Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File:                     8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier:          CvyCui2d8ar4FdcmrEL7dISaVHHIkzDLnTlcvgj/KkQ=
Subject key identifier:   94:41:37:6A:58:B9:50:50:75:76:17:8E:A9:3A:95:52:C6:1D:1E:C0
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer:       /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial:       2552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number:          252D
Signing time:             Sun 26 Jul 2026 15:50:38 +0000
Manifest this update:     Sun 26 Jul 2026 15:50:37 +0000
Manifest next update:     Sun 02 Aug 2026 15:50:37 +0000
Files and hashes:         1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: lw1wvbBvYKugRWNta/l0Eqw6R4JNMdWr7gJBbixBHLg=)
                          2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: rycLk4UK+xxvgQxEjrUg94ft0J4vTpCCFPONGxFmmI0=)
                          3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: +gP/p1k0sh2C300+RvnruBX+xdYqj1376qs/G2NEuaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
                          rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 15:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9554 (0x2552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
        Validity
            Not Before: Jul 26 15:50:37 2026 GMT
            Not After : Aug  2 15:50:37 2026 GMT
        Subject: CN=6a662ccd-d174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:20:ea:31:11:cb:64:34:34:fe:84:95:7a:
                    58:f1:92:f7:60:8e:e4:d5:45:68:dd:40:06:99:17:
                    51:ab:13:84:46:28:7a:b4:02:02:36:c6:fb:ec:b3:
                    6d:7b:40:e4:5e:ba:25:0d:4a:1c:8c:a6:b0:68:48:
                    cc:e5:d6:20:6a:33:c8:0f:c1:35:bd:05:a5:0e:94:
                    cf:bb:05:e9:4f:eb:3f:84:8a:17:7d:5c:c4:c3:80:
                    cf:b4:f2:8e:cc:ec:c4:fb:20:1e:4c:a2:e0:31:c7:
                    2a:57:0a:6a:be:a1:83:c6:e2:b3:fc:ff:bc:1b:bb:
                    66:06:88:89:ce:71:ce:0f:d2:9b:44:e1:8b:fb:3f:
                    77:79:46:81:a0:f7:79:d7:62:74:e9:ac:df:b4:3b:
                    73:19:05:ef:87:6f:45:0b:b7:7b:d8:d0:ed:50:a9:
                    52:b4:70:fc:be:c6:3f:d4:9d:28:89:87:db:48:75:
                    d3:fb:44:88:e7:73:a0:86:5d:77:a6:96:b9:61:de:
                    ab:d9:9b:fe:fc:22:f8:77:cc:b8:12:55:b6:58:90:
                    85:fb:4e:79:d4:29:f3:5a:51:a5:d4:cb:87:c8:7b:
                    6a:50:3f:15:a6:82:75:95:03:1d:f7:95:0c:22:3e:
                    d1:c8:96:24:e1:12:9c:6f:9f:48:02:b7:bc:56:a4:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:41:37:6A:58:B9:50:50:75:76:17:8E:A9:3A:95:52:C6:1D:1E:C0
            X509v3 Authority Key Identifier:
                keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d5:ea:e4:35:96:bf:ea:7d:6a:1f:9d:3f:c1:ea:13:3f:48:
         a7:1f:3d:d5:75:3f:ab:3d:86:74:40:41:4e:62:bf:22:46:00:
         ac:20:32:7e:6d:00:05:41:e3:f4:f1:63:73:89:96:f7:83:06:
         24:2c:57:fd:ab:6a:cf:32:93:38:83:b3:9a:02:92:b2:ad:2c:
         e4:af:ae:05:c7:9c:1a:41:c0:25:2d:5e:7c:19:f6:85:f7:66:
         fa:1c:c9:55:9c:a9:32:55:95:28:32:d0:ff:36:67:90:b6:48:
         1b:d3:8a:86:61:5b:ab:af:c6:90:a8:13:0e:34:23:b8:99:68:
         0a:bf:aa:72:c1:d3:ee:e0:32:12:59:ae:9b:df:c4:61:0a:f3:
         b5:6a:96:51:1b:9d:05:80:50:69:3e:e2:c3:ae:af:0e:79:50:
         b4:fa:82:22:bb:9c:f2:bb:80:f0:c3:5e:c9:92:bd:3e:1e:bd:
         df:2f:af:a5:34:f0:fb:1a:d1:cf:91:25:37:14:41:64:f4:7a:
         a1:9b:af:d5:43:92:4c:4d:e7:e2:f3:8d:e2:13:60:1d:c9:a2:
         ba:ca:f1:a9:f8:58:45:75:a0:0c:b1:e6:6d:2a:ff:d4:18:a4:
         a6:3e:35:89:14:63:a6:b5:0f:8f:ae:74:75:1c:58:e7:01:0c:
         e9:68:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:47:42 2026 by rpki-client