Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File:                     53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier:          61TTnxXJbOCHQvMlzFUp2JhGuv2uMcnhJaSEwHk3uKM=
Subject key identifier:   17:CB:BE:7F:45:BB:B9:3B:38:C5:55:24:4E:89:68:1A:20:BC:4B:AE
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number:          0251
Signing time:             Tue 07 Jul 2026 03:10:43 +0000
Manifest this update:     Tue 07 Jul 2026 03:10:42 +0000
Manifest next update:     Tue 14 Jul 2026 03:10:42 +0000
Files and hashes:         1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: bEuUc/SO5Roa/s8ta0w970wdfYvosNzSpfRvFmLTNko=)
                          2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: h5xh1R0tEre7HmC/xYO8AoJTBuo2TI6B3de4UegYPas=)
                          3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: NdG+EESk6AxDfSsv+CEMSa3ytYfunyOHRDzMUr7MG1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 03:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: Jul  7 03:10:42 2026 GMT
            Not After : Jul 14 03:10:42 2026 GMT
        Subject: CN=6a4c6e32-9f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:de:d6:34:32:d9:32:25:b3:7e:ec:dc:f2:
                    ec:52:3a:16:e7:11:03:37:8a:4b:00:4c:0b:81:a4:
                    35:5e:d7:81:92:0c:f7:02:52:ec:ac:7c:50:d9:fb:
                    44:91:08:d9:8a:7a:fa:4e:8b:d1:6d:20:b1:06:6b:
                    81:96:45:14:b7:36:5c:24:96:e3:84:38:8d:6f:41:
                    67:d1:4b:09:8a:9b:0c:5a:83:47:3b:86:9a:31:21:
                    7f:38:48:bc:cd:06:da:6c:72:da:e1:7d:39:54:b4:
                    51:40:a7:e6:d8:34:8a:1c:1c:7b:0f:f1:44:0e:87:
                    7c:3c:a0:ef:a9:06:0d:81:39:3a:17:30:a5:b4:da:
                    82:f0:92:cd:1c:5c:e1:9a:51:67:4d:00:d3:c8:e2:
                    0e:bf:2a:b7:5e:25:59:48:24:c0:2a:1b:31:4d:50:
                    db:1f:fb:b4:71:64:14:f4:c9:b8:0a:ab:69:90:d8:
                    a0:80:b9:a7:0f:2c:ba:4e:77:8a:22:1e:41:49:1d:
                    83:68:77:e0:cf:db:5f:c8:36:7a:77:8c:16:1e:c6:
                    68:87:f7:51:c7:23:17:e3:ac:78:c4:75:f7:7f:97:
                    13:ec:3c:bd:b1:d5:b2:d8:51:98:d1:11:31:83:12:
                    45:5c:4b:4e:29:78:f4:27:39:35:7c:79:32:a8:b8:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CB:BE:7F:45:BB:B9:3B:38:C5:55:24:4E:89:68:1A:20:BC:4B:AE
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:ce:82:c7:05:ed:6e:89:4a:18:dc:25:7c:66:68:1c:d9:
         48:20:d5:69:65:f6:f4:fe:87:ab:00:05:bb:ad:cc:59:8f:7d:
         04:3c:c1:f6:92:87:0a:2c:6d:53:e8:03:d4:11:fe:22:0e:27:
         70:01:f2:97:64:82:4a:8c:f9:24:fb:a7:5c:20:0e:31:c3:bd:
         0a:c6:4d:1d:b1:e7:ad:5e:d8:93:fc:d5:ba:64:52:4d:31:c1:
         47:bc:23:09:1d:d6:c7:e5:69:ae:a1:30:78:3c:14:88:32:c8:
         d4:2b:75:04:76:67:9f:09:53:49:73:f5:3e:50:42:79:80:6a:
         8d:75:a4:26:63:50:f1:88:65:7a:88:30:36:ca:07:44:f6:c3:
         6d:a9:ec:12:a3:e5:4b:ed:8c:ee:93:ab:30:dd:8c:e3:8b:7c:
         c7:59:27:df:e0:52:8e:bc:45:9c:77:16:b2:fa:52:dc:fa:e2:
         e9:54:2d:16:c4:cd:6a:8f:4c:5f:45:c1:9c:cb:6f:a3:b5:4c:
         ba:3b:8b:6d:30:f6:d3:36:09:5c:5b:4d:53:fc:af:66:e9:3e:
         63:c2:df:60:37:43:b2:db:66:36:13:2d:23:cf:66:e9:f5:da:
         41:ad:f9:8a:91:87:60:ae:99:37:c2:69:67:ea:21:2d:06:52:
         06:24:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:29 2026 by rpki-client