Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
File:                     AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json)
Hash identifier:          ovyBAhtmllog7sSNuuGyq0BofEt6siWQwQGgkayFSuk=
Subject key identifier:   52:6E:49:9E:01:38:13:73:B1:54:60:50:0D:20:28:D0:1E:19:C6:1A
Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
Certificate issuer:       /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
Manifest number:          077F
Signing time:             Sun 26 Jul 2026 22:21:12 +0000
Manifest this update:     Sun 26 Jul 2026 22:21:12 +0000
Manifest next update:     Sun 02 Aug 2026 22:21:12 +0000
Files and hashes:         1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: TNeOfposjnVOc0C29ro49LJVzgxEjjXGybiFxA+FQRk=)
                          2: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: s/5lGnLOQhFrFoCvFSY8QuZwJ6dSe5qo2Hz+gxZXbAQ=)
                          3: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: Tp9AbDgfK/vxHv0T8EocR+zLaLvDS9XrhEaYG7pj/74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
                          rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
        Validity
            Not Before: Jul 26 22:21:12 2026 GMT
            Not After : Aug  2 22:21:12 2026 GMT
        Subject: CN=6a668858-014c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:15:19:de:9e:22:86:82:28:a4:bf:87:ab:
                    ff:79:74:3a:7e:a7:1c:b1:29:b1:e9:49:ec:fa:3d:
                    2a:d6:b4:3b:65:ab:2b:af:25:e2:66:5c:0c:94:20:
                    06:02:f6:24:fa:b3:8b:4d:15:c4:19:54:3a:92:7c:
                    05:9f:1b:d8:a9:5c:ef:cf:22:b7:64:a6:8e:66:5c:
                    38:92:89:07:bb:82:da:a4:e1:52:01:36:4e:40:f9:
                    a9:03:bf:ef:08:d5:7c:ba:dc:b5:b2:20:b2:c9:03:
                    af:df:da:bf:df:19:cb:c9:c9:26:5a:4b:1c:66:07:
                    87:a7:ff:bc:94:71:dc:b7:01:cc:f8:d1:c0:a6:09:
                    9e:fb:51:89:d7:47:9a:c3:2b:3d:f2:78:13:0b:e2:
                    6d:d1:0b:fc:9d:19:c9:c2:5c:e7:9d:f9:03:bd:32:
                    76:e8:9d:7c:94:d7:ae:ea:49:0b:9b:1c:cf:4c:9a:
                    13:9b:ca:43:aa:76:b3:41:68:c6:6b:11:b2:4b:03:
                    e4:2f:2d:ca:57:e8:ba:dd:50:5c:c9:9b:8b:ca:aa:
                    db:aa:96:aa:d1:eb:7d:ba:61:21:f5:1c:ee:06:6b:
                    4d:5d:80:64:15:e0:54:f1:10:46:93:33:ea:49:fb:
                    6f:85:c0:f9:67:53:ad:61:46:e1:03:ab:de:53:45:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:49:9E:01:38:13:73:B1:54:60:50:0D:20:28:D0:1E:19:C6:1A
            X509v3 Authority Key Identifier:
                keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:61:b6:62:25:ff:d8:7f:ac:b3:72:70:52:4f:09:2f:dc:
         24:9d:ba:33:4f:67:f9:d4:89:73:ef:da:c9:0b:e6:2d:cb:1c:
         15:94:48:56:1a:21:23:f3:9b:ba:ea:8a:d8:1f:ea:24:70:a7:
         65:2a:fa:2e:b7:79:72:b0:28:0e:c0:c8:fb:e4:64:ba:de:81:
         ea:3a:2a:55:b4:88:6f:55:07:50:69:11:af:71:f1:4e:f9:06:
         39:8a:f5:c9:f1:c3:c9:e8:6c:7c:92:e1:0f:86:e8:46:29:a2:
         e7:b8:7a:07:4e:f5:a1:87:3f:00:15:0a:10:d2:92:8e:0f:15:
         95:93:fd:d9:80:1f:57:14:0b:a3:17:5e:ab:a6:c5:37:c6:1a:
         34:eb:74:fd:5a:86:d4:32:29:a0:90:00:57:8b:d7:e3:4c:0e:
         ca:65:a7:38:62:2c:40:51:bc:94:c1:bd:ee:0f:b6:53:99:1c:
         4d:63:fa:90:6f:50:13:bb:f0:82:22:93:b7:88:82:4b:92:6c:
         2f:35:5c:f8:d2:eb:ee:5f:6b:de:21:8f:14:a9:d2:79:aa:62:
         3c:69:10:fe:a7:d8:77:dd:e4:65:33:cc:a8:5e:cd:a1:48:0d:
         05:db:62:95:70:b8:f1:12:e0:e9:2c:c9:c0:0b:53:ea:2c:ff:
         55:04:d4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:51 2026 by rpki-client