Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
File:                     bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json)
Hash identifier:          h1Zzr33Uk/lc2nNqi1tSI9GFOJcJtQ059X8+D3auep0=
Subject key identifier:   45:1C:9D:52:34:ED:E4:23:57:39:C6:23:D3:2A:9A:ED:D4:6F:E9:DD
Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
Certificate issuer:       /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
Manifest number:          C2
Signing time:             Mon 27 Jul 2026 09:01:45 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:44 +0000
Manifest next update:     Mon 03 Aug 2026 09:01:44 +0000
Files and hashes:         1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: YiXVVNXakeOCyNZwkMLvqBcSJ/pyraw5KDqAD5dPV9E=)
                          2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: f1UUKk9+4mpBrjo6aq4pvsFyFPqGlKiCEdavWTpQG0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
                          rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
        Validity
            Not Before: Jul 27 09:01:44 2026 GMT
            Not After : Aug  3 09:01:44 2026 GMT
        Subject: CN=6a671e79-11cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:11:2a:26:af:02:09:ee:4d:62:fe:c7:c0:
                    8b:7c:3c:67:7b:95:f7:81:2e:87:23:e4:72:08:ac:
                    bc:bb:a1:6d:b5:fd:a7:c8:4c:02:b9:ea:9f:d3:88:
                    24:16:cb:aa:06:c3:bb:a1:e6:a0:0b:4a:8f:69:19:
                    5f:1b:ef:49:96:f3:66:59:b4:f7:be:66:40:c9:d0:
                    7c:09:06:a0:9c:69:7b:c0:54:ec:44:c7:3b:bf:b0:
                    df:a3:2a:03:12:54:45:7c:29:9d:34:f9:dd:8c:91:
                    d1:ad:66:e5:ee:78:f8:ff:6a:6d:30:2d:c8:21:67:
                    0b:6b:e2:8f:df:da:61:14:45:69:fe:19:bc:f1:42:
                    b8:ad:b5:ec:cf:65:f3:d8:62:65:e5:96:12:62:98:
                    10:b1:c7:00:e8:a8:09:8a:f8:e8:aa:3f:83:93:63:
                    f3:60:d1:64:37:25:f4:25:f2:98:19:67:4a:eb:b5:
                    b6:4f:99:68:d7:b3:45:0f:c8:a1:29:60:29:24:dc:
                    0a:0d:4e:bc:28:fb:eb:de:14:73:b1:16:b7:81:ca:
                    e3:91:f3:33:ba:d2:7f:a6:13:ed:5d:c4:bc:9a:b6:
                    a5:17:45:e1:b0:3c:cd:64:e3:36:f3:ae:5d:b4:2e:
                    d3:89:48:c8:1b:cd:9e:70:f6:65:34:3e:c5:4a:14:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1C:9D:52:34:ED:E4:23:57:39:C6:23:D3:2A:9A:ED:D4:6F:E9:DD
            X509v3 Authority Key Identifier:
                keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7c:6d:3f:19:1a:d6:80:aa:30:3b:77:7b:6f:dd:9d:9a:92:
         35:8e:02:6d:ec:7b:48:90:62:5b:5e:d7:c3:c5:cc:a0:ea:ec:
         47:b9:6c:17:10:8e:33:ab:5b:81:14:86:fb:bb:54:15:42:f2:
         da:43:8c:01:0b:6c:8e:f9:ab:4c:42:fd:c5:80:0f:5f:8f:b3:
         ca:42:3b:d4:2f:42:8b:f3:37:ce:20:8c:87:76:07:1a:c0:ee:
         56:41:96:cd:88:97:9b:b8:b1:b9:36:af:61:31:b5:a3:51:a1:
         58:a9:ce:5e:04:f6:9d:1f:99:88:7d:f9:68:17:c9:92:92:9c:
         f9:02:69:63:e1:0e:4c:25:11:e7:5f:2a:5d:7b:cf:f5:34:8f:
         6f:3c:99:60:d9:b1:06:13:85:96:6c:cb:ef:38:4a:89:ef:58:
         db:cf:9e:a4:98:b9:a2:46:5a:72:72:25:10:1b:c1:ca:98:05:
         39:60:57:0c:d5:4c:88:71:86:f8:a5:5b:40:ed:50:ce:6f:10:
         44:83:7f:7f:c6:98:c9:26:d9:2c:84:f8:21:02:ce:02:24:c7:
         9c:4d:a2:b9:b3:7c:a1:95:c7:bc:a1:d8:1b:99:43:d6:fb:2b:
         75:7e:56:f8:10:48:87:74:8e:1d:37:44:36:38:22:1c:02:95:
         46:25:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:50 2026 by rpki-client