Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          zG04+O2Y3DtOmRz8IyQ+/UhEsmPMQTnTuhA8GMi7+nM=
Subject key identifier:   D2:DA:7B:39:02:78:B3:7B:D7:F1:3D:26:7C:35:B3:72:60:96:67:DF
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       0415
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          0408
Signing time:             Mon 27 Jul 2026 01:27:00 +0000
Manifest this update:     Mon 27 Jul 2026 01:27:00 +0000
Manifest next update:     Mon 03 Aug 2026 01:27:00 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: POAfb4aFA5hGFUEjmOodA/BSw5Q6a8ma5JovUdEohbI=)
                          2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g=)
                          3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: Jul 27 01:27:00 2026 GMT
            Not After : Aug  3 01:27:00 2026 GMT
        Subject: CN=6a66b3e4-37c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:4d:a5:5c:c4:b4:2d:1a:e7:a4:bc:84:c7:
                    ae:d9:00:15:d9:bb:16:a7:8a:55:bf:a8:ea:99:59:
                    2a:29:42:89:b6:be:8b:1f:c6:bb:3b:f1:45:0d:6d:
                    c7:9e:3b:3f:29:ae:c0:13:b1:0a:ff:1d:a1:a0:d1:
                    3b:2f:24:ec:ef:46:c4:aa:c8:c4:0e:78:17:e8:1b:
                    bc:d8:be:97:c6:5e:91:58:ac:63:8a:1e:27:ec:4d:
                    a6:5c:78:81:e5:ed:c5:3d:e9:a7:ed:d2:aa:50:0e:
                    71:5b:1e:c4:ce:86:77:bf:47:86:00:c2:47:75:09:
                    0b:b1:41:7c:68:f1:94:4c:5d:f1:21:47:ed:18:fe:
                    55:19:f8:9c:69:1f:43:ea:3c:75:e6:2f:6b:94:33:
                    97:bc:f2:ba:d7:24:19:12:12:81:1d:be:43:ed:48:
                    84:4b:7b:da:e6:b7:62:56:23:c8:a3:42:5a:bc:56:
                    a2:29:54:61:e7:c5:31:fc:ac:da:cf:31:9d:53:c3:
                    98:c4:5f:68:70:e6:fb:a9:3f:17:4b:0c:d8:bc:77:
                    f2:8a:b9:06:da:11:ff:a1:78:de:36:dc:0b:2d:bd:
                    fb:01:cc:e8:d3:66:b9:86:c7:c7:81:be:1d:92:cb:
                    fd:85:00:f8:7e:d1:4c:25:0d:1a:46:80:81:f0:a1:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DA:7B:39:02:78:B3:7B:D7:F1:3D:26:7C:35:B3:72:60:96:67:DF
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:90:85:78:cb:49:96:a8:de:5a:01:dd:09:75:49:dd:0b:ee:
         5f:20:87:ad:ae:57:7b:a3:0a:18:74:75:10:6f:1e:b6:2d:77:
         6c:7a:0a:c2:a5:8b:fc:58:42:4b:00:66:1a:89:90:a2:68:f3:
         0a:63:19:5a:e9:6d:db:99:d8:9c:b7:12:62:cf:58:6d:16:e5:
         e0:c0:aa:b3:fc:e9:e7:3d:db:20:8a:91:6f:3d:ee:04:b8:65:
         d3:8e:d7:41:69:02:9c:d9:17:91:a8:e9:18:6a:c8:be:9c:8e:
         04:13:75:c8:6d:76:83:5b:3e:10:cf:47:aa:8e:a5:4c:93:fd:
         fa:25:66:cc:37:a0:d3:78:ba:7b:ae:fd:a2:79:a0:85:77:88:
         99:70:40:f0:a9:ec:5a:3e:67:37:9e:c5:cf:c3:ff:6b:2a:b8:
         05:ba:11:e2:d7:a8:8f:09:69:c9:2a:17:d8:30:26:e6:39:a6:
         ec:f7:a5:37:32:86:bf:07:bd:a2:e5:a3:ad:c3:1c:9b:f7:fd:
         f6:0e:52:b7:b9:d0:15:55:4e:a8:a9:51:01:fb:36:de:ba:db:
         53:ab:f4:6a:c6:12:06:35:c7:95:1b:59:bb:f8:89:12:94:4d:
         2f:76:f3:39:31:27:30:ea:fc:e4:82:81:bc:2d:b6:39:64:9e:
         6b:7c:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:39 2026 by rpki-client