Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File:                     bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier:          QuAVRiIlxA2r8rh7bnZMg/SaUDIFZFwW9WvuzOsZJ5U=
Subject key identifier:   43:94:9E:3A:7D:FF:41:E4:B8:0B:8E:B3:8F:03:F5:33:D5:A4:E2:9D
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer:       /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial:       0458
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number:          0450
Signing time:             Wed 29 Jul 2026 00:56:19 +0000
Manifest this update:     Wed 29 Jul 2026 00:56:18 +0000
Manifest next update:     Wed 05 Aug 2026 00:56:18 +0000
Files and hashes:         1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: yZvwSyVWPkcPu96KlDnZqQig26JMHCQwi9SQqNSslAU=)
                          2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: VcHb84wLi9VnbtMp6mSLBWoA9CBF2yld3MvXmytrUnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
                          rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
        Validity
            Not Before: Jul 29 00:56:18 2026 GMT
            Not After : Aug  5 00:56:18 2026 GMT
        Subject: CN=6a694fb2-2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:30:04:7a:be:87:72:5a:ca:ad:3d:d3:73:
                    7b:75:5a:41:33:14:04:ca:87:ec:70:9a:13:6a:c2:
                    f5:4f:7c:df:c9:7f:17:a9:8e:5f:bf:0c:d8:9b:78:
                    61:29:9b:04:f6:cf:c7:c1:56:e8:43:13:b5:b1:28:
                    38:4a:17:f2:b1:0d:0d:7a:4c:32:44:0c:15:de:35:
                    9f:17:bc:81:c4:ff:3c:61:00:e5:a5:3f:ba:d8:0c:
                    37:20:e4:e1:d1:67:f3:50:ff:44:7f:74:2f:76:5e:
                    2b:8f:1a:4e:ae:56:e1:05:d1:72:23:ab:3d:a7:1d:
                    a3:ed:eb:e4:17:42:77:e5:72:8c:c6:f9:56:86:b9:
                    8b:81:0e:d8:37:7a:79:d5:36:93:b7:61:5f:99:50:
                    9c:76:95:01:49:67:ed:83:16:ae:f1:b4:02:13:5f:
                    16:b6:1d:6c:81:c5:5d:b3:c3:1b:0f:9e:24:95:58:
                    05:f9:0b:5e:41:1c:5c:37:d9:d2:43:ca:6b:ad:22:
                    2f:cf:ee:65:99:99:3c:e3:1b:a3:68:69:bd:47:62:
                    b6:91:6d:fc:05:da:1f:3f:d4:ab:0e:86:4b:b4:00:
                    e5:06:d9:a9:81:6f:72:5b:28:b5:4f:9d:cd:2a:6f:
                    be:c5:fc:6c:26:b7:88:5e:c4:3e:c6:2a:c0:b0:4b:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:94:9E:3A:7D:FF:41:E4:B8:0B:8E:B3:8F:03:F5:33:D5:A4:E2:9D
            X509v3 Authority Key Identifier:
                keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6f:df:34:62:ae:25:71:ea:68:e6:12:b3:82:ad:7d:ea:b4:
         f2:71:d2:21:f2:5a:46:c8:42:37:04:d7:fd:ce:3e:ad:51:6e:
         ca:c2:81:31:15:f6:83:00:6f:f7:d9:7c:1f:7f:3a:ac:be:4a:
         ac:3a:16:b0:54:b1:d8:ba:77:b2:fb:f4:02:44:b4:11:cc:b8:
         31:b6:44:00:27:34:1c:4c:43:ab:b7:9d:97:7e:1e:3d:7d:01:
         3d:29:c6:7d:21:2a:48:c4:f3:95:be:b3:a8:aa:4a:74:f0:45:
         fd:47:9e:95:28:36:79:0b:59:e3:12:97:06:56:93:28:40:7d:
         a6:dc:22:f5:07:3c:01:e1:0e:94:85:85:1c:7a:02:26:ec:e1:
         eb:4a:9f:3b:7b:b8:69:99:76:11:ff:9b:3f:3e:96:81:cf:16:
         25:1e:db:27:bf:2c:3f:94:0e:f3:ee:f2:7c:a4:fa:09:a0:19:
         99:de:85:a6:b3:63:38:b2:78:4c:07:c1:67:19:f2:85:c2:8f:
         5b:61:c9:27:e5:0c:33:51:2c:a3:67:50:10:89:08:41:5f:a1:
         67:be:fb:82:ff:97:f2:0e:41:24:bf:1f:2e:f3:53:18:2c:3d:
         74:38:e9:d1:d9:0c:31:69:62:f9:43:83:f3:e2:06:c5:81:2f:
         c4:ed:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:19 2026 by rpki-client