Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
File:                     a0-8524QyfbwCQHlAC-OEPPpr38.mft (raw, json)
Hash identifier:          7XJ5jrOIxnK8dAjfesrK7z8SJe5/PGmQ/3o6K0yPtso=
Subject key identifier:   24:2C:B5:4B:49:3D:45:B3:22:0A:94:93:6F:71:59:6C:28:AB:12:07
Authority key identifier: 6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F
Certificate issuer:       /CN=A912AEAB/serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
Manifest number:          4B
Signing time:             Mon 27 Jul 2026 10:41:41 +0000
Manifest this update:     Mon 27 Jul 2026 10:41:40 +0000
Manifest next update:     Mon 03 Aug 2026 10:41:40 +0000
Files and hashes:         1: a0-8524QyfbwCQHlAC-OEPPpr38.crl (hash: el2B0DwoCgLQ9Z7KDzkaGGiNf5p6xfl2t8d+7VajeGg=)
                          2: 05CB75D01B4E11F190BF0D05243D8C67.roa (hash: lrrFG4FOYK4jJ7hdWejojL07VsNHzzAXyxtZaYMmJy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl
                          rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEAB, serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
        Validity
            Not Before: Jul 27 10:41:40 2026 GMT
            Not After : Aug  3 10:41:40 2026 GMT
        Subject: CN=6a6735e5-fe30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:f9:f4:7b:51:0d:fc:63:a7:1c:46:7a:85:
                    b4:79:e4:e9:ff:89:76:e3:a7:6a:64:d4:d1:08:5f:
                    e8:d6:b2:db:33:bf:4d:29:ef:dc:11:fb:1d:37:1b:
                    ad:f6:83:f2:97:39:c5:a8:4d:2d:f5:0f:51:46:d1:
                    fe:eb:c2:b2:5c:ba:36:31:78:82:f6:84:4b:1f:a4:
                    a7:73:98:97:50:d1:9a:17:ac:61:be:87:f2:f3:bc:
                    38:2c:3d:ba:30:d3:ff:f5:df:bc:03:b4:a7:8b:23:
                    b4:96:d6:80:34:aa:27:9e:31:a8:51:1c:0c:bf:fc:
                    f5:ea:af:2d:f6:a6:03:cb:d4:0b:1e:1d:1b:96:a0:
                    ef:b4:af:d2:62:de:d9:2f:15:31:a3:8c:c1:e4:6b:
                    92:b9:29:dd:80:cf:d3:48:9b:3f:a2:2f:e7:29:21:
                    d7:3b:72:da:cc:43:1e:73:06:68:29:86:10:07:f2:
                    13:a3:09:0a:31:ce:2c:d4:65:9d:49:79:16:6f:2b:
                    1b:b8:6d:45:3a:d5:91:85:a5:4e:38:68:b4:ed:2c:
                    c8:06:a6:f8:4b:ba:33:c6:16:e0:aa:bb:97:db:69:
                    8d:9d:5c:bd:a6:54:45:71:de:4e:85:6a:96:ac:1c:
                    53:f8:78:dc:90:e7:12:c2:af:0b:ec:4e:4a:e4:d4:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2C:B5:4B:49:3D:45:B3:22:0A:94:93:6F:71:59:6C:28:AB:12:07
            X509v3 Authority Key Identifier:
                keyid:6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:66:2d:ae:bd:7e:53:57:ca:1a:d3:67:99:7c:c3:fa:6d:94:
         a0:da:3e:d4:b9:13:f7:3a:4a:c0:fc:51:3d:8c:02:45:d0:32:
         65:ad:20:83:22:82:11:62:0f:bc:d7:06:e5:3f:c4:9c:23:7d:
         40:ef:b2:73:9b:a7:b6:a3:65:78:85:51:af:8f:71:ae:e6:96:
         d6:57:80:0a:ff:31:d2:88:7d:90:66:f3:b7:59:d9:a7:75:17:
         02:56:87:76:ae:8c:56:1b:e6:e5:25:5a:e4:8c:6d:c0:22:e6:
         1d:0c:f6:53:35:9f:67:cd:f5:b5:35:ca:a6:e9:b3:a1:14:57:
         e8:ad:a5:40:74:f6:73:3d:58:22:b0:35:fe:ce:a2:c6:5d:2c:
         49:cb:6d:25:1c:4f:18:80:26:fd:77:e7:7d:10:68:3a:7e:4b:
         7e:bf:0e:60:16:bb:6e:48:6e:f4:f3:be:2a:4a:11:cf:0d:79:
         73:1c:c3:fb:1c:84:f6:91:6d:9e:d0:a0:2e:e5:19:c3:5b:9f:
         f4:aa:5f:ed:e1:52:ef:cd:0c:98:52:4e:27:2a:e4:68:00:54:
         85:09:3f:2c:c9:4c:01:c4:39:80:0e:47:43:61:82:b0:3e:88:
         16:86:a1:fa:0c:d6:98:c4:9b:da:0e:5d:c1:5d:a1:ad:95:4a:
         87:d2:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:40 2026 by rpki-client