Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File:                     T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier:          XR+na50Ra5Yo8DDkTXUnd3rdHgXAxDryMW0miA2i4HA=
Subject key identifier:   54:AE:F2:88:09:4F:32:D4:7A:A2:08:BF:7B:B0:6F:92:AD:6D:B8:CC
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       047B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number:          0463
Signing time:             Mon 27 Jul 2026 01:12:48 +0000
Manifest this update:     Mon 27 Jul 2026 01:12:48 +0000
Manifest next update:     Mon 03 Aug 2026 01:12:48 +0000
Files and hashes:         1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: v3ZNHzF2WNTY6MXZfVWMC8YpBKOAm5hB1kPvvt87v44=)
                          2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: zhGf6vgm0C3GTje/jua3UnPl3jt39EY1BOnME5mb/HE=)
                          3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: S393tIRXjqwIgNjaze8iQkcL22A9fRb/vcetFTNN4As=)
                          4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: dTIeQPJRfWnwh+dbEE9eI/CeKDdf7lQeG6UlGPB4vHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
                          rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: Jul 27 01:12:48 2026 GMT
            Not After : Aug  3 01:12:48 2026 GMT
        Subject: CN=6a66b090-e247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:9b:57:81:f5:5f:9e:4a:bc:13:4a:ff:e7:
                    57:e8:f5:55:b2:d7:bc:39:60:35:57:d7:1c:72:a1:
                    bb:18:11:94:45:18:c6:a9:78:27:8e:71:aa:73:be:
                    37:45:99:e8:a3:3a:47:71:57:0f:08:06:c9:41:9e:
                    61:a3:ff:35:95:9c:f0:91:d6:75:36:2f:1f:53:94:
                    f4:6b:2b:70:db:88:49:48:e2:03:0e:2e:99:29:73:
                    a9:d6:d4:f9:39:37:37:a2:11:37:9d:1a:8a:b0:6e:
                    b2:13:a5:d7:95:7a:f2:4e:84:01:d6:b8:b5:5d:e2:
                    41:b8:63:e5:2a:72:76:0d:00:55:9f:18:1b:a1:8e:
                    55:a1:3e:aa:f2:67:ae:af:46:a8:98:0c:35:bd:45:
                    a2:a0:8c:c4:b2:a7:d2:91:39:3a:59:2d:38:6f:91:
                    56:47:64:f2:9f:2a:b8:c8:c1:c2:2e:c5:a6:ee:c5:
                    dd:e7:d7:4c:57:02:e0:7b:4f:6b:96:47:a6:1f:39:
                    2f:7a:8f:84:6a:32:28:c2:0c:a7:7b:51:64:7c:03:
                    55:17:84:e1:d6:c3:ba:6f:10:df:7f:8f:7a:6d:87:
                    74:7f:48:72:3b:ba:8f:22:10:78:1a:04:79:3e:2f:
                    71:d3:33:40:95:9e:ca:4a:ca:ef:5b:da:fb:78:28:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AE:F2:88:09:4F:32:D4:7A:A2:08:BF:7B:B0:6F:92:AD:6D:B8:CC
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:89:a0:a9:dc:48:78:7c:32:82:78:1b:4b:8d:29:53:f1:17:
         2b:c4:94:28:b7:5b:b8:05:07:42:84:2d:8e:ee:62:0e:cf:0c:
         63:6a:b3:37:fe:13:23:2a:34:64:5a:47:ca:d3:2f:29:df:61:
         ab:6a:8c:e2:f2:04:a6:90:93:7f:89:d9:05:38:36:63:b6:50:
         fc:ab:62:d2:49:50:cb:c8:fd:00:90:05:ff:66:7e:c1:ec:7d:
         7e:f5:d4:85:26:b8:c5:49:57:59:42:1f:91:a0:14:48:4b:4c:
         4d:13:4f:14:d6:60:34:11:a7:1c:50:a4:95:fb:71:22:f3:85:
         b7:63:dc:40:84:99:35:59:f1:45:14:9c:7b:de:2b:e0:fe:96:
         81:2c:c8:f1:11:26:a1:88:33:0e:9d:82:3c:0a:4b:73:26:80:
         da:b5:81:d5:df:05:79:05:70:a4:60:2e:93:2f:95:15:16:c2:
         b0:5d:2d:6a:9e:04:22:84:4e:d1:2b:51:4b:f1:40:b4:3a:56:
         f4:2f:c7:e4:96:c4:91:13:f1:e1:71:d2:76:f0:bc:e8:e9:9d:
         be:c4:a6:80:be:35:54:7d:aa:f0:6e:5a:43:16:4a:41:dc:10:
         cd:88:82:a8:0c:a2:8f:55:64:97:0f:b1:12:0f:45:4a:b5:c2:
         41:4d:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:42 2026 by rpki-client