Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File:                     BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier:          B4oorTLsR8KE7AYy8/+ZTeA/ZrOR+CQZ8HR8Y76/bSo=
Subject key identifier:   50:47:63:3A:62:B3:38:77:26:EF:80:4D:E2:D7:88:12:F4:E1:21:F5
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer:       /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial:       176B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number:          174F
Signing time:             Tue 14 Jul 2026 16:39:23 +0000
Manifest this update:     Tue 14 Jul 2026 16:39:23 +0000
Manifest next update:     Tue 21 Jul 2026 16:39:23 +0000
Files and hashes:         1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: mB9KOEWD58vnXfrjJkUpegAqJZhBPabvhGR9UAkaK2I=)
                          2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: CJNG/K8L9+DgV5sR3qhRIaI7DfSSiBEZ1i4T4JpMdyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 16:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5995 (0x176b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
        Validity
            Not Before: Jul 14 16:39:23 2026 GMT
            Not After : Jul 21 16:39:23 2026 GMT
        Subject: CN=6a56663b-df68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:6d:b5:3c:94:53:19:29:15:44:76:72:da:
                    1e:52:fe:d5:8f:35:bb:e6:8d:8a:9f:f8:eb:30:f0:
                    b4:f8:11:1b:ad:80:ed:3d:43:f4:1f:aa:98:5b:42:
                    3b:8e:ba:3d:26:d3:35:b0:0f:fe:9a:7a:44:40:6e:
                    fe:32:df:bc:ed:b6:94:6f:10:b7:5b:81:53:a6:09:
                    22:80:0a:80:3e:65:4f:03:39:68:9c:0d:b5:8f:b8:
                    a5:ad:c6:e3:96:1a:0e:3e:e6:70:e8:4c:e8:5b:f7:
                    95:3e:60:1f:09:00:68:8d:3c:3d:de:6f:9e:73:2f:
                    33:a8:b8:7c:cc:b9:17:76:a3:12:b5:14:5b:7b:d2:
                    ac:8d:fb:f1:ec:43:4a:7c:19:d3:76:35:d3:b2:21:
                    e3:97:ff:cc:86:5b:cf:7f:2b:ba:6f:0a:08:40:e0:
                    39:52:cd:b2:d6:4c:57:5b:3f:ac:6b:fa:85:d5:d2:
                    12:01:0b:96:48:f2:77:2d:0f:d9:13:d9:c6:0b:c9:
                    31:ff:2f:f3:de:1c:59:c9:f7:20:f5:80:99:69:a9:
                    35:fe:92:ee:b5:78:88:d8:c1:f4:d2:75:7c:d2:56:
                    74:75:9a:38:6f:f7:d2:d9:0b:32:b9:9e:ae:25:42:
                    57:5a:6d:18:2f:fd:a3:96:05:02:82:df:b1:1b:e1:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:63:3A:62:B3:38:77:26:EF:80:4D:E2:D7:88:12:F4:E1:21:F5
            X509v3 Authority Key Identifier:
                keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4d:8a:d9:48:d8:e0:ed:a5:7e:63:a1:b3:4e:29:c7:f6:64:
         4b:25:6a:56:30:91:46:44:c4:f6:fd:d9:bb:8e:43:bd:9e:24:
         94:4e:dd:0b:1d:81:a7:3d:51:13:90:64:11:e7:97:d3:7e:a9:
         83:e7:6a:70:ab:ff:3c:54:11:db:62:02:37:de:32:f4:42:fa:
         6e:1b:75:cf:3c:c4:04:63:f8:46:d4:05:12:8d:71:61:62:e1:
         1f:25:09:66:c7:f7:0d:e2:97:79:8c:45:43:ab:bc:75:f7:09:
         ec:65:56:1c:33:ce:1f:a1:75:7d:c6:b0:1e:12:ce:8a:f4:b0:
         4c:f4:62:11:a5:da:a7:b0:c2:e8:a8:c8:b0:90:81:f0:29:35:
         c9:ff:f4:0a:6d:b7:ea:9b:fc:2d:40:62:6e:99:ab:ab:02:b8:
         7e:9e:e4:fc:26:23:98:1e:aa:28:fb:93:15:e4:5e:53:52:fa:
         63:39:e2:e6:27:2a:d3:84:95:e5:5d:43:92:0a:7e:22:ff:00:
         5b:ae:ac:62:02:1d:3c:f4:77:25:50:f9:d4:75:79:90:12:86:
         18:45:3f:86:d3:92:56:bb:17:7f:8e:2d:c1:ca:19:4b:cf:49:
         6e:c9:4c:26:7b:b8:99:cc:29:69:ba:79:1f:58:74:a7:3f:78:
         82:55:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:44:11 2026 by rpki-client