Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
File:                     MYH5m8WFngRexECQnaM0uPSdFtI.mft (raw, json)
Hash identifier:          1yIhh+Y6dPYhGzWGALrlbFrMTA2Kd1bjIUYX4KlLxfQ=
Subject key identifier:   3C:86:7A:BD:53:43:FD:92:5E:B0:C5:94:CB:D6:83:48:98:39:0F:B4
Authority key identifier: 31:81:F9:9B:C5:85:9E:04:5E:C4:40:90:9D:A3:34:B8:F4:9D:16:D2
Certificate issuer:       /CN=A91F7C06/serialNumber=3181F99BC5859E045EC440909DA334B8F49D16D2
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
Manifest number:          61
Signing time:             Tue 21 Jul 2026 09:56:27 +0000
Manifest this update:     Tue 21 Jul 2026 09:56:27 +0000
Manifest next update:     Tue 28 Jul 2026 09:56:27 +0000
Files and hashes:         1: MYH5m8WFngRexECQnaM0uPSdFtI.crl (hash: w0+U31GWzFqBFRxwfwGbRO1TWB+G0xTPT3mRHsw0ZIg=)
                          2: F2229F54F6BD11F09D68ADA04A6F56BC.roa (hash: GPBxzgkKMaaG3/PAbiTitYUtRx+LwfxYpF4stDa35Tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C06, serialNumber=3181F99BC5859E045EC440909DA334B8F49D16D2
        Validity
            Not Before: Jul 21 09:56:27 2026 GMT
            Not After : Jul 28 09:56:27 2026 GMT
        Subject: CN=6a5f424b-4da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:f8:35:05:1d:c5:57:96:60:17:64:7d:91:
                    56:c6:13:ea:5a:ec:c4:15:21:58:23:2d:c4:06:c2:
                    ad:0f:b5:47:82:85:9d:7c:90:e7:fa:64:c6:ce:44:
                    e9:52:91:dd:87:62:97:1b:63:d4:c0:4e:f5:62:b8:
                    d6:a0:4e:7d:0f:0b:2b:f5:50:9b:f7:e8:8b:a4:a9:
                    38:46:ab:54:07:e0:d1:79:15:b0:04:93:a8:56:a7:
                    9e:56:88:a6:ad:1e:f1:db:5c:26:be:eb:05:b2:4f:
                    f7:3b:e7:8d:5d:6b:e2:2c:8f:21:28:0c:20:86:0f:
                    dd:10:59:0b:66:1e:3b:79:df:2e:e2:17:70:e2:af:
                    b9:34:9f:1e:08:96:40:7e:f1:43:19:25:35:d6:6e:
                    bc:b4:eb:38:d0:bb:c0:7b:3c:c6:ac:5d:47:a0:c8:
                    4d:1e:06:45:bc:f9:7a:1d:4d:a9:e7:de:19:02:c9:
                    71:d4:db:9c:f6:96:bb:13:4b:f1:82:6d:cd:9d:a3:
                    ee:24:e6:a7:80:1b:38:b6:c0:24:81:02:be:44:ae:
                    e8:8f:bd:b8:8b:5e:c8:cf:81:d2:6f:24:c2:4b:f1:
                    57:b2:4d:2b:88:ab:b0:97:ae:46:dc:29:a7:b4:56:
                    ff:df:a2:d0:17:f1:52:57:70:f6:71:69:74:25:9b:
                    89:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:86:7A:BD:53:43:FD:92:5E:B0:C5:94:CB:D6:83:48:98:39:0F:B4
            X509v3 Authority Key Identifier:
                keyid:31:81:F9:9B:C5:85:9E:04:5E:C4:40:90:9D:A3:34:B8:F4:9D:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:00:cf:e3:c3:14:77:7f:d5:cc:e6:4c:2c:05:30:05:03:05:
         3a:d9:35:ae:5e:c4:2d:20:06:a1:3a:e6:e5:8e:51:0d:1a:07:
         09:d4:5f:61:05:1d:f1:77:8d:a3:2c:51:d3:eb:57:94:ff:78:
         c0:ef:2e:5e:2b:3d:5e:66:7c:bd:51:49:69:8b:84:78:5c:9b:
         46:f4:dd:62:40:66:a4:ef:78:f0:79:84:32:fc:f3:22:98:4e:
         14:8f:f8:b6:be:ad:97:de:d8:5e:23:2b:12:b3:de:d6:47:5e:
         d8:0d:a0:ca:bb:f5:b9:9e:6d:9d:74:b3:eb:3d:e7:ca:56:39:
         27:ab:7b:d1:0b:e4:5a:c3:f3:13:7d:ac:aa:ea:77:eb:c2:38:
         d9:47:01:0b:76:82:81:2d:a0:f4:6e:15:b0:25:19:dc:84:0a:
         fd:6a:e1:a9:55:23:73:bf:85:81:b9:1a:28:5e:8d:5f:a2:64:
         18:b8:7c:70:1e:82:eb:a4:46:e9:14:c1:f5:2a:4c:58:f2:ba:
         1a:99:d6:99:31:b6:13:ca:7e:46:5d:65:cd:93:31:a1:0c:14:
         da:c3:45:95:cb:46:6c:7a:b1:4d:41:1b:77:f7:e9:31:70:97:
         bd:ef:9a:25:69:64:66:a6:d3:06:77:36:96:a3:48:9e:1e:bb:
         a8:35:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:57:57 2026 by rpki-client