a58ec9b-0afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:ca:1e:67:aa:57:b9:6d:8c:75:90:5f:c4:
                    52:aa:e2:5f:c1:ad:b4:e3:34:b6:3b:2f:91:5e:77:
                    eb:04:65:e9:d8:92:79:5b:40:e6:74:34:6b:a1:73:
                    b6:f4:98:d2:91:d8:97:11:65:75:f6:25:bc:3e:74:
                    2f:ea:e3:86:0f:4b:4f:97:9d:59:c4:a3:ea:6c:a7:
                    40:89:a2:13:df:bb:df:2d:bb:a2:ff:c5:ca:17:1b:
                    51:c9:0f:bf:ab:87:4e:0b:09:c4:2a:3c:b7:10:f8:
                    56:5a:a6:3a:ad:65:06:dd:7d:9c:33:00:2d:38:65:
                    7e:08:9e:f7:c3:4b:b8:34:7c:96:6c:2d:11:2a:cc:
                    ef:46:d4:4b:6b:7f:73:93:34:0e:35:88:0d:37:24:
                    65:61:27:08:41:cd:f9:03:3b:e5:7d:a8:c4:d8:3a:
                    14:34:0e:5b:73:2f:cb:22:eb:d2:0a:ae:0c:45:fa:
                    85:9d:ef:1d:e7:d8:17:32:c7:6b:a3:1b:8a:cd:dd:
                    44:1c:a1:90:bd:fc:64:34:ae:4f:f9:f4:d2:9c:2b:
                    51:86:87:38:94:26:6b:58:ec:5e:1f:8a:b5:53:d6:
                    8f:af:dd:47:5e:e9:ef:af:43:be:6b:96:06:6c:dd:
                    40:3a:df:95:d3:e6:5a:7f:aa:da:0b:cd:e1:7d:9c:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:FC:26:76:F5:E2:87:9F:34:91:06:5B:D9:8F:28:14:E7:A5:38
            X509v3 Authority Key Identifier:
                keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:56:b7:16:e9:e0:97:56:e9:93:e0:72:37:dc:00:5c:4d:a8:
         99:c9:9e:95:0d:71:fc:06:08:c3:63:0a:f8:da:21:ab:b3:0d:
         21:5f:ea:60:52:aa:2d:97:24:a8:54:16:64:7c:e6:40:e0:fb:
         d6:3b:32:f1:66:a4:8d:f8:17:66:c2:73:bd:94:04:0e:22:f9:
         45:f8:90:b4:73:99:6c:57:26:3f:12:b8:9b:f8:57:14:82:f2:
         74:1e:6f:81:a9:45:f2:b2:c1:e2:58:10:a6:7f:09:07:80:aa:
         72:46:1d:56:45:c4:0f:9b:fa:1d:28:87:68:63:af:ce:55:18:
         bd:74:a3:5b:3a:2e:5e:72:b4:7f:89:0a:8e:6d:1e:9e:f5:15:
         1a:f8:82:88:0c:f4:98:61:02:79:bc:86:67:35:88:18:2b:3e:
         2a:1d:5f:1d:a0:8a:d3:a9:96:fd:a5:6d:01:6e:eb:c5:87:1a:
         f1:19:bf:9f:4d:33:e6:56:9d:61:e5:1c:a1:14:55:d8:74:0c:
         17:cf:cf:8c:2b:39:74:6a:f5:e6:7d:99:51:b7:58:35:42:c6:
         7a:65:8a:f2:19:90:89:1e:74:05:0d:a4:4d:c7:0d:97:02:12:
         f9:8e:99:ae:79:b3:67:02:7a:17:d0:8a:97:f6:68:d2:e1:1f:
         4c:e1:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:20:56 2026 by rpki-client