Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
File:                     A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json)
Hash identifier:          MUNwPIHisSR/YB1Rlqss8y/zOVEDD8O7xz9Y3Wgy3U0=
Subject key identifier:   8C:41:21:54:AD:95:AA:4D:E2:6D:DB:50:1D:5B:B7:AE:91:2F:9E:6B
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Certificate issuer:       /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial:       3574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
Manifest number:          3567
Signing time:             Tue 28 Jul 2026 15:12:32 +0000
Manifest this update:     Tue 28 Jul 2026 15:12:31 +0000
Manifest next update:     Tue 04 Aug 2026 15:12:31 +0000
Files and hashes:         1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: rBFka8ldul4AERZl7Txh23NmqjlzzXtJyEHuxwcgvps=)
                          2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: qfvcgZVUflsdf2vdMxE8qxvPQTjGmtT1vRqCh+Z14oM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
                          rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13684 (0x3574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
        Validity
            Not Before: Jul 28 15:12:31 2026 GMT
            Not After : Aug  4 15:12:31 2026 GMT
        Subject: CN=6a68c6e0-208f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:10:8f:e1:28:d1:7f:86:5c:1b:da:17:57:
                    f4:c8:5f:22:e5:6b:03:0d:df:1c:a5:31:ba:de:87:
                    fa:49:c5:60:59:df:f2:c8:06:c4:0a:f2:3d:27:e2:
                    27:0d:2e:41:69:36:72:a8:c1:80:66:46:76:4c:06:
                    7f:93:26:57:15:e6:a6:10:d2:1d:f1:a3:fa:7d:ac:
                    3d:c1:d5:c0:4a:d1:98:b5:a6:c8:7d:89:de:63:e4:
                    f0:29:95:f1:cc:59:57:25:04:36:dc:21:2f:ea:81:
                    8d:07:81:fb:6c:6a:50:fb:d8:9b:78:f5:23:10:c6:
                    ee:b0:b9:2d:2f:88:c3:8c:f4:92:1a:cd:d0:61:a6:
                    b0:97:0a:1c:26:d6:b7:21:21:5d:b3:43:f7:c8:81:
                    f2:c5:07:03:bf:51:06:84:59:7d:5e:9d:8d:6f:da:
                    e3:c6:37:54:66:98:ef:d0:6a:03:07:81:bf:b6:04:
                    be:68:61:73:43:06:5c:17:72:bb:05:0d:dd:eb:03:
                    1c:f1:5e:04:2e:ea:b7:de:79:be:05:c4:23:1c:84:
                    8c:65:f5:e0:58:08:3f:3f:f8:61:5a:3f:12:f2:f6:
                    4d:ce:09:2e:2f:f9:c4:9c:37:62:5d:bc:2f:20:af:
                    69:87:97:18:64:a8:bb:ff:fc:63:96:7c:ea:1e:e0:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:41:21:54:AD:95:AA:4D:E2:6D:DB:50:1D:5B:B7:AE:91:2F:9E:6B
            X509v3 Authority Key Identifier:
                keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:66:e1:1d:48:ae:31:ed:ea:32:57:0f:7c:44:d5:c2:52:a9:
         bd:4b:e5:ec:93:56:b4:95:37:ce:81:02:95:49:91:cc:d9:dd:
         41:a1:f2:54:f6:f1:7d:e8:d2:37:22:a4:19:45:1f:41:b9:ff:
         70:1d:79:cb:da:60:b4:87:84:a5:c2:75:bb:4e:bf:c5:f3:c3:
         c2:55:35:f6:ee:0d:03:f8:d3:3e:e2:e9:f7:d4:8e:3d:a7:a1:
         5e:a8:eb:ce:49:cc:f0:2e:49:22:58:7b:67:ed:fd:82:3b:82:
         65:4a:99:37:c7:c3:eb:f2:81:56:a1:e2:0c:88:0d:10:69:fd:
         c0:1b:5a:44:ef:6b:81:57:d0:f5:d7:57:ca:d1:e3:38:bb:1e:
         5d:ca:21:85:a2:ba:97:6f:af:4e:d3:67:f2:d4:fa:fa:5c:89:
         17:73:61:2c:aa:ca:97:27:e7:90:6f:d9:8d:b9:9f:03:11:cb:
         b3:1a:74:51:ed:2f:06:8a:17:46:d0:f7:21:76:a9:ff:e1:38:
         02:4e:48:70:34:62:8d:71:ab:d6:ca:36:cc:8c:b2:6f:7a:48:
         7b:8f:97:e0:54:0b:b3:d6:06:5a:62:05:26:1d:58:9e:52:bc:
         6d:29:63:f7:e3:6d:b9:32:82:36:14:ce:9a:18:1c:9e:63:eb:
         2a:ce:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:40 2026 by rpki-client