Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File:                     52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier:          SMyn/2LSZWBwcqAMVgbNbp8S2Ez7Wq7ZO0j0inHewZQ=
Subject key identifier:   5A:1B:AA:B3:4D:58:1B:A9:CE:88:A0:B1:97:51:10:14:19:52:E5:A9
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer:       /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial:       0439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number:          0431
Signing time:             Mon 27 Jul 2026 01:20:06 +0000
Manifest this update:     Mon 27 Jul 2026 01:20:06 +0000
Manifest next update:     Mon 03 Aug 2026 01:20:06 +0000
Files and hashes:         1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: 4DX/iu8qoStcwK4qGZANQYRqalLjeZCv+OnS12GK77s=)
                          2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: dHW1Qook3wZ5zh5JBvm9IKVQr+R+p5FVYsj7ayk0Xrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
                          rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
        Validity
            Not Before: Jul 27 01:20:06 2026 GMT
            Not After : Aug  3 01:20:06 2026 GMT
        Subject: CN=6a66b246-81d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:30:41:69:9b:35:55:b8:75:7a:bc:da:00:
                    8f:3b:ff:f6:95:f9:f2:cc:f7:4b:8d:6c:d2:44:86:
                    42:2e:c9:7b:04:2b:86:ea:a2:46:09:d7:57:d8:9e:
                    23:6d:84:16:27:02:f6:c4:bb:f5:b5:13:2c:85:80:
                    d6:d8:46:15:2b:77:a7:99:4c:8c:95:d5:e2:63:d5:
                    e9:e1:d3:75:06:8f:e2:14:4a:15:88:24:69:61:55:
                    e6:32:70:56:f2:a6:f5:b6:01:78:b1:d3:ac:20:d9:
                    98:8e:7f:5c:22:33:13:d5:46:f2:02:3a:df:e2:c5:
                    cb:ef:36:2e:02:d1:15:f8:26:56:75:a7:6d:05:a9:
                    e6:54:bb:2e:2c:55:e8:2f:11:24:41:b4:e5:53:86:
                    71:83:db:3e:99:0e:f0:f0:7e:c2:4f:0d:f7:cb:40:
                    5e:3b:0a:f6:2f:b5:10:77:ff:cf:b0:be:fd:40:38:
                    aa:bb:b6:0c:c3:a2:dc:a0:d6:26:32:19:d5:25:7a:
                    10:ed:c3:d5:85:d7:27:24:e7:d3:2a:8c:20:52:08:
                    d0:f0:7e:19:28:cd:10:6c:13:5b:64:9c:fc:1a:4b:
                    a5:34:73:52:b8:dd:ae:64:3d:56:12:d0:d4:5b:46:
                    fd:8c:a3:37:05:82:5f:fd:6a:48:38:2d:35:83:51:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:AA:B3:4D:58:1B:A9:CE:88:A0:B1:97:51:10:14:19:52:E5:A9
            X509v3 Authority Key Identifier:
                keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:26:35:fc:f4:93:18:e3:24:d4:f7:42:4a:23:5c:03:9d:
         d7:32:d7:d0:80:b2:8c:7d:63:6f:8c:64:1b:7d:f8:76:ed:17:
         c8:87:61:9a:7a:3f:ea:6e:6a:10:b0:f8:99:44:77:5e:62:57:
         6a:91:34:d4:bf:29:a0:40:18:e9:3f:bd:bb:b1:7a:14:dc:fd:
         3d:64:4c:dc:42:1a:ce:ad:ef:94:79:10:61:b0:3a:eb:c2:92:
         b2:ad:15:e4:93:da:f8:35:1f:02:1e:e8:fb:90:df:04:8d:81:
         90:6a:bc:08:d1:ee:8d:87:a1:55:5e:fe:85:8f:ef:cf:2e:ba:
         ad:ff:ae:40:f8:12:ee:d1:54:d3:aa:1d:e6:fd:ff:09:5a:e4:
         25:2a:5a:28:7d:dd:8c:29:df:5c:48:55:e3:48:5a:18:b3:96:
         04:de:20:10:a6:65:dd:f6:9a:d7:0d:cb:c0:39:d7:1a:88:2a:
         a0:ff:72:f8:77:68:a1:31:e4:66:77:76:a5:49:0b:32:70:37:
         5e:e5:98:56:fa:d3:6b:cc:7a:7e:e3:74:ef:fe:b1:58:71:7e:
         47:1b:5b:cc:b5:4a:6f:60:f2:db:4d:89:22:d9:e4:66:54:be:
         be:e0:86:b3:74:ce:24:04:a0:cf:ea:00:a0:96:21:b9:4f:78:
         2a:5b:c3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:55 2026 by rpki-client