Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
File:                     mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json)
Hash identifier:          fG+x850bHZLAhqWydvR49Z43U/TxZBc+k0WMc3beQWM=
Subject key identifier:   3F:AE:D9:10:67:2D:66:48:A8:B6:D8:2B:B4:0E:DA:87:86:2B:63:B5
Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
Certificate issuer:       /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
Manifest number:          CF
Signing time:             Fri 31 Jul 2026 08:15:31 +0000
Manifest this update:     Fri 31 Jul 2026 08:15:31 +0000
Manifest next update:     Fri 07 Aug 2026 08:15:31 +0000
Files and hashes:         1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: oflpQacp+9cVjfB7Qm42S5xR03RnD0U3JuNZjbDD6JI=)
                          2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: BNr56w4gucIUPsbq13wgpUL195UkxJVM3QKa9wUEfME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Aug 2026 08:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
        Validity
            Not Before: Jul 31 08:15:31 2026 GMT
            Not After : Aug  7 08:15:31 2026 GMT
        Subject: CN=6a6c59a3-c134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:a7:80:54:d8:6d:5c:4d:47:a5:ac:49:13:
                    f3:e7:99:3c:bd:c3:5c:7a:99:08:4f:f4:81:be:09:
                    62:be:e5:81:7b:e5:a5:0a:4c:5e:9b:07:87:91:35:
                    64:24:32:b6:a6:b3:2e:2a:b2:b9:95:d6:85:37:1e:
                    24:23:8d:8b:14:f4:a5:7a:9e:c5:0c:69:4c:25:c2:
                    1a:c5:f6:cc:a6:67:85:6d:fe:49:f0:20:97:c2:a1:
                    19:0e:18:8a:01:ef:fe:17:3e:0a:a3:f4:b4:5f:38:
                    e1:9a:76:2f:f0:39:bb:1e:43:cc:ca:82:6a:43:73:
                    f5:9e:89:27:2d:6e:a8:c4:67:88:3a:fe:44:6e:95:
                    26:c8:38:ba:61:bd:09:f3:2b:f1:ba:bf:e8:b3:dd:
                    ab:dc:9f:ef:56:ae:4a:25:32:b9:93:a5:f0:f1:8c:
                    79:98:36:1e:9b:0a:98:9b:25:c9:6e:45:1b:2d:0e:
                    de:0d:f0:d1:1d:d0:bd:00:d4:95:2e:e6:ac:cd:31:
                    62:20:81:fe:f6:2b:32:a3:e8:27:37:fc:d8:69:b9:
                    aa:db:68:87:f1:bb:26:d7:fe:67:00:cd:25:31:ea:
                    94:e8:61:0e:cd:8f:da:25:4c:b1:69:5f:ce:05:73:
                    81:43:33:ba:06:d7:c8:de:68:41:fe:43:eb:06:7b:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AE:D9:10:67:2D:66:48:A8:B6:D8:2B:B4:0E:DA:87:86:2B:63:B5
            X509v3 Authority Key Identifier:
                keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:75:53:3a:8c:f6:a2:06:b7:b5:ab:5a:07:19:b7:b8:0c:84:
         35:fb:e2:ba:2a:c3:ab:b9:d0:71:9f:ee:12:76:31:6a:93:5b:
         40:a1:bb:c2:58:12:7f:b4:a4:5a:7d:cc:d4:1e:53:8d:0c:1d:
         06:be:90:97:db:15:fc:d5:d1:ae:af:e0:71:7c:fb:e2:21:95:
         63:79:21:48:fb:4e:19:71:a1:e5:27:65:04:41:f2:a1:d5:eb:
         84:1a:40:c2:51:a5:7f:a1:68:f8:c8:45:a8:d5:0f:b4:7d:43:
         d2:ce:7e:b4:32:ba:cf:c4:75:3a:c0:6c:ef:47:38:3e:65:b8:
         5f:6d:71:56:f0:01:60:88:0f:92:46:1d:fb:e7:44:0c:af:11:
         4b:1a:c5:5b:45:22:93:55:d9:50:19:67:38:15:ce:f9:4d:f9:
         00:2b:b6:c7:71:8d:70:dc:e9:a6:eb:fb:6f:70:b7:7f:fe:39:
         2c:f2:e8:ba:fc:76:2f:70:34:6b:a2:03:df:cc:0e:aa:d1:70:
         c6:6e:04:9c:14:a4:cb:78:d2:42:a7:14:c7:c3:17:33:c9:6f:
         87:66:de:86:3b:e5:42:9d:cd:2e:37:9b:18:5c:66:fb:42:12:
         1b:49:32:e3:47:bb:85:61:8a:0a:01:4b:28:72:16:54:fb:27:
         f4:5b:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 14:00:08 2026 by rpki-client