Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
File:                     mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json)
Hash identifier:          NNK3IxaL3RP+4ZIDz0s1weNR5FBPG0Lng/Pjtnf+A0g=
Subject key identifier:   B4:A9:CD:09:EE:41:CA:8E:7F:A1:22:89:38:DC:0D:F9:D4:4B:94:36
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Certificate issuer:       /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
Manifest number:          C1
Signing time:             Mon 13 Jul 2026 07:13:25 +0000
Manifest this update:     Mon 13 Jul 2026 07:13:24 +0000
Manifest next update:     Mon 20 Jul 2026 07:13:24 +0000
Files and hashes:         1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: fX4bP6o7u7pugxouKOPn8krMBlPg3z7r0MDhcIu9Itg=)
                          2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: yCQh77GfzAA6MVXcrT8cCRDK8VNTk64KsqKB1im8Bxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 07:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
        Validity
            Not Before: Jul 13 07:13:24 2026 GMT
            Not After : Jul 20 07:13:24 2026 GMT
        Subject: CN=6a549015-636f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:88:0f:e6:ac:23:21:68:19:e6:7a:e5:69:
                    6d:07:c9:84:07:0e:ff:f4:4d:98:e7:6a:b6:f7:65:
                    c1:b1:b4:75:8e:61:f4:9f:61:8b:c8:e1:2a:5b:fe:
                    ad:99:ea:b0:ac:a5:61:ef:39:ee:82:bd:f5:bb:73:
                    96:08:24:60:29:ae:dc:05:65:68:6e:ef:92:b4:d7:
                    c1:f7:77:39:e7:13:9c:13:26:ea:27:69:7c:f8:9b:
                    b2:08:a3:92:68:4e:ec:4b:ff:59:96:18:3b:5b:31:
                    05:5b:17:4e:e8:bc:fa:c7:34:33:43:67:a5:5a:fb:
                    42:d0:6e:e9:c3:29:17:18:b2:cf:d6:3b:fa:cd:5e:
                    e2:d3:ac:2b:b1:9d:c4:04:f3:b3:01:e7:c9:13:17:
                    c0:55:43:7f:8d:aa:7b:59:66:5e:c6:ce:21:f5:89:
                    20:cf:3b:b7:54:3e:e7:91:a9:14:aa:42:89:11:27:
                    5c:3b:c0:66:20:9f:98:4f:81:36:a9:d8:f4:21:f1:
                    ef:05:a2:ba:51:cf:e0:28:3b:4a:da:46:0b:4c:8f:
                    2b:8b:e7:fe:7f:3e:43:cd:70:69:ae:66:59:0e:0b:
                    21:74:e5:3a:eb:ba:07:8c:0b:77:5a:ed:fb:31:22:
                    69:83:a7:e8:3a:fe:01:52:92:b5:23:1c:71:5b:41:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:CD:09:EE:41:CA:8E:7F:A1:22:89:38:DC:0D:F9:D4:4B:94:36
            X509v3 Authority Key Identifier:
                keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:9c:47:57:44:ab:89:83:ed:5c:81:98:68:b3:32:08:2b:
         cc:44:eb:35:ae:36:9a:05:63:bf:15:2f:ad:33:a3:0e:44:95:
         10:cc:ab:22:c3:5e:2a:77:a4:34:36:3f:f7:94:c6:82:f9:3d:
         13:51:28:61:1e:80:6f:86:de:ca:5e:c6:e5:bf:31:be:50:09:
         24:93:1c:59:55:87:da:3d:e2:a3:e2:c8:b7:62:7e:9f:2e:ba:
         f4:91:d9:99:ce:4e:95:71:f8:ec:9b:34:da:4c:e8:b1:4b:31:
         61:20:f1:7f:7c:05:99:d6:6e:90:39:a5:4f:a8:ec:03:d6:18:
         6c:0a:06:eb:e5:b9:21:5d:58:1b:5a:c9:2b:8c:87:57:18:05:
         19:be:3f:5a:1e:00:73:32:38:b0:1d:76:6c:93:a2:53:41:34:
         ae:a9:19:2e:7c:a2:7c:51:eb:e9:bf:70:ef:e0:00:75:a0:f4:
         ad:70:d2:d9:a3:f9:20:d4:60:7b:03:7a:56:39:a6:f3:ff:fb:
         2f:bd:ff:dd:4a:dc:09:4a:79:58:42:a8:e3:16:f5:b1:4a:8c:
         29:e3:ae:42:27:ae:9f:ba:04:03:eb:e7:b3:0a:a7:b0:f2:2f:
         18:a7:d9:eb:8d:70:01:85:84:59:9e:e7:c8:41:82:a9:af:c3:
         68:4d:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:50:02 2026 by rpki-client