Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
File:                     c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json)
Hash identifier:          DJWN/nt8w3pRt5tAq39MAQdaR3v6eq4zAF0VqAEghY8=
Subject key identifier:   EE:01:56:2E:78:38:03:0A:4B:2D:A5:0A:94:CC:A2:59:9F:D0:AA:CC
Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
Certificate issuer:       /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Certificate serial:       0ACF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
Manifest number:          0AA3
Signing time:             Tue 28 Jul 2026 19:52:51 +0000
Manifest this update:     Tue 28 Jul 2026 19:52:51 +0000
Manifest next update:     Tue 04 Aug 2026 19:52:51 +0000
Files and hashes:         1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: ju+cfpPpyKayfFVfOQnmzg7XWakoVlGhO9nbK/r+Xo8=)
                          2: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: GltJ8ldfOd4MALKW5R9sn4CvSE9nA9cuV/EopB0f2fc=)
                          3: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: G/h6ay+lVDrxmj5QAHf9M00uXSgMYuBFxLTXw3Ioa1o=)
                          4: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: bk/7/6niDOy4Wgez/WOfJOA9hAaC3ZIe5csnBCnmc2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
                          rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2767 (0xacf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
        Validity
            Not Before: Jul 28 19:52:51 2026 GMT
            Not After : Aug  4 19:52:51 2026 GMT
        Subject: CN=6a690893-e258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:8d:c3:aa:a6:99:b5:49:1b:f4:6e:81:f6:
                    85:fa:54:83:71:0b:aa:a9:30:9c:57:97:e0:2b:68:
                    46:37:09:3c:e9:1e:9b:9f:5c:85:8d:07:47:dd:ba:
                    e2:e5:5e:b4:84:33:ec:1c:2a:19:32:2c:6a:3d:64:
                    49:33:c1:d6:f6:6e:45:b6:94:67:41:df:4b:21:66:
                    86:8c:e4:e8:1a:88:79:7f:b8:c3:86:fb:56:e9:aa:
                    b9:06:ae:43:6c:d6:8a:49:bb:46:f1:60:42:ee:5a:
                    2b:e0:72:68:fb:4d:c5:5a:8b:c1:8a:8f:4d:61:04:
                    12:a9:dd:ce:31:25:a2:61:52:16:dc:5a:fa:4a:92:
                    bf:8d:94:1f:9f:a2:40:bb:9e:80:a2:c6:11:96:f3:
                    bb:d2:5c:91:0f:7d:51:6b:04:68:ed:c1:43:0b:fa:
                    80:9b:07:5e:76:d9:b9:b2:8f:ea:8c:1e:50:3b:1d:
                    7c:b5:57:e3:cf:45:60:be:32:40:b3:44:90:5d:cb:
                    37:3c:57:34:64:2b:57:72:47:3b:a8:ec:1f:76:85:
                    ee:d2:43:cb:f6:39:ab:fa:90:db:8f:4e:0c:1b:e0:
                    2b:f6:a6:f4:c3:ed:13:49:a2:51:cc:e0:c1:9c:9e:
                    8c:99:af:0d:b8:0a:a9:d7:c4:6f:4e:86:b2:4e:62:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:01:56:2E:78:38:03:0A:4B:2D:A5:0A:94:CC:A2:59:9F:D0:AA:CC
            X509v3 Authority Key Identifier:
                keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:ea:03:b7:2f:64:fd:bf:90:11:7f:37:13:ff:90:b3:fd:
         89:38:52:4a:a9:a9:85:d7:ac:ff:c6:0e:e8:ad:2a:c1:01:4e:
         93:ee:ad:72:f6:6e:59:87:fd:38:6c:2a:4b:28:c4:e9:1a:ad:
         80:38:17:76:0e:2c:5f:7a:63:9c:d4:17:2d:69:22:cc:dc:33:
         b3:5e:74:12:0e:63:91:7f:a3:35:eb:10:5a:94:d8:ec:47:f4:
         dd:6a:10:b4:83:fd:11:04:6c:4f:5b:1a:d6:1d:c2:94:28:3b:
         bf:77:a6:5a:06:fa:23:4e:c4:6d:b8:76:19:05:30:25:8a:21:
         7b:0c:ed:ed:b3:0b:36:33:d9:f1:10:08:cd:e8:c2:14:cb:58:
         65:48:a4:14:e2:70:5c:bf:a3:b0:4a:13:d7:f1:a9:30:ed:4b:
         2e:82:0f:a4:b4:76:83:cf:74:b8:5f:b4:da:4c:8f:f4:07:d7:
         42:56:4e:45:d0:7c:e9:fd:42:cd:dc:f8:87:a9:3a:53:3a:b0:
         94:1a:01:b0:83:72:00:c4:0d:94:39:47:d3:25:46:cb:7e:7d:
         64:b2:c8:7f:a5:31:e8:e2:bd:bf:1c:52:df:2b:ae:5f:a6:55:
         64:c4:92:bd:5b:a1:a7:b5:e7:ea:c8:12:20:f6:b6:92:90:7d:
         a1:94:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:38 2026 by rpki-client