Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File:                     4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier:          SPmpNPSrRmZ1tbhBFfEPiRmuQt6zf1g3IJUPgSWTHSY=
Subject key identifier:   A0:39:F6:2F:85:B3:6E:E2:DF:2D:F0:B0:97:97:BE:6C:D9:96:89:E8
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer:       /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial:       0880
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number:          0876
Signing time:             Sun 26 Jul 2026 21:24:38 +0000
Manifest this update:     Sun 26 Jul 2026 21:24:38 +0000
Manifest next update:     Sun 02 Aug 2026 21:24:38 +0000
Files and hashes:         1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: WmOQIHdwb6h5yQ03iXuIj2Ca9wNZ6kFfZ7cARJHLKSc=)
                          2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: cV6nrCI/WiBOL0Uk/5UHwH4C2GgLMHmzrahNJwrUuZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
                          rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176 (0x880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
        Validity
            Not Before: Jul 26 21:24:38 2026 GMT
            Not After : Aug  2 21:24:38 2026 GMT
        Subject: CN=6a667b16-578e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:5b:13:50:92:3f:fd:9a:4d:48:59:10:d3:
                    b3:e7:44:08:38:41:74:37:c1:eb:37:a7:f6:bd:e6:
                    73:d5:90:d7:53:27:12:94:37:ab:d3:84:b7:eb:c0:
                    6d:1c:da:8d:c8:ca:7f:62:c4:67:23:49:41:4a:e8:
                    6c:6c:2b:2a:7f:f5:a8:8e:94:b9:34:0f:a1:e7:31:
                    cb:c6:cb:f1:23:3b:5d:bf:14:c1:38:20:c7:f1:34:
                    32:1a:b9:bd:f5:90:ce:82:77:c2:56:62:b7:75:c7:
                    a8:a0:0b:37:93:58:e3:2e:7b:5f:c6:da:40:e9:35:
                    3e:38:d4:c8:ae:a2:df:71:ad:d3:91:12:aa:05:6c:
                    5f:14:45:2d:25:da:9b:31:49:ac:0e:b5:11:22:c8:
                    ca:48:58:fb:b6:5a:48:08:35:67:ee:69:dd:c0:01:
                    f4:06:79:99:cf:ce:ec:a0:2f:22:19:e4:90:ed:38:
                    e8:fc:67:59:db:32:26:48:f7:d0:06:65:ff:38:2b:
                    02:5d:4f:56:a8:c9:72:36:1f:42:a4:00:c6:5e:8c:
                    15:ed:ab:2a:14:33:90:25:a8:16:85:94:99:df:b3:
                    e7:52:f3:50:53:a7:b8:31:10:60:a9:b7:b9:04:84:
                    fc:7d:4b:fe:a6:9d:21:32:44:11:5b:46:a5:71:e3:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:39:F6:2F:85:B3:6E:E2:DF:2D:F0:B0:97:97:BE:6C:D9:96:89:E8
            X509v3 Authority Key Identifier:
                keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:74:3b:79:e5:f7:ce:c3:58:49:73:5f:6a:e2:36:e7:a7:24:
         df:87:56:30:e7:21:82:94:23:d2:3e:ff:76:a9:5a:65:bb:ce:
         c2:2e:94:a0:7e:32:93:36:6e:32:5f:6f:50:53:3e:4b:c6:f5:
         78:21:69:5c:f5:68:30:4c:ac:ba:32:8c:ca:0d:82:d0:5f:fd:
         dc:a1:d3:37:3d:46:d4:7f:a8:d0:77:54:05:0b:87:a9:d9:04:
         7e:4e:ed:82:44:7b:b4:07:ad:9e:5b:ed:cb:ec:84:2b:7c:5d:
         ac:26:7f:66:df:4f:1a:15:9b:07:32:66:62:5d:b5:36:64:cc:
         09:66:23:23:81:5b:0d:78:0e:aa:8e:80:f9:76:54:c7:f6:34:
         7b:49:6b:26:3c:ea:00:d1:5b:a6:7f:c8:42:5e:9e:94:4b:36:
         e4:86:e3:21:9d:27:0c:a8:74:c0:55:21:d1:d7:8c:2f:43:5f:
         c6:2c:69:14:db:b9:8e:16:05:22:28:76:2b:45:7d:e3:73:c9:
         89:bb:ec:bc:73:ba:35:d8:e5:f0:0e:da:8d:7e:a3:c7:f8:41:
         05:4f:28:57:b0:31:97:0e:7e:2a:02:3d:b8:31:98:2d:39:fc:
         67:29:e3:58:ee:10:00:b1:a5:75:48:f4:86:35:aa:79:2a:af:
         62:0c:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:49 2026 by rpki-client