Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
File:                     R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft (raw, json)
Hash identifier:          jsB7ulu6IJwpKdPlDfu2xdKaKnOEcKFYELuYfHZLcXU=
Subject key identifier:   33:04:57:5F:83:96:96:DF:CE:EA:31:D1:1F:66:75:06:96:D5:98:8E
Authority key identifier: 47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE
Certificate issuer:       /CN=A911F753/serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
Manifest number:          D1
Signing time:             Mon 27 Jul 2026 07:36:06 +0000
Manifest this update:     Mon 27 Jul 2026 07:36:06 +0000
Manifest next update:     Mon 03 Aug 2026 07:36:06 +0000
Files and hashes:         1: R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl (hash: YmoFwHNMHL2W5C+2h+hsTWVeh8xuqU/b47t/hQhmmWI=)
                          2: 5E34D78AB13A11F08347B23DC4F9AE02.roa (hash: hEV3QIXnEaDGVOjG8lakOoOcAFl9FNif0rrqcPqlt9A=)
                          3: qcc07JCDsl-DFQtqU_3ieLp0l8U.asa (hash: koSAb5CszD2Nprtx5s+V6/bWTMc+xWFqyKSINR8hLpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl
                          rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F753, serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
        Validity
            Not Before: Jul 27 07:36:06 2026 GMT
            Not After : Aug  3 07:36:06 2026 GMT
        Subject: CN=6a670a66-bf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:31:fe:5e:c7:37:66:c5:0f:8b:be:df:96:
                    24:04:47:2e:77:96:d1:9b:0b:9c:00:c6:c6:b7:c9:
                    1b:0c:7d:e7:89:ad:da:80:b4:b6:13:75:e4:71:3a:
                    ab:3e:b2:ca:40:b7:5d:c4:95:46:89:c5:d7:97:ca:
                    93:73:b7:04:94:65:8d:c1:bc:a7:4a:ef:37:3b:e3:
                    3d:62:16:87:47:9e:4f:2f:8f:64:5a:b0:90:59:42:
                    c0:a3:50:31:97:d9:b8:00:a7:5b:b7:85:ca:8d:95:
                    0f:94:11:bb:6a:46:7c:0c:75:55:0c:c3:5d:f5:b8:
                    b4:56:b4:71:b3:5f:fa:c1:4d:e4:5a:f9:61:4c:67:
                    b3:c4:56:25:07:3e:b8:01:eb:6e:31:0d:eb:4c:eb:
                    9f:88:9f:44:ba:d4:72:b3:f7:16:52:f7:d1:64:d5:
                    9b:ad:53:f2:83:ae:b8:26:b6:ee:61:3c:aa:c7:0b:
                    bf:9b:c9:01:e1:75:49:33:be:20:ee:9a:92:7c:ff:
                    2b:2e:c0:1d:34:08:dc:67:6f:50:5b:d9:26:0f:5c:
                    31:0d:22:a3:1f:8b:40:2b:f1:4c:f1:5f:f4:52:bd:
                    37:65:fc:bb:4e:9a:97:c2:92:8c:8b:4a:4d:ba:d9:
                    1b:a7:3c:60:f0:a8:c6:e2:4d:24:56:7d:27:60:34:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:04:57:5F:83:96:96:DF:CE:EA:31:D1:1F:66:75:06:96:D5:98:8E
            X509v3 Authority Key Identifier:
                keyid:47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:d7:12:cd:60:b1:dc:8a:0d:03:99:e3:5a:ef:b9:91:51:
         aa:c8:93:c5:30:a1:c3:6b:af:9f:09:7f:5e:b1:f5:0a:70:08:
         a7:27:29:60:1d:86:b4:0d:89:df:39:b3:be:a7:6d:c3:91:3e:
         d3:1a:46:4d:69:ca:16:7d:06:e0:ea:7e:0d:c5:62:76:25:53:
         bb:d3:95:32:4a:62:1d:3c:61:7c:65:8d:09:9d:97:5d:1f:5e:
         e9:35:cc:0d:44:d6:ba:e6:ab:3d:18:95:db:15:17:a9:cb:2a:
         7c:41:eb:15:2c:61:f8:72:80:1c:04:14:06:ef:c5:e1:1e:9e:
         30:1a:7e:f4:ea:f3:4d:b2:ae:dc:da:52:d4:e3:40:f5:54:67:
         b4:aa:42:b6:98:c4:d0:fd:27:2f:1d:47:ed:e3:1c:b6:41:5a:
         3e:39:13:6b:f1:59:28:ec:ed:00:ac:79:d8:42:38:6f:63:25:
         6f:ea:83:d1:4f:6a:75:f4:97:27:cd:6d:28:7a:00:12:c2:ad:
         d8:85:f5:1f:7e:a7:91:e8:47:30:d8:e9:b6:4c:48:6d:2d:77:
         da:20:1f:21:3b:1f:87:ab:c4:57:b9:4a:f1:99:dd:82:04:b2:
         8d:06:02:65:4a:84:cf:0c:d2:17:4d:46:5f:e9:96:93:9f:7d:
         89:e0:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:34 2026 by rpki-client