Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
File:                     29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json)
Hash identifier:          lBu6i2eoFJ/o+9nvJl8ao3X9/D6jNs8TgfDWZhBSlls=
Subject key identifier:   D9:98:F8:69:63:A6:9F:D7:9A:0E:18:A3:4F:83:8A:CE:90:C6:51:B6
Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
Certificate issuer:       /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
Manifest number:          01ED
Signing time:             Sun 05 Jul 2026 03:57:56 +0000
Manifest this update:     Sun 05 Jul 2026 03:57:55 +0000
Manifest next update:     Sun 12 Jul 2026 03:57:55 +0000
Files and hashes:         1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: rAKMrAQbHplOSoJ/PpBZRmO+EgJX+vbPoKuS5zTqlUk=)
                          2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: EVuru3xNSy6RQB88Xo1MqJkQivcU8HP38W4mpX0e8UU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
                          rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 03:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
        Validity
            Not Before: Jul  5 03:57:55 2026 GMT
            Not After : Jul 12 03:57:55 2026 GMT
        Subject: CN=6a49d644-0899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:c2:07:90:2e:c1:88:25:6e:64:a0:a6:d4:
                    39:34:33:b7:f2:b4:93:c4:98:e4:52:4d:91:e4:5b:
                    63:fc:0a:20:31:c5:8f:e6:08:b7:6a:8d:f4:ed:5f:
                    89:93:63:c9:59:a0:e7:24:ee:21:f8:b1:c2:06:77:
                    91:58:1b:1a:06:42:80:8e:49:d6:92:e8:26:6d:c5:
                    08:cc:c9:1b:00:7e:e8:1e:a0:44:a4:5f:6d:14:fb:
                    e6:f5:bb:9b:57:59:f6:7b:22:7a:6f:37:41:20:3a:
                    5d:b3:9f:31:de:9f:98:f2:37:8d:83:cd:11:6b:e5:
                    66:36:43:0a:d7:24:72:60:69:be:e5:29:45:cb:0d:
                    25:ea:a4:07:0b:e8:50:ce:c0:bf:22:41:05:45:d7:
                    32:12:00:e9:99:aa:90:93:32:49:e2:ba:f1:c9:4f:
                    e2:34:03:37:96:fb:95:84:ee:ba:9c:8b:20:56:0e:
                    7f:d3:8c:d5:2c:fc:54:07:2b:10:25:91:69:67:96:
                    d7:79:36:f8:03:1c:02:6e:9b:5f:1c:5f:ad:38:a6:
                    58:9d:ca:7e:a5:cd:65:6c:33:e8:ab:fc:bc:0d:a2:
                    da:f7:e0:b2:e6:58:a3:48:2c:c4:29:f1:fc:bb:42:
                    d2:38:3e:21:37:1e:5d:50:09:b4:59:4f:e2:34:c5:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:F8:69:63:A6:9F:D7:9A:0E:18:A3:4F:83:8A:CE:90:C6:51:B6
            X509v3 Authority Key Identifier:
                keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6d:e0:44:61:c3:fe:d8:ca:34:b6:38:1a:77:ff:d1:f1:b0:
         f8:7f:e7:4d:64:8d:d7:e4:7c:45:36:b7:1d:f0:f2:e8:dd:6b:
         70:7e:a7:f8:e1:d9:57:98:4d:70:5a:72:7d:02:05:ff:c1:99:
         0d:92:f6:11:24:16:08:8f:80:ce:de:be:d5:d5:b5:cc:99:cc:
         5d:6a:24:3b:0e:72:d4:39:c6:32:ad:f8:2c:3a:d9:c8:cc:5b:
         28:87:94:68:53:4e:34:f6:36:1f:c2:d2:9e:09:a6:61:93:5d:
         56:03:bb:4d:ac:c7:ef:aa:c1:a8:91:d1:c8:b3:53:99:7b:2c:
         ee:31:0d:e0:f9:5b:b8:77:68:cc:ae:14:b4:06:24:1f:3d:9e:
         1d:b5:11:e7:30:69:9d:b3:0f:ed:af:3f:4f:07:03:25:83:43:
         3b:b1:d4:09:ed:03:4c:e6:30:06:8d:03:32:49:84:1d:a4:a3:
         df:9a:f5:35:f9:6c:09:9e:2d:af:58:f9:38:f6:bb:16:20:a4:
         7f:c3:35:06:e5:69:54:53:42:25:32:b2:35:94:bf:49:be:c4:
         00:00:6c:34:50:a8:fe:bc:f9:d6:2d:45:56:50:d1:51:2b:6c:
         a1:b4:70:eb:4f:60:6b:f4:1f:fc:a1:a9:0d:b9:ce:cc:19:d3:
         cf:f8:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:53:12 2026 by rpki-client