Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
File:                     8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json)
Hash identifier:          yhktmRXjvbdCeyqEcOVgRyZ0YWQNlQIAH9GI0rfOhME=
Subject key identifier:   CC:4F:43:AA:4A:7E:6F:45:D1:1C:B4:87:B1:6F:4B:E0:A5:E4:D4:DF
Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
Certificate issuer:       /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Certificate serial:       0AD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
Manifest number:          0AC7
Signing time:             Sun 26 Jul 2026 19:54:02 +0000
Manifest this update:     Sun 26 Jul 2026 19:54:01 +0000
Manifest next update:     Sun 02 Aug 2026 19:54:01 +0000
Files and hashes:         1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: iXzN5FD+EZ6q3cn7FpPBn2Zw72Ki7mLppf+/E1Rg/MU=)
                          2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: IVJiwLRRcqjPlrSiLGMQoA6TndfnN5sjAzvRclEZSog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
                          rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
        Validity
            Not Before: Jul 26 19:54:01 2026 GMT
            Not After : Aug  2 19:54:01 2026 GMT
        Subject: CN=6a6665da-47ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:ed:70:fc:3b:ef:a4:5b:3b:fd:07:15:d4:
                    95:af:b8:0f:97:63:47:33:49:b1:70:7f:6f:bd:c4:
                    a9:b4:f6:8e:94:74:b3:52:0f:0c:29:36:7d:03:d3:
                    1f:70:e0:77:64:be:76:ec:3f:51:b2:9c:38:36:65:
                    a9:62:43:5d:ba:e2:2f:55:28:99:77:b7:45:a1:ab:
                    e5:07:5b:46:b1:1c:47:83:3d:e5:9b:15:76:79:d9:
                    16:37:e7:3e:67:04:a8:dd:74:27:ae:10:78:09:0d:
                    29:68:cf:79:eb:be:72:bb:a7:96:df:eb:31:24:af:
                    b7:fe:d2:1a:1d:08:88:b9:ae:0e:ef:72:60:3a:2c:
                    75:e1:3a:33:85:6f:3c:59:ae:5d:77:f6:77:05:8c:
                    ea:bc:f0:44:cd:43:57:4d:fa:93:60:dc:5d:92:ab:
                    87:41:fd:b8:87:0e:71:62:7e:3a:37:83:7a:ef:0f:
                    3d:d2:95:b0:e8:74:f1:a4:59:2a:6c:83:57:6b:37:
                    ee:3b:40:78:9f:5f:17:00:55:e6:61:74:bc:b4:4e:
                    c2:8a:ec:04:4b:f6:da:bc:76:f3:82:c0:c0:90:46:
                    a2:24:58:74:7a:4e:12:8e:4a:ca:3a:6e:72:ed:08:
                    1c:2a:78:5b:d4:ab:91:30:13:ec:92:86:8e:78:22:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4F:43:AA:4A:7E:6F:45:D1:1C:B4:87:B1:6F:4B:E0:A5:E4:D4:DF
            X509v3 Authority Key Identifier:
                keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:aa:dd:d1:a8:12:e6:a2:26:1c:53:75:67:76:79:79:02:78:
         70:44:e3:c3:84:42:6b:a5:4c:c6:61:f7:c2:7c:da:d1:ba:01:
         80:55:e3:55:e5:64:f4:84:42:97:2c:53:84:81:59:34:05:40:
         dd:b7:03:b8:f7:a7:a6:2b:3a:62:bd:f0:6e:9f:3e:73:02:99:
         8e:5a:fe:20:30:07:e6:4b:8f:e2:66:08:31:f5:dc:c1:b5:54:
         27:ec:c8:db:ca:55:cf:ae:b9:5f:72:c3:d3:2e:cc:29:bf:54:
         be:c6:15:8f:c7:e2:64:01:c6:bf:9a:1c:de:70:e0:24:f0:e5:
         e9:50:cd:08:11:b0:cd:3e:4c:c2:3d:20:fa:ce:27:5f:d6:bf:
         30:62:b4:4e:fb:33:03:a9:0e:5d:4c:d4:c9:17:1b:ae:5a:71:
         e8:bc:0a:2c:b8:23:9d:09:43:93:81:c0:fc:94:1c:8c:48:8d:
         ea:8c:dc:a1:df:b1:47:4e:93:d6:4b:c7:4f:de:79:2e:2f:4a:
         78:e3:e3:26:80:98:3b:17:bc:90:1a:8a:29:39:03:26:79:6c:
         d1:c4:13:b6:ce:2e:be:f3:f6:70:13:c3:1f:5d:eb:db:2b:fd:
         60:a5:58:db:b1:61:5b:29:5c:16:aa:42:36:8b:ab:ec:9c:49:
         4e:72:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:53 2026 by rpki-client