Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File:                     feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier:          uSambCH2jATiX9+zMFkMTPuufCriwuenCRJgkTJTfrk=
Subject key identifier:   F9:E1:3A:B6:48:44:1E:91:BF:CB:FA:C8:F9:EC:76:AF:E8:74:58:56
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer:       /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number:          01C1
Signing time:             Mon 27 Jul 2026 01:44:47 +0000
Manifest this update:     Mon 27 Jul 2026 01:44:47 +0000
Manifest next update:     Mon 03 Aug 2026 01:44:47 +0000
Files and hashes:         1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: a+F/jHmiftsoNKVS2ctpLdEJ2WnxRrhjgmurXF4oBd0=)
                          2: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: 10jgAa/oO9QvVhmXa5ryYi3X/Q5r2nOHe8sXNKlu0sI=)
                          3: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: 2z+iQiOun9JI4f1KdKp9Mav00oLerc8hIDbuecZ9Avw=)
                          4: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: 9ZQJr8Gl5XR1HqKf3vTUBCTUhwF96wb5DS0J+eswdL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
        Validity
            Not Before: Jul 27 01:44:47 2026 GMT
            Not After : Aug  3 01:44:47 2026 GMT
        Subject: CN=6a66b80f-1ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:19:6c:9b:a9:91:46:2f:f9:1d:29:b8:d6:
                    90:af:a5:71:4d:df:76:f9:91:d7:2b:3e:1c:15:9c:
                    a1:08:c9:45:d2:6a:51:16:62:1a:f2:ca:34:4d:bd:
                    09:e0:90:2f:b1:e7:d9:b2:cf:a3:5c:ea:c4:0c:40:
                    8f:39:35:ed:e8:93:63:fe:dc:00:7c:14:67:5d:ac:
                    ad:04:a1:8e:95:09:ad:b3:26:84:37:3d:d5:4b:be:
                    17:ef:40:b6:ff:a2:bb:92:03:c4:e3:db:54:2b:58:
                    e7:a2:cd:31:7d:f1:ba:66:01:b1:9f:d1:f4:b4:38:
                    6d:fe:8f:c4:d7:82:3f:62:83:07:ed:15:36:32:0e:
                    4b:7c:e9:64:c3:68:0d:68:34:18:c0:bf:91:6b:35:
                    b8:0f:bd:a4:13:66:f5:ed:04:a9:cd:44:4b:b4:4e:
                    51:96:c7:4c:32:03:5c:9e:61:c9:73:34:02:63:08:
                    1b:1c:f9:5f:90:53:9b:69:85:08:54:38:be:13:5f:
                    af:38:7f:04:b2:d2:04:1f:df:b7:5b:6e:55:67:cb:
                    07:e6:17:05:a7:2a:a4:de:16:ba:5d:3c:e2:7c:35:
                    50:54:99:ce:d4:8e:3b:e7:5b:24:e4:ee:3f:21:4c:
                    8d:ba:c7:ab:72:f4:d0:86:34:cf:9a:6e:63:79:91:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E1:3A:B6:48:44:1E:91:BF:CB:FA:C8:F9:EC:76:AF:E8:74:58:56
            X509v3 Authority Key Identifier:
                keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:32:83:a9:c0:3b:fb:1c:5c:9b:44:c2:fc:88:fb:40:fc:c0:
         70:7c:4a:71:c8:fe:44:4f:2d:ba:e1:af:a1:bf:6c:75:fb:6b:
         25:51:42:b4:4d:97:b1:f5:3c:10:f7:ee:60:d9:5b:9f:ec:b6:
         ab:25:36:43:55:a8:81:d4:11:50:9b:09:57:97:89:48:43:c2:
         46:1f:ee:2b:4f:dc:55:fc:a4:8c:7a:b6:a6:31:c1:05:84:55:
         61:70:9b:79:cc:38:74:d7:23:3d:27:2e:fb:14:45:9f:39:57:
         30:4b:9c:04:0c:08:60:21:fa:b6:65:d2:f1:b0:c4:2d:98:68:
         5e:8e:80:d7:9c:15:e1:b0:3c:4a:cb:2d:0f:21:50:74:94:9d:
         28:ff:c4:88:ba:56:32:e5:dd:a4:38:51:79:22:1e:61:b3:09:
         3f:4a:82:82:a0:d8:ea:bf:01:c2:b4:bb:1d:fd:9a:e5:d9:5a:
         58:f8:a5:fd:5d:fa:89:92:f3:55:ba:ea:01:72:e2:92:17:f8:
         b1:63:6f:36:54:c3:dc:92:53:8e:a0:1b:08:de:b6:f4:94:16:
         6c:94:71:b4:85:12:c7:6f:0a:ec:58:b6:87:34:74:3e:bf:76:
         f8:38:24:ec:d9:a2:1b:fd:7f:bf:a9:9f:69:16:66:9a:88:6e:
         aa:71:d5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:51 2026 by rpki-client