Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
File:                     r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json)
Hash identifier:          MTQzckqawJQ8v7GSRpbnWeerMYzNOT5K9yILtoToYqU=
Subject key identifier:   4A:A6:A2:49:D5:50:6F:F9:18:90:48:A8:41:37:D2:E8:00:13:36:62
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
Manifest number:          9D
Signing time:             Mon 27 Jul 2026 09:35:49 +0000
Manifest this update:     Mon 27 Jul 2026 09:35:48 +0000
Manifest next update:     Mon 03 Aug 2026 09:35:48 +0000
Files and hashes:         1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: 75Jnbdk1C48zBVu0XFnL6hB3uAlrZWFcL7rHR8OLahw=)
                          2: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: sHZWg+rU11rfUXJ4Q8l6qWY6glFT+3CM23A66tmDljo=)
                          3: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=)
                          4: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Jul 27 09:35:48 2026 GMT
            Not After : Aug  3 09:35:48 2026 GMT
        Subject: CN=6a672675-08d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:16:df:c0:02:19:a9:08:8a:09:ad:86:d6:
                    10:d8:d7:d5:82:59:e3:71:8b:c5:24:c4:bb:7c:1a:
                    f3:01:6a:fd:2b:81:5f:36:76:57:00:83:0a:9f:5c:
                    9c:39:2b:65:06:f7:d0:de:fe:64:05:9b:c8:f5:a6:
                    10:08:cc:97:f0:5c:3f:ea:6d:cd:c5:09:f4:6a:70:
                    7b:a8:3e:33:e7:b1:9d:e9:4c:7e:d5:9f:97:18:16:
                    b2:46:c6:92:e7:cd:ce:09:b2:0a:a0:df:3e:fb:3d:
                    e5:94:28:29:1e:a1:51:57:96:01:da:21:c0:49:e7:
                    9c:79:9f:d8:2a:d2:d1:c9:9e:75:47:aa:73:ac:76:
                    4b:fb:40:30:23:6f:92:10:83:27:63:be:b3:c1:8a:
                    7f:45:fd:73:bc:bb:ad:37:7e:9f:4c:ec:34:d9:56:
                    84:da:38:53:a6:a1:ca:1d:e1:6e:44:a9:47:2d:b3:
                    65:ec:3e:e3:4b:2f:b2:f3:d6:e1:e9:aa:bc:87:d5:
                    97:09:c4:47:7c:38:7b:6d:30:db:c9:95:dd:4f:e1:
                    4f:fa:6c:3f:41:7d:44:5e:2c:81:29:09:53:60:80:
                    4a:31:df:8f:d1:a9:c3:de:9e:70:56:cf:be:99:f2:
                    b8:d6:ac:ab:13:f3:79:91:4f:bd:86:53:f3:ab:46:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A6:A2:49:D5:50:6F:F9:18:90:48:A8:41:37:D2:E8:00:13:36:62
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:ce:9f:93:3b:c8:42:00:78:12:66:76:e8:4d:01:03:d6:
         54:b8:3f:a8:65:86:fe:5c:d6:c3:83:6b:ea:f8:0f:91:26:fe:
         c8:99:1c:ed:1b:a0:8f:ba:28:ca:c1:99:f2:c8:cc:4f:db:4c:
         24:90:df:d2:f1:8e:ec:1f:4c:6d:32:4d:66:d7:85:13:cf:b5:
         0a:b0:3f:45:75:60:75:de:f3:57:0a:a6:3c:f9:80:9f:0c:76:
         8d:83:96:63:8b:6d:4f:84:27:c5:b9:66:7e:96:8b:32:7b:86:
         17:92:7d:9c:21:db:59:b6:72:6d:5f:fc:42:a5:b9:45:9e:7f:
         77:19:02:bb:0e:13:8f:3d:2c:44:ba:a7:62:d7:70:8f:db:58:
         c7:be:32:57:87:81:2d:18:9b:83:0c:b0:f6:41:e0:0b:21:f7:
         f7:ea:52:04:7d:a6:84:d5:f2:0c:12:b2:ab:12:a2:95:0e:e9:
         45:bc:3d:42:ad:cb:e1:9c:6a:bb:70:15:74:4c:48:a6:7b:b0:
         02:4d:8e:1e:c8:57:59:fa:c0:2d:c3:db:4e:38:db:e3:97:e4:
         3d:df:d8:dd:58:66:4c:98:2e:1e:94:de:1a:9f:c0:db:05:35:
         66:7f:a5:81:81:cd:a7:2c:00:19:09:1b:7a:a9:fc:5c:58:d2:
         db:b8:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:01 2026 by rpki-client