Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
File:                     RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json)
Hash identifier:          hbbzvrNIXUyUecqWCNKZfb0DojxyiGwSdL1OA8zkk9I=
Subject key identifier:   7C:69:40:F5:F2:AB:16:25:E3:31:37:D4:24:4E:D7:85:E8:4E:83:B6
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Certificate issuer:       /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
Manifest number:          013F
Signing time:             Fri 17 Jul 2026 06:31:17 +0000
Manifest this update:     Fri 17 Jul 2026 06:31:16 +0000
Manifest next update:     Fri 24 Jul 2026 06:31:16 +0000
Files and hashes:         1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: ZpudqG/MZQJfiCAaCsUw9TAvQv6GeYXYe3YD2MoiK1I=)
                          2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: qMPRgrgLny92y+u26wGr54Urgeg7Km6YGkgoUSViYNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
                          rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
        Validity
            Not Before: Jul 17 06:31:16 2026 GMT
            Not After : Jul 24 06:31:16 2026 GMT
        Subject: CN=6a59cc35-50dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:fe:ac:a5:e1:82:f7:75:ed:8f:e0:d4:0a:
                    6e:1c:32:71:c1:6b:08:d6:cc:7a:a2:9d:e8:56:e9:
                    8b:ec:93:e1:b1:b8:05:35:a0:d1:8a:98:01:0f:f6:
                    8c:37:ab:9f:78:da:e8:7f:35:eb:6a:db:c9:bb:db:
                    b4:01:da:5b:c3:0c:c1:a5:5c:ed:58:cc:ac:91:44:
                    40:e3:c1:c0:0a:fb:da:e0:66:58:c8:b6:c2:3f:67:
                    fc:48:4a:0f:4a:39:d1:d0:94:24:88:b3:33:70:92:
                    b3:dc:10:fb:63:b7:46:28:f4:7f:33:64:2b:12:a9:
                    d1:36:41:35:22:f1:f5:e4:f8:b1:56:e8:f6:fc:93:
                    93:16:fd:92:d7:56:75:b4:3f:b8:d3:b2:a0:b4:19:
                    fa:c6:79:3e:c3:7d:9f:9c:8d:5d:f0:48:9e:9b:07:
                    f7:23:76:29:b8:e0:b0:ea:69:f8:99:ec:de:e5:67:
                    6a:32:f8:91:e5:4c:6a:19:c5:b2:46:84:98:24:0b:
                    54:d6:94:eb:49:b3:7d:f6:20:ff:1a:1a:f1:29:b9:
                    6c:30:d4:98:df:7d:3f:46:1b:b4:5a:b2:07:8f:4d:
                    cf:71:f6:fd:64:c4:10:7f:af:69:e3:58:9e:f6:04:
                    9e:66:2f:3f:13:7b:a8:d5:69:47:e7:ac:86:dc:af:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:40:F5:F2:AB:16:25:E3:31:37:D4:24:4E:D7:85:E8:4E:83:B6
            X509v3 Authority Key Identifier:
                keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:e1:06:4f:d4:5c:3e:8f:ec:77:86:a4:6e:ab:d0:6b:f6:
         f8:6e:cd:0a:ba:50:8a:91:2a:17:80:21:08:c6:47:e9:9f:83:
         60:07:b9:2b:5d:a1:12:a2:be:3d:6e:bb:e8:72:1d:98:ad:5e:
         0e:7f:5e:a7:c5:f0:6d:f3:94:4b:d1:8a:d1:4a:3a:db:48:1b:
         4f:b8:cb:ae:58:2c:83:08:d5:64:c2:4e:5e:1c:b7:72:7e:a0:
         ac:91:f5:d7:42:0c:65:4f:eb:65:c5:28:77:92:26:55:0a:2d:
         67:0b:e1:23:43:04:f4:10:3e:17:cd:ee:42:d7:ec:71:c5:6f:
         83:a8:e1:7d:5c:0a:c7:7c:92:50:f0:a8:fc:4a:70:db:a1:76:
         a4:3c:1d:f9:99:27:e5:a9:45:8d:d8:d0:a5:c4:4b:4f:2a:19:
         5f:b7:db:7c:be:3d:ac:5e:bf:50:73:91:ab:e6:68:80:70:8b:
         27:bc:b5:62:bc:b7:67:51:9a:57:33:cb:bc:47:40:2d:c4:65:
         bd:b5:b9:fb:de:4b:f0:a6:7b:19:82:40:bd:e4:30:f1:c2:50:
         9c:8e:c2:05:39:f1:6d:da:7f:81:c3:c8:08:bf:12:ad:76:9f:
         60:a7:0e:68:7e:43:79:47:dd:90:6b:cc:7b:bb:ea:04:79:ad:
         55:8d:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 13:34:26 2026 by rpki-client