Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File:                     ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier:          pSVUoPIHPo7v2wKeLEFi7HqsNvd+LHb2J4bpDH94ZeU=
Subject key identifier:   FC:53:6A:66:D5:77:87:53:35:9A:06:8F:D4:95:A7:CB:83:35:88:94
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer:       /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial:       04F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number:          04E4
Signing time:             Mon 27 Jul 2026 00:48:16 +0000
Manifest this update:     Mon 27 Jul 2026 00:48:15 +0000
Manifest next update:     Mon 03 Aug 2026 00:48:15 +0000
Files and hashes:         1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: TlCOnqAzKroEV8rqffBZncEgz18QO/aD3aMwitKmRjA=)
                          2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: 2CDab6GJOjEdyrMFd+lXVI2pCJVkqK3+MFwcm02DkvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
                          rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
        Validity
            Not Before: Jul 27 00:48:15 2026 GMT
            Not After : Aug  3 00:48:15 2026 GMT
        Subject: CN=6a66aad0-17f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:dd:2e:c0:bd:0e:1b:7c:d7:f6:22:45:c2:
                    d0:8d:61:fa:65:77:a7:e8:b3:ec:14:bd:64:4e:23:
                    e0:5f:31:73:5d:58:5d:25:f0:69:79:f1:b1:21:11:
                    f7:cd:4a:a5:33:4c:83:c1:55:3a:fd:18:65:aa:b0:
                    03:a1:02:a7:28:a1:fe:2a:f5:6f:4b:42:66:49:76:
                    f2:d2:9f:67:4e:a0:22:a6:2f:05:34:e9:e5:78:08:
                    c4:dd:72:c4:b1:8d:00:2d:61:35:7a:0f:9b:40:63:
                    cc:55:1f:ac:fc:b7:2a:41:d9:5c:eb:81:bd:0d:91:
                    23:e5:cf:c5:10:da:ff:3a:2a:47:aa:1f:03:19:f7:
                    bc:9a:04:85:35:94:16:e5:99:ce:c1:a5:e8:92:87:
                    7c:e0:ef:2e:7e:e1:84:cb:f2:fa:a1:94:9b:c0:1a:
                    78:c5:d3:55:e8:6d:73:c0:ed:71:90:e4:86:b4:4f:
                    05:e4:14:22:fa:7a:ea:b4:05:1d:a2:e7:0b:f9:cd:
                    26:9f:6e:7c:27:03:14:ed:1f:be:0d:96:40:eb:49:
                    61:a8:22:e5:94:43:5d:a1:c4:1c:2d:5e:6e:cd:5c:
                    02:1f:cd:4e:6e:fa:3d:cc:6e:84:95:79:a6:88:84:
                    ce:fe:58:ca:65:96:cd:c7:26:11:b4:f2:b4:5b:a9:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:53:6A:66:D5:77:87:53:35:9A:06:8F:D4:95:A7:CB:83:35:88:94
            X509v3 Authority Key Identifier:
                keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9a:94:1d:ea:81:68:d4:83:43:6a:80:9d:de:97:93:89:9f:
         ae:23:2a:88:ac:43:55:a5:b9:6f:6d:9f:51:e7:7f:a6:93:b9:
         9b:66:26:e2:e4:7f:48:de:00:80:c9:4e:67:ae:be:94:32:48:
         52:91:7e:59:5d:16:fd:07:c7:7b:b2:08:39:af:42:1d:0f:51:
         d6:54:a8:5c:09:f6:d1:51:c2:fd:78:4f:d9:08:59:07:63:01:
         8e:04:84:95:66:95:5e:64:e2:d2:76:cb:d3:5a:90:aa:62:36:
         0b:2c:e4:70:42:c5:76:63:5d:1f:ad:0a:b8:ad:ab:7d:f6:a8:
         c4:32:85:ed:67:57:65:2d:4b:eb:62:9b:be:d6:33:64:31:d9:
         22:36:3b:dc:26:5b:cc:87:50:81:eb:d0:b4:b4:d9:af:46:a5:
         19:b3:92:fb:9b:14:d5:a6:95:06:f6:59:b1:f3:92:68:06:e8:
         7a:87:b8:34:69:4e:c3:98:a3:30:d3:6b:62:9e:6f:74:a6:39:
         4b:5c:cc:17:0b:d3:f8:cc:9f:4c:ae:dc:9e:43:a2:a8:25:a9:
         12:78:5d:bb:33:b3:a5:2d:cb:80:d6:79:df:8d:21:a2:11:8a:
         fc:b6:1b:5d:1f:9c:ea:59:cc:ff:2d:32:dc:f3:c8:b2:98:4b:
         d7:c3:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 06:28:34 2026 by rpki-client