Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
File:                     45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json)
Hash identifier:          ne/dxkLj1hMLkTc82wIiUrWtua6GbIW/61EV54eynWQ=
Subject key identifier:   8A:68:1D:60:2C:83:48:E5:3C:EE:D3:F1:09:5C:A7:B9:5C:C9:DB:36
Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
Certificate issuer:       /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Certificate serial:       0FD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
Manifest number:          0FB9
Signing time:             Tue 28 Jul 2026 17:36:56 +0000
Manifest this update:     Tue 28 Jul 2026 17:36:55 +0000
Manifest next update:     Tue 04 Aug 2026 17:36:55 +0000
Files and hashes:         1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: IkEkxpu7/xPFlGt9DaOhm4Pf3pWp16GVgfmnaJiHsy4=)
                          2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: YLPPf/HdR9hRcUwDdkO/JGA4ct4Vk1HeBdLasWFLu9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl
                          rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4053 (0xfd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
        Validity
            Not Before: Jul 28 17:36:55 2026 GMT
            Not After : Aug  4 17:36:55 2026 GMT
        Subject: CN=6a68e8b8-f9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:5b:d3:99:c4:9f:47:9a:f2:ad:2f:7c:29:
                    dc:1a:ef:cc:1b:a5:af:9d:ed:15:28:08:a1:3c:0a:
                    97:98:28:a7:33:26:20:7f:78:ff:8c:c9:eb:8c:6f:
                    d8:0f:14:cc:73:b1:85:9a:6b:e3:4a:1a:d1:8a:f3:
                    57:b5:b9:2c:20:3d:a5:f6:46:8e:c9:cf:a3:5f:19:
                    cd:59:8e:73:58:b9:0c:33:1c:b2:53:3b:77:60:73:
                    45:1e:76:71:64:65:40:d7:81:06:0c:15:0f:80:e3:
                    9d:43:8d:94:12:cb:7c:2b:78:70:78:0f:0c:9c:f4:
                    23:9b:5f:ad:b7:48:fc:e5:dd:98:05:d2:fe:16:d6:
                    bd:a3:2f:e1:47:5f:97:59:e4:af:ba:3a:66:ec:ee:
                    0d:89:6e:e1:e4:fc:4a:a3:15:cc:a6:86:dd:a0:1d:
                    19:3f:d6:87:c3:1a:34:3d:e2:d2:a7:9e:25:71:64:
                    95:92:cc:96:11:6f:24:b3:5a:b5:7a:f3:bb:6e:cc:
                    78:d1:04:d7:5a:28:d8:0e:64:14:62:fc:bf:a7:a8:
                    f6:79:56:38:a0:0d:f3:f7:c1:b6:86:53:33:9b:43:
                    c6:7e:fa:c1:19:d5:99:e0:1a:d6:81:ba:66:ac:1f:
                    87:1a:09:87:c5:a8:e7:ea:3a:7b:fd:f8:e3:47:eb:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:68:1D:60:2C:83:48:E5:3C:EE:D3:F1:09:5C:A7:B9:5C:C9:DB:36
            X509v3 Authority Key Identifier:
                keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:15:ab:ec:1e:8f:2a:0e:93:1e:13:94:2c:a2:b0:bf:34:9e:
         97:39:5c:07:eb:83:8e:44:86:49:9d:f0:53:49:32:f1:f2:97:
         d5:85:5e:11:d9:42:1a:82:b4:90:b9:38:69:3e:6a:c6:8d:01:
         e1:09:a6:e9:86:0f:fb:0b:61:8f:2b:38:b7:22:7b:3c:b0:89:
         20:c5:bf:aa:af:f7:7d:9a:67:d8:79:90:e5:1e:04:be:17:b2:
         c1:bd:55:a7:9a:1f:c5:d9:d3:5b:14:ae:de:d4:54:25:74:71:
         9b:f2:47:f6:13:4f:e6:95:bf:73:18:5d:d5:66:c8:cd:83:54:
         bb:a9:ce:bb:1b:85:aa:70:5c:4b:ec:19:d3:4a:46:fe:33:db:
         f1:17:b7:54:c6:2f:d5:16:5b:15:33:eb:7b:be:43:e3:51:0b:
         e9:22:39:e5:fe:eb:31:a4:dc:4d:b6:ca:bd:70:bf:2c:7f:7e:
         f3:91:81:b0:14:6d:c3:33:c1:12:05:0c:4a:4e:5f:16:e3:00:
         e3:e0:79:d8:ed:20:99:8c:85:2c:b7:2b:bc:bf:d6:e9:1f:f2:
         0c:34:42:b2:34:4a:39:43:8b:67:2b:8d:38:1f:5d:e1:a3:c0:
         05:aa:dd:10:93:e3:68:69:89:fa:ca:13:e2:37:89:da:97:74:
         a9:ab:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:27 2026 by rpki-client