Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
File:                     aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json)
Hash identifier:          NIYlYsMMzF4yiNyR/gQEbiAggTHQnKjr5HVPZgCAPAA=
Subject key identifier:   72:18:3B:61:77:E1:6A:14:15:D6:53:41:E6:E3:46:BF:C7:B7:4A:89
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Certificate issuer:       /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
Manifest number:          0132
Signing time:             Fri 17 Jul 2026 06:43:58 +0000
Manifest this update:     Fri 17 Jul 2026 06:43:57 +0000
Manifest next update:     Fri 24 Jul 2026 06:43:57 +0000
Files and hashes:         1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: All3c2S2R/p1VZfT4qfmtvGD2WkSpJGdrcXhIud2f4Q=)
                          2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: Z33Oa7MXRQs8Va13un2oigc2yJEQMc7nxUU5xcFCzXI=)
                          3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: 5akZ6mHQq1ksNbd/DS/b4qeyRo6TcvJuP9SLF4pNYTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
        Validity
            Not Before: Jul 17 06:43:57 2026 GMT
            Not After : Jul 24 06:43:57 2026 GMT
        Subject: CN=6a59cf2e-8570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:e3:a4:32:e4:e4:a6:73:4d:d6:d0:89:b7:
                    52:45:9e:26:cb:0b:b2:ed:34:0a:fd:1f:5e:b9:8d:
                    f8:d9:53:c8:1f:89:c7:5f:3e:75:12:7b:76:64:e2:
                    47:19:ba:83:20:58:37:0f:41:02:87:ba:d3:dd:c5:
                    36:e8:25:b8:fa:61:8d:d0:5a:fa:0c:08:45:0e:c0:
                    bf:e9:eb:5c:06:d4:21:ca:4e:e4:17:cc:fc:76:73:
                    f6:2a:d0:5b:8c:5d:b1:41:2d:ee:cc:5c:a6:87:aa:
                    96:d1:84:61:a3:35:24:0d:86:90:fd:2b:ea:43:ce:
                    43:e8:b1:7c:4a:83:97:4f:bb:a4:b6:ff:ec:4d:3a:
                    e8:ed:fe:ea:79:c3:e2:a8:27:55:07:fc:d7:47:ab:
                    c7:b8:ef:1a:bf:ad:97:8d:4e:4d:5b:a7:d2:c5:f1:
                    ae:be:cc:a5:5b:50:92:c1:36:fe:fa:25:ba:f4:13:
                    87:64:5b:f1:24:de:d5:92:8a:bf:26:bd:9d:d1:d4:
                    cc:d2:05:65:c3:0e:7c:a6:c7:0a:73:ee:43:92:bb:
                    35:cf:75:b9:04:b8:81:77:aa:2c:a2:5e:72:f0:c3:
                    40:84:9d:19:a0:73:3b:8e:fd:76:e3:6d:26:81:6c:
                    6c:64:5e:df:b3:8e:f5:00:3f:b8:6d:62:a3:bf:79:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:18:3B:61:77:E1:6A:14:15:D6:53:41:E6:E3:46:BF:C7:B7:4A:89
            X509v3 Authority Key Identifier:
                keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:54:3b:72:2e:f6:a1:84:19:8a:00:1c:52:72:28:1f:46:
         8b:d1:87:83:56:af:45:ac:90:a0:0b:88:ec:00:16:7a:d3:c5:
         6f:cc:e7:a7:ce:4f:ff:69:8d:73:5c:8c:09:79:c2:e3:40:19:
         f0:c0:c5:02:38:a7:2d:dd:65:01:54:d7:08:c4:5a:1e:ed:2e:
         99:6e:d0:f3:4e:d5:62:10:98:88:b6:9e:cf:2d:dc:43:a9:bb:
         2f:9c:39:ed:5d:d8:a1:b0:8b:b9:4b:76:2f:a1:26:cd:3d:1b:
         fb:7d:49:0e:7e:73:d4:29:16:f1:51:fc:d8:32:3b:97:15:0e:
         48:c2:ef:29:99:0b:bd:50:e0:ed:db:85:b9:39:03:29:a6:fb:
         fd:cf:3b:fe:e8:0e:d4:ad:7f:db:ce:56:b4:cf:30:ee:5f:fa:
         31:df:83:df:6f:cf:02:5e:48:5a:e2:29:1a:64:3d:bd:3d:5a:
         af:9f:0f:2d:98:63:d5:4c:be:01:e8:fd:9b:49:9f:74:a2:2a:
         00:9d:af:51:6f:c7:19:00:c1:e8:51:ed:25:3a:70:9f:96:21:
         ae:d0:cb:d5:12:21:06:3b:80:3f:b9:a2:2c:cb:47:54:de:92:
         44:0b:90:a4:5a:fe:36:49:f6:a8:79:be:93:42:b5:4d:f5:32:
         f4:fa:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:17 2026 by rpki-client