Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File:                     RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier:          vYUbs2Tcz91CVGSdWL7X4jy15KnJhM2LDmz0es3tyPE=
Subject key identifier:   5A:7D:B3:E1:8D:1D:F7:10:94:8B:78:06:1A:CB:24:BD:1B:DC:6C:79
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer:       /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number:          01FE
Signing time:             Sun 05 Jul 2026 03:52:05 +0000
Manifest this update:     Sun 05 Jul 2026 03:52:05 +0000
Manifest next update:     Sun 12 Jul 2026 03:52:05 +0000
Files and hashes:         1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: 9GaWHV+Wbyyay4yOKdXdvdm/b/lkjyMNdHzges8oR9Y=)
                          2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: BKYUsrSTsEZZhJsjvVOhMg6+a6SrCr1C6umPKzfjlnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 03:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
        Validity
            Not Before: Jul  5 03:52:05 2026 GMT
            Not After : Jul 12 03:52:05 2026 GMT
        Subject: CN=6a49d4e5-c061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:b8:f1:00:8b:cb:a7:00:e3:ff:d0:cf:d7:
                    c7:92:42:be:af:aa:a1:36:28:b6:dc:45:4a:c9:48:
                    c5:43:0c:90:72:be:ce:38:76:b7:82:fe:d7:1a:3c:
                    73:fc:6c:55:a6:e7:6b:d9:79:b8:06:0a:af:81:ec:
                    be:85:e3:41:63:c9:7b:3e:32:28:a6:f2:00:63:52:
                    be:4c:d9:c9:e7:73:6f:d9:8a:f0:8f:f8:84:4f:47:
                    92:c4:d1:1f:fe:dd:3c:10:38:4d:7e:a4:22:3c:2d:
                    c2:25:60:41:2d:65:25:55:03:bc:d8:8c:c1:8b:6d:
                    4a:da:0f:f0:89:57:d4:de:63:24:c3:6e:47:25:cd:
                    25:73:60:bb:38:79:a3:02:e5:d9:c9:a6:99:40:f1:
                    7e:c1:2a:3f:e5:4f:d6:2e:84:66:1c:2c:72:be:17:
                    32:e1:19:1b:5a:8c:4e:c3:c0:d6:18:4c:30:d8:5d:
                    8c:26:f3:5c:35:da:19:fe:e8:db:72:9d:4d:0f:db:
                    c9:ed:28:da:95:67:72:79:55:34:ac:47:12:4f:41:
                    94:25:f0:0d:5d:05:37:56:7b:41:2a:f6:a1:d6:e7:
                    84:cb:b9:a5:82:01:b4:9b:5b:7d:8a:0a:69:4b:4b:
                    b8:48:58:60:92:3d:af:08:e4:73:50:4b:a6:a0:4e:
                    03:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:B3:E1:8D:1D:F7:10:94:8B:78:06:1A:CB:24:BD:1B:DC:6C:79
            X509v3 Authority Key Identifier:
                keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d6:b1:cd:92:ac:9b:a0:7d:25:51:05:ef:bd:6c:9e:2d:46:
         6f:f1:4b:c2:8a:60:f3:57:23:50:b8:20:a8:dc:b1:2d:b4:8c:
         1e:1e:0c:e3:e0:b2:10:5e:9b:41:06:2a:ad:01:3c:b6:6b:1d:
         23:7b:05:5a:0f:ff:3f:a0:89:63:eb:4e:ec:b6:f8:9c:35:13:
         c8:8f:56:90:5d:24:54:a0:23:40:61:0a:ed:50:1b:e5:bb:51:
         43:bf:14:cc:92:a9:75:27:0f:e1:be:91:8f:0b:8d:32:c0:53:
         77:a9:2f:b7:e3:0a:56:9b:2b:d4:2e:05:63:cd:1a:5d:b2:51:
         b9:25:95:62:7d:66:91:54:8a:28:3b:b8:f0:8d:c8:1d:59:38:
         c4:b9:b5:2b:ae:ba:ec:b3:25:bd:33:4a:bb:ea:e8:1b:25:cf:
         cd:26:4c:f1:54:25:cc:b6:5a:82:c9:b9:db:80:0c:9a:01:2f:
         54:62:c0:2c:2d:41:dd:21:4b:f2:4a:9a:c1:58:a7:c5:8f:61:
         07:c6:a1:6d:09:de:e2:3e:2a:22:59:c1:f5:2f:4b:f2:57:e4:
         fd:a2:45:98:15:fc:5f:dc:d1:95:a3:be:3c:6e:6b:ec:46:bd:
         d8:de:f4:62:57:4e:bd:2a:c1:2b:0c:e5:8c:1c:0b:f3:50:0f:
         d7:a5:81:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:54:44 2026 by rpki-client