Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
File:                     1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json)
Hash identifier:          X0ZsUTn/QAnaJWJLpvmEfU1j2vbzW9sFbTJZGOhJVVc=
Subject key identifier:   E7:05:43:B5:8B:A8:4B:B2:EA:DB:DA:82:5E:41:8D:85:58:F1:96:A3
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Certificate issuer:       /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
Manifest number:          018F
Signing time:             Mon 27 Jul 2026 06:09:47 +0000
Manifest this update:     Mon 27 Jul 2026 06:09:47 +0000
Manifest next update:     Mon 03 Aug 2026 06:09:47 +0000
Files and hashes:         1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: LmYta4X1obT6irDU57uqwfmsRSY+Bf6sxV6OqPMFe9U=)
                          2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: m0GIDvP3AdEj+d17zySDL1Kt4EgoCHogrJCqwPnH7rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
        Validity
            Not Before: Jul 27 06:09:47 2026 GMT
            Not After : Aug  3 06:09:47 2026 GMT
        Subject: CN=6a66f62b-f333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:70:c1:d6:eb:6d:e3:0d:07:6f:70:a2:40:
                    f5:2a:0f:16:79:3e:2c:17:42:e8:ef:ab:ce:1d:74:
                    33:39:97:0f:29:e1:c5:b5:76:cc:fc:f4:a5:39:14:
                    1c:6d:93:34:e1:8e:58:79:c0:a9:d9:74:06:70:79:
                    c0:bd:ab:12:31:81:c3:e5:65:26:78:15:59:be:7e:
                    3c:e9:82:66:14:b5:26:c2:0a:d5:a7:97:de:3c:f7:
                    ee:8d:9b:30:c7:7e:63:16:c2:1e:da:2c:23:13:b8:
                    d4:aa:21:ea:87:4d:59:a2:c4:37:83:b1:01:55:b1:
                    82:d8:f6:d3:f0:8a:ad:1f:2c:bd:50:49:34:2e:24:
                    32:71:f1:0a:7f:4a:b9:69:24:a3:42:b2:6e:90:f2:
                    23:84:6b:70:93:12:67:56:a4:b2:37:c7:bc:a5:99:
                    24:f7:97:7d:b6:fc:38:27:17:78:34:84:38:99:09:
                    77:82:33:3b:f6:0c:81:8f:9a:22:1c:b9:4d:04:b6:
                    55:9c:a6:09:c1:d7:6b:81:4b:a9:e8:18:9e:73:fd:
                    92:59:da:d9:57:e6:68:90:b1:b9:af:c3:fe:48:71:
                    8f:56:47:c8:25:ee:ff:03:a0:e9:ab:e9:67:3e:72:
                    d6:61:e3:e6:74:c5:ea:0d:2f:e8:7a:20:1d:d8:69:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:05:43:B5:8B:A8:4B:B2:EA:DB:DA:82:5E:41:8D:85:58:F1:96:A3
            X509v3 Authority Key Identifier:
                keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:2d:34:7e:a2:26:32:0d:f9:fe:c8:c5:b1:8f:9a:c3:35:
         16:9a:98:fc:87:9c:f3:ba:b1:f4:91:29:a7:89:8f:87:15:32:
         85:65:8a:96:3e:da:48:f2:4f:dc:5b:2e:25:68:5c:27:ed:24:
         91:b3:aa:dd:f9:f9:6c:6a:b5:24:67:52:4b:9f:88:0d:0f:d0:
         09:a2:8c:ee:56:c0:5b:c7:e5:24:17:5d:4d:5f:56:ca:65:3b:
         35:f5:d9:f3:4d:38:02:bc:e7:a4:03:c8:72:bb:de:02:0b:69:
         f6:53:fc:b4:8f:11:84:9f:d6:22:87:97:21:bd:52:0c:da:79:
         89:63:2f:da:ed:49:00:39:a8:00:71:74:70:00:b9:48:d1:83:
         af:6d:44:f8:d1:30:3b:a7:6a:52:c3:b2:95:87:b4:a3:a4:b7:
         37:75:ce:f7:3f:a4:66:10:cc:eb:ef:4f:2a:59:7c:ed:f4:09:
         df:22:85:a1:69:fe:d8:93:b0:a9:53:14:b6:65:6b:60:86:20:
         23:03:9b:70:6b:15:97:c0:6e:06:36:aa:01:bd:bf:21:44:e9:
         0f:1d:42:cc:01:4d:10:65:46:4b:93:24:87:5d:f7:fe:01:1b:
         b2:cd:19:32:ed:2e:ed:e3:2d:13:12:97:f9:6d:8e:81:69:b0:
         6d:36:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:40 2026 by rpki-client