Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
File:                     -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json)
Hash identifier:          /UMw0y/KN29gi5/48tbHZrt9NCcG49ggW8Y/1RQe9AA=
Subject key identifier:   8D:88:49:4B:AC:CD:78:49:AA:EC:AD:5A:4C:8E:2E:4C:72:5C:2E:07
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Certificate issuer:       /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial:       0AFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
Manifest number:          0AF9
Signing time:             Sat 04 Jul 2026 19:28:25 +0000
Manifest this update:     Sat 04 Jul 2026 19:28:24 +0000
Manifest next update:     Sat 11 Jul 2026 19:28:24 +0000
Files and hashes:         1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: tljek2JF47+oxaCPzml0hSeOtxnRjUkgFAx6l12QA10=)
                          2: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: h3ulFk49Rm6PN3v20dTyyirREDU7f9uOVa0xWMwIDh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
                          rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 19:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
        Validity
            Not Before: Jul  4 19:28:24 2026 GMT
            Not After : Jul 11 19:28:24 2026 GMT
        Subject: CN=6a495ed9-b337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:81:2f:3e:8c:88:17:48:f1:0f:a2:9d:9f:
                    61:51:ef:9b:e1:97:b3:a4:2b:80:82:4d:27:19:15:
                    98:53:f8:30:46:e2:ec:07:bf:ac:20:6e:6a:cf:6a:
                    93:fa:66:0e:a0:9f:49:1f:0f:8b:2b:8a:47:1b:cb:
                    2b:8f:c3:5d:ce:ef:57:92:d7:b7:a5:e6:44:27:8b:
                    82:6f:b4:a8:ac:c9:08:bd:e6:79:f8:62:27:c3:6d:
                    46:44:86:3c:88:23:73:4b:a7:44:f0:e4:18:4e:63:
                    d4:d2:c3:97:8f:3e:8a:26:a2:6e:7b:4a:0a:7d:8e:
                    45:c1:91:e5:a5:70:c2:f7:4d:2c:3d:b3:f2:42:b2:
                    72:03:fc:78:d0:2e:d7:4b:72:c5:a0:3a:b0:c9:5c:
                    02:8c:53:04:c8:73:35:ea:e5:72:ee:c6:1d:1f:7c:
                    d1:eb:09:bf:b4:40:ac:2c:48:94:3c:e0:1e:92:da:
                    18:72:ab:05:69:ad:83:86:f5:5b:a1:f2:92:4a:83:
                    3a:47:84:98:29:16:e4:2b:0d:2e:8d:cc:a2:43:70:
                    80:cd:d8:8e:6b:4d:c2:d7:9a:3e:8f:14:37:1e:04:
                    38:c0:2f:f1:aa:13:06:74:d9:b3:44:55:a3:40:51:
                    0b:34:9c:ed:bd:4b:57:fc:f2:4b:df:5c:d1:c6:40:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:88:49:4B:AC:CD:78:49:AA:EC:AD:5A:4C:8E:2E:4C:72:5C:2E:07
            X509v3 Authority Key Identifier:
                keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:38:7c:02:b8:f1:ed:12:be:d3:f3:33:bb:ef:48:a2:83:3c:
         5c:6f:da:66:88:43:53:f3:16:8b:7b:18:38:4a:70:a8:c2:96:
         2a:96:0d:0e:0f:36:e1:b6:66:73:ea:72:1c:ac:14:10:98:9e:
         3f:f0:ac:62:40:f6:5d:b7:c7:01:2f:95:0b:2a:3a:79:ee:9a:
         6c:b0:41:79:dc:70:2b:f7:1a:de:14:7e:c7:74:14:f5:d5:b4:
         84:33:fd:e0:7e:1e:ea:22:1a:dc:fa:02:c9:b2:6c:28:5b:69:
         ae:13:01:b5:3e:13:50:30:b0:f9:e7:7d:f7:6d:95:d7:bd:ba:
         8c:32:ee:1d:43:e2:8c:5e:bd:c0:f3:1b:fd:35:08:46:8f:4d:
         70:c8:1d:52:5c:50:0b:ad:18:38:9a:77:88:2d:21:cf:0e:ae:
         9d:42:40:13:32:dd:04:ab:a0:20:de:1e:6c:85:ea:20:d9:bc:
         1e:d0:39:f1:d8:a3:57:6d:14:01:89:f3:c7:7d:db:48:dd:34:
         8b:e7:79:39:87:b2:e8:16:c2:a9:d1:57:04:9e:68:fa:d2:26:
         09:ea:bf:b7:cf:e5:f0:10:87:7a:ae:eb:38:0e:47:1d:64:26:
         67:99:e7:af:13:f4:1e:9a:0e:7f:a3:4c:10:66:44:60:ae:a4:
         aa:59:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:32:59 2026 by rpki-client