Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
File:                     MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json)
Hash identifier:          cfplHeiPD0VOPDKbO/YuUnkg4U28aLoizEZpjRTT/s4=
Subject key identifier:   0B:CC:D3:20:C5:D5:AA:B6:FA:12:88:5D:B0:5E:25:AB:01:C1:E6:98
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Certificate issuer:       /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial:       0D16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
Manifest number:          0D02
Signing time:             Sun 26 Jul 2026 18:41:04 +0000
Manifest this update:     Sun 26 Jul 2026 18:41:04 +0000
Manifest next update:     Sun 02 Aug 2026 18:41:04 +0000
Files and hashes:         1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: YxyQjH5PFv5pP85YnVLJLjMtp1rHPvL+b2YiX45krEg=)
                          2: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: Cb0ms+5MzoBG/XTt2Zd5Vxt/O/XifJs8Bp4bbDCzW6c=)
                          3: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: Js9Xf/lTcrawT2dX8Q0Cfk/++xiRQdkyCZUT92zAOmA=)
                          4: 2C986C7E574711F1B4D92A609E833773.roa (hash: RWHIKGnsMljIh4sg02JObP14y4cKA5XjiIZ6HSOyX4I=)
                          5: A01AB4EC574511F1B124FED69D833773.roa (hash: MZIyYBnjh1pUhOWTFHX7tr01fIswpc8hJw1uWXdGFcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 18:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3350 (0xd16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
        Validity
            Not Before: Jul 26 18:41:04 2026 GMT
            Not After : Aug  2 18:41:04 2026 GMT
        Subject: CN=6a6654c0-8017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:fc:c8:9c:a9:6b:e0:22:8b:eb:b0:70:41:
                    de:a3:2e:e5:ac:83:2f:d0:02:99:a6:82:b9:6a:da:
                    46:88:6b:0c:78:60:73:c4:bd:3b:dc:16:95:04:32:
                    08:a2:94:02:84:66:5e:56:43:3d:65:cb:5e:4d:bc:
                    91:34:0b:31:85:94:d4:c0:38:e4:e1:27:33:de:a9:
                    f6:83:dd:60:78:35:ef:c5:da:b6:bc:d5:fc:52:94:
                    00:05:f5:46:61:d6:03:c9:57:69:31:b8:cf:6f:ab:
                    3b:3b:43:e5:02:7a:d9:b9:66:77:f2:a4:9a:d3:a4:
                    db:ee:34:36:8c:47:52:9d:bf:56:c9:6e:03:11:25:
                    e8:60:d9:f3:ed:68:25:be:bd:8c:cd:14:4c:37:4e:
                    e2:f2:35:5e:e9:4b:ae:e6:41:4d:fa:f2:e1:72:e2:
                    a5:cc:25:ea:e1:8b:65:b7:53:44:69:18:35:74:d4:
                    88:39:bf:f6:d1:04:b0:17:46:4d:c7:53:f5:af:61:
                    0a:d9:91:78:b7:e5:4b:2b:28:53:98:f9:5d:fb:ed:
                    42:79:83:2a:19:f6:8c:8a:32:58:ad:03:31:75:23:
                    8d:3c:29:19:b0:99:f1:38:1d:c0:71:7f:5c:d5:e2:
                    59:68:71:2e:e2:ab:e4:06:8b:49:88:f0:d9:8e:f3:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CC:D3:20:C5:D5:AA:B6:FA:12:88:5D:B0:5E:25:AB:01:C1:E6:98
            X509v3 Authority Key Identifier:
                keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:eb:68:b9:52:cd:ed:7b:67:be:b6:24:83:98:26:96:fb:
         5c:bc:08:6a:6a:14:cd:9a:7e:9c:ff:ce:70:90:68:c4:7a:9f:
         59:63:78:f8:d1:d1:2e:cd:b8:b6:c4:0a:fb:bf:94:26:a7:10:
         32:a7:0b:63:64:ee:26:83:40:80:ac:a6:9a:e2:e5:41:c1:1f:
         8a:96:08:a3:16:78:62:0d:e7:33:f2:f2:be:7a:a2:9e:58:a1:
         a4:a9:b9:b1:48:8f:a3:d3:0c:78:83:95:83:5a:4a:32:60:ab:
         0a:41:45:67:0c:ce:ba:6f:30:f6:78:3b:f8:cb:16:07:b6:8a:
         79:24:a6:f5:e9:5a:b1:99:46:7a:3e:23:2e:18:e8:b5:ef:ec:
         a3:c7:1b:38:55:01:d6:57:c3:37:5b:eb:06:7b:6c:10:b0:61:
         56:0c:6e:ff:e1:b3:d5:66:00:8b:c9:4b:7e:c4:4a:86:91:b3:
         a9:82:76:d9:6e:d3:5c:d1:0c:21:26:02:05:a8:ed:12:78:48:
         29:1c:81:18:2e:dc:03:a4:f8:0d:4c:cc:fa:2f:45:ac:a3:a7:
         11:81:94:d7:91:8a:a6:fe:12:5e:6a:87:9c:fa:f6:74:00:27:
         c8:03:e3:b7:2c:5d:c0:74:23:1f:56:ef:20:3d:a0:33:de:86:
         45:d6:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 23:01:17 2026 by rpki-client