Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File:                     -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier:          k4/LBiMSn9564XxeZjkqDxjgI6jG3g4Ch3KaSXzwMBo=
Subject key identifier:   06:B5:BC:FD:09:8B:7C:87:E3:D8:B1:B7:E4:79:B2:5A:32:00:FC:F9
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer:       /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number:          011E
Signing time:             Mon 27 Jul 2026 07:50:01 +0000
Manifest this update:     Mon 27 Jul 2026 07:50:00 +0000
Manifest next update:     Mon 03 Aug 2026 07:50:00 +0000
Files and hashes:         1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: 7QfJRaLGKXlGBwVOL/VKavU2R76/RRG6V+hnPl2s3Fw=)
                          2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: dIUAkDQ7djth80Fp66K2XB/D2by8C9/LB315auIcwbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
                          rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB
        Validity
            Not Before: Jul 27 07:50:00 2026 GMT
            Not After : Aug  3 07:50:00 2026 GMT
        Subject: CN=6a670da9-1a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:99:76:7b:d8:24:1e:9e:7d:66:6b:5d:c7:
                    59:bb:71:09:6c:45:38:40:0c:e0:7b:a4:20:60:a7:
                    3a:a0:d4:5d:a0:bf:4d:8c:f6:35:ad:6a:82:e5:64:
                    ab:bb:40:23:6a:7b:dc:14:18:34:38:ad:7c:39:b8:
                    94:c8:4d:a5:ac:9d:3c:cc:b6:88:8a:86:64:87:46:
                    2e:cd:bb:31:c6:82:fd:68:ac:21:5c:2b:4a:9b:fc:
                    fe:50:9e:ec:19:be:2a:c4:72:e9:d1:be:9a:a6:e4:
                    7b:8b:e6:82:be:41:ac:13:b3:d8:ef:b8:e5:54:3f:
                    f1:ba:1d:90:7b:98:0c:36:ed:fc:2c:ee:c7:3c:70:
                    88:45:d1:93:82:5a:f4:14:19:9e:14:b6:58:f3:b9:
                    fb:89:62:0e:e3:2f:bf:66:cd:09:d2:ff:f8:17:bc:
                    ac:86:9f:59:a2:63:c0:c1:fb:a0:7d:8f:b5:0f:6c:
                    9d:5a:c0:48:e6:c0:da:38:0e:eb:dc:87:40:b1:3f:
                    03:e4:9e:d1:25:22:cf:2c:4d:8a:fe:ce:cf:76:6d:
                    01:e0:d7:d9:f1:54:57:ba:47:08:3a:8b:34:43:e7:
                    63:26:74:7c:dd:51:98:eb:ac:2d:6f:3b:26:83:25:
                    fc:c9:1c:d0:3a:91:ec:3b:e8:89:07:35:4b:d6:8f:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B5:BC:FD:09:8B:7C:87:E3:D8:B1:B7:E4:79:B2:5A:32:00:FC:F9
            X509v3 Authority Key Identifier:
                keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:30:b3:02:24:85:07:95:bc:17:92:54:4e:5f:9e:19:5f:15:
         c3:1d:56:10:b4:55:f3:4d:3b:95:fb:8a:0f:14:02:27:cb:11:
         b2:9e:e1:bf:1b:89:3f:41:e7:31:02:de:09:09:0f:20:1c:d1:
         e5:1f:c7:98:48:c7:76:8c:6c:f5:0f:89:d1:cc:70:65:f4:30:
         33:29:37:75:27:2b:76:44:ae:e2:94:e7:ca:ad:e5:0b:01:84:
         13:da:21:c0:23:93:6d:04:e1:2e:4b:22:1b:72:ba:bf:1f:83:
         6f:81:6c:b5:b7:90:82:04:60:30:50:9f:c5:51:ce:74:ae:91:
         c0:ab:31:ee:17:95:90:a5:28:65:25:c3:c5:b9:60:99:64:c0:
         47:82:61:15:d3:66:7f:4a:8f:1a:a1:f8:f1:d3:04:5b:62:8c:
         ee:b0:af:9d:ab:c6:bd:f0:11:82:0c:b9:cd:de:c5:c1:15:ce:
         ec:69:99:96:5c:82:df:ae:57:fc:8d:54:bc:53:29:f4:f9:5f:
         b0:9a:90:80:f0:69:a9:fa:73:14:04:60:e5:95:9f:0d:d4:5f:
         d4:9e:49:f1:24:50:8b:be:23:2a:90:15:07:00:47:ab:c8:92:
         ca:b0:27:d6:30:db:58:73:aa:5b:f3:b9:b1:19:19:b5:12:4c:
         90:6d:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:08 2026 by rpki-client