Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
File:                     n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json)
Hash identifier:          32HJjY5GyCMT6XhU9Wl0/SHNBIiF3mhfiZSy/v4kntA=
Subject key identifier:   CC:10:A7:F5:FA:9F:91:48:81:1E:B0:DF:CB:ED:E6:B1:E2:32:49:71
Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67
Certificate issuer:       /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167
Certificate serial:       045D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
Manifest number:          0644
Signing time:             Mon 27 Jul 2026 01:15:39 +0000
Manifest this update:     Mon 27 Jul 2026 01:15:38 +0000
Manifest next update:     Mon 03 Aug 2026 01:15:38 +0000
Files and hashes:         1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: s158dZh8BoPDbr/Wa5CRV2Jdgq2ExPqIzoPJqLouu/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167
        Validity
            Not Before: Jul 27 01:15:38 2026 GMT
            Not After : Aug  3 01:15:38 2026 GMT
        Subject: CN=6a66b13a-a561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:a4:3b:53:d5:2e:54:22:84:75:bc:86:5a:
                    fb:b9:77:de:78:f0:92:c0:9e:1f:24:62:38:47:d6:
                    52:97:e3:63:42:f9:73:53:3c:9e:35:e3:72:ba:23:
                    2d:b7:24:ad:5b:3a:f1:f7:b2:f3:b5:7a:5c:31:27:
                    ac:6f:98:21:db:93:18:ef:d5:ac:cf:29:5a:da:c7:
                    3f:c1:d7:53:85:29:9c:48:8f:94:43:f2:c6:2a:d9:
                    b4:a0:85:61:64:82:f1:df:47:88:ad:68:df:72:07:
                    51:f0:87:42:e7:6f:c8:e4:f3:05:3a:6d:0f:28:e8:
                    16:49:8e:52:af:e6:ab:ce:1e:74:5f:2b:53:db:ac:
                    33:c0:cf:92:d1:fa:e7:0a:31:b2:79:7d:60:4c:ec:
                    d7:b5:33:f3:a5:d0:ac:1c:c9:12:11:4f:05:ac:e6:
                    56:a7:b5:43:75:c3:de:b3:fc:69:bd:38:89:59:eb:
                    89:5d:da:5a:d8:18:b2:69:c0:77:03:8f:dc:14:fd:
                    17:39:e3:e5:b1:5a:f0:eb:f9:c0:ef:39:4b:8c:cd:
                    e7:1b:9f:08:9f:77:fa:d2:81:94:20:0f:2f:a1:72:
                    09:8d:b9:fc:ae:4c:e0:5e:f1:cb:84:0a:f4:2a:ba:
                    88:83:d9:92:6e:03:48:c3:70:8c:c4:23:89:42:6d:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:A7:F5:FA:9F:91:48:81:1E:B0:DF:CB:ED:E6:B1:E2:32:49:71
            X509v3 Authority Key Identifier:
                keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:e8:e7:13:da:1a:98:db:10:e1:96:ad:cb:0c:68:e1:dd:
         f6:59:79:29:c6:4f:21:a6:ba:33:2f:51:4a:09:9e:44:71:d8:
         ee:6b:0c:c7:2c:ec:c2:15:2a:17:8f:cc:80:c6:80:86:8a:7d:
         f6:a5:1f:f0:c2:fb:03:be:aa:59:fb:8b:40:ba:67:b6:8e:17:
         97:e4:6a:68:a6:16:01:1b:80:27:d8:91:dd:5a:21:5c:3b:8a:
         14:b9:b6:40:22:8a:a5:a9:3e:b8:a2:1b:3a:37:28:39:ae:60:
         0b:cd:68:d6:7e:f8:cb:2e:58:53:36:70:e5:d9:2b:16:90:32:
         06:f9:c9:f6:79:4f:e7:19:13:f8:64:8b:a5:bb:f8:06:29:59:
         dc:cb:5d:88:1a:77:53:09:cb:0a:f0:36:3a:cb:9f:45:5d:61:
         cf:10:e6:cf:86:b4:36:f0:be:0d:b3:af:59:77:9a:17:6b:ec:
         96:34:31:58:9d:81:9b:73:44:d1:25:56:70:71:cd:a0:08:4e:
         59:95:f3:ef:86:11:0c:a0:82:af:49:49:ff:ed:7c:9f:ee:b2:
         85:d3:69:ba:82:10:18:2b:35:fa:03:a7:4d:01:14:d0:5f:39:
         e2:96:1d:c7:30:6d:56:80:38:f5:68:35:c3:d7:1e:dd:36:2e:
         e5:bd:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:40:07 2026 by rpki-client