Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File:                     nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier:          LGVN1puJZlm5ExGTZsF0zWOzZ5Gle7UFMNKypyGgXac=
Subject key identifier:   7A:BD:48:FC:73:6D:C4:FD:19:BB:2D:08:11:A1:65:FE:5C:BD:0F:94
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer:       /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number:          2D
Signing time:             Fri 17 Jul 2026 10:01:25 +0000
Manifest this update:     Fri 17 Jul 2026 10:01:25 +0000
Manifest next update:     Fri 24 Jul 2026 10:01:25 +0000
Files and hashes:         1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: tnX6yVgi7vtRE3khq1Ssl8OB5oJOBuoXGsktqH5dg8w=)
                          2: 6A7A4C9A3E1711F1A511DF78B0833773.roa (hash: HR3Bw4cs3A87KRfcRVJWreHgQBXYrEw5cctSabHCe08=)
                          3: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: TJJKG9BrNls63ox4QV7qWwE0OnJEumnAFR/LmFcDwfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
                          rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
        Validity
            Not Before: Jul 17 10:01:25 2026 GMT
            Not After : Jul 24 10:01:25 2026 GMT
        Subject: CN=6a59fd75-d9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:28:35:d9:8b:1e:7a:f0:76:ba:1c:95:e2:
                    e3:31:72:a8:54:b0:84:e3:7a:36:2f:97:ed:c8:68:
                    04:4f:ce:53:3b:d1:ab:ed:eb:bf:52:cb:6e:31:dc:
                    c3:28:96:cd:2e:df:6d:33:51:46:7c:2d:a1:23:f6:
                    e0:de:55:d6:5f:32:4d:67:fa:a7:34:a8:4a:a4:c7:
                    62:5e:95:37:4d:bf:a7:2c:24:f6:ba:c6:66:5a:e4:
                    51:43:2f:ca:8e:88:92:86:8b:67:4b:6a:8b:6a:f0:
                    8f:e3:b6:d5:93:6d:98:7c:a7:39:2f:81:df:22:6f:
                    58:f6:82:c5:8a:48:78:52:16:dd:bd:8a:58:0b:f6:
                    6a:cf:0a:55:11:9e:eb:9d:95:6e:98:3b:79:50:97:
                    d1:cf:ad:0b:b3:cf:68:9c:22:07:c2:d4:f3:17:4c:
                    07:3c:17:0a:4a:fd:69:43:83:12:4a:3f:fc:90:21:
                    a7:15:76:fe:f8:61:38:dc:d5:12:e0:e9:02:23:f6:
                    23:e7:9a:53:53:34:c1:52:84:f0:a0:13:6a:99:1b:
                    46:35:f8:ba:f6:06:e9:68:44:13:ae:ae:34:57:cb:
                    44:eb:6a:4c:99:ca:64:77:1a:e5:2b:05:27:d5:61:
                    e1:76:a9:72:3b:b1:e9:1d:c5:65:34:8d:da:19:6c:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BD:48:FC:73:6D:C4:FD:19:BB:2D:08:11:A1:65:FE:5C:BD:0F:94
            X509v3 Authority Key Identifier:
                keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:30:98:20:46:94:ac:98:e0:d7:a4:a0:d5:0b:07:25:fa:
         68:e6:ec:ca:00:54:94:80:2a:76:6c:cb:ad:33:83:1d:90:28:
         04:2f:de:ae:9d:2b:dc:d6:1d:14:bb:8d:94:99:11:cc:da:0f:
         39:6c:82:65:0f:64:77:05:ec:0a:d6:d4:08:79:71:63:94:fd:
         16:7a:18:ee:4a:d5:66:76:9e:11:42:59:6a:a8:61:f2:6d:25:
         c1:0f:76:99:04:ff:a1:07:2d:1e:b4:db:7e:06:b0:de:eb:f7:
         d5:33:bc:82:36:54:40:cc:19:ad:33:b4:da:8c:43:4e:0e:58:
         ea:0e:9e:9d:b0:57:00:70:9a:5a:ba:c3:3a:62:60:5e:0b:82:
         8a:04:68:9b:fb:94:06:5c:ad:e6:6d:26:c0:28:b4:ee:62:35:
         fc:7a:58:3c:c9:90:0b:27:ef:c2:b5:1b:ba:fb:6c:a8:7f:88:
         1d:dd:ae:dc:b7:32:92:df:1b:e6:c1:87:2d:6f:e5:0b:b7:a9:
         d9:5c:ad:4e:e5:e3:cf:3d:4c:26:ba:4a:f7:82:c6:1f:ae:d7:
         7a:62:95:f9:09:1f:aa:75:6f:b0:ae:b5:8e:8b:2d:b0:fa:aa:
         a5:51:02:1d:77:7b:e3:e5:76:e8:3a:ad:3a:c5:9b:a9:25:04:
         25:80:db:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:00:18 2026 by rpki-client