Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
File:                     aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json)
Hash identifier:          1s1ft4G/HmzkBKEFsSq3FMUtnvm0Vs8y83RZ4zSDlms=
Subject key identifier:   10:E1:8B:FE:5A:AD:23:76:F1:91:76:AD:26:EE:7E:A6:54:08:0D:99
Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
Certificate issuer:       /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
Manifest number:          7D
Signing time:             Fri 03 Jul 2026 08:36:47 +0000
Manifest this update:     Fri 03 Jul 2026 08:36:46 +0000
Manifest next update:     Fri 10 Jul 2026 08:36:46 +0000
Files and hashes:         1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: 5P3tmaO2XKelHnEonDcoy0XmVERNci2QXVBgIRidcJI=)
                          2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 08:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
        Validity
            Not Before: Jul  3 08:36:46 2026 GMT
            Not After : Jul 10 08:36:46 2026 GMT
        Subject: CN=6a47749f-9a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:bf:82:02:f7:3e:a0:8b:6e:36:50:27:78:
                    3b:4f:cf:8e:fd:43:ff:4d:00:88:c5:f2:82:92:74:
                    b4:80:8b:36:dd:c8:7f:6e:e5:09:77:19:1b:b1:b3:
                    41:eb:65:00:17:91:b8:f3:cb:4e:32:b4:f7:45:72:
                    f4:d7:0d:23:a7:eb:ff:e2:e2:69:f8:1b:ad:9f:17:
                    8e:82:4f:43:90:c0:e4:5a:df:9b:d6:16:4b:41:d2:
                    7a:93:ae:1f:5f:d9:ed:26:68:f4:87:51:de:2c:5e:
                    d3:ad:20:9b:b7:17:3d:3e:e8:6c:1d:31:d2:10:d4:
                    1a:17:3c:79:4f:ba:18:cb:91:5a:95:a0:08:0b:ed:
                    e0:d7:5d:f0:9d:40:f8:b6:a8:27:5e:53:f5:f9:cb:
                    05:d1:6b:65:3d:5d:2e:5f:f4:0a:be:71:6d:84:c5:
                    58:23:44:30:24:05:47:29:be:af:09:fc:12:d0:d8:
                    d8:fd:c5:6c:0d:d0:e2:c5:0b:88:bf:c6:32:f1:70:
                    6d:2d:47:6c:f6:cf:e9:01:1f:89:20:8e:fd:57:c2:
                    ca:d6:d1:bd:81:cf:a8:cc:e7:14:07:42:b2:48:99:
                    53:1b:c8:b9:c5:37:d8:1c:df:e8:f2:e6:1e:58:8a:
                    4e:15:36:e9:3a:82:a9:26:19:12:62:6e:c5:6e:33:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:8B:FE:5A:AD:23:76:F1:91:76:AD:26:EE:7E:A6:54:08:0D:99
            X509v3 Authority Key Identifier:
                keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:9f:9e:9f:b6:48:44:1d:26:0d:b6:43:cc:44:64:5a:b4:
         b9:49:f6:dd:b1:99:63:7d:2a:ea:6b:10:9c:44:40:68:ec:99:
         fd:41:09:6d:ea:39:43:21:9e:48:5f:9f:ea:ff:76:37:f3:05:
         c2:0d:5f:37:34:b3:2b:48:dd:6c:98:e3:d6:bd:ce:7b:ca:bb:
         8c:97:ee:37:33:32:8b:26:79:f6:dc:13:be:a8:f0:64:32:b0:
         59:af:0b:f4:81:2b:90:63:01:55:87:42:d4:d1:2c:ca:d0:af:
         35:de:5a:53:46:6c:34:ae:e5:5d:19:c2:1b:65:a5:43:84:84:
         63:8a:5b:71:e7:11:a4:b8:9e:18:89:4f:d3:f4:f4:d8:9b:56:
         f7:de:f8:c2:2d:39:8c:35:f0:7a:3e:e1:59:b1:87:bf:1f:c9:
         11:41:7a:96:24:56:8c:59:76:0b:7a:24:2b:a5:0f:e4:39:a9:
         bc:ba:87:d0:6f:c7:ba:2c:66:97:e7:a9:ab:ed:27:71:1f:1e:
         c1:2e:a9:c8:56:9b:ed:41:01:0e:b6:43:af:5a:f9:90:93:8f:
         b2:4d:db:02:f8:5d:a7:34:94:5b:18:60:1b:c9:5b:9f:24:e9:
         8b:95:49:02:22:a8:b2:b7:9a:b0:45:f4:32:20:0d:6e:9c:00:
         63:15:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:42:46 2026 by rpki-client