Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File:                     18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier:          vOrb2RgaAS83ExrTA8ODAgq8aErC8iwEg/kcvxklwI0=
Subject key identifier:   0D:5C:41:27:5D:40:C8:F0:62:6A:7D:75:4A:45:A2:BB:21:1B:7C:43
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer:       /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial:       0423
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number:          040B
Signing time:             Tue 28 Jul 2026 16:23:50 +0000
Manifest this update:     Tue 28 Jul 2026 16:23:50 +0000
Manifest next update:     Tue 04 Aug 2026 16:23:50 +0000
Files and hashes:         1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: sUFrBgbXTuy1gd9hOAM+rjOvEHobk15norTCiVN8W1M=)
                          2: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: MnQKwxbbpwYvCT9UEDUb9YHnOUTSQHiCV3o0jnph1XA=)
                          3: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: j8Yr7Ss4joe6oU5k+fjglOWHr8Bf9I77TQW0zKWVXNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
                          rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
        Validity
            Not Before: Jul 28 16:23:50 2026 GMT
            Not After : Aug  4 16:23:50 2026 GMT
        Subject: CN=6a68d796-7a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:25:c6:4a:9c:e5:9a:7e:dd:16:0a:95:4d:
                    5b:7b:8c:64:b3:58:d7:ac:be:4b:bf:b6:d4:b5:aa:
                    56:62:13:dd:b7:d6:b9:ca:6a:b1:98:3d:e8:4d:25:
                    d9:f3:f2:d6:1d:f2:e6:eb:0e:4b:47:65:6f:bf:f7:
                    08:56:dd:d1:cd:8a:e2:38:1c:2b:d2:d7:e8:d6:e1:
                    8d:c5:e5:90:13:38:5c:f1:13:7c:07:c3:47:06:0b:
                    7f:36:85:44:ed:d0:ba:de:36:b6:7d:9c:0e:26:50:
                    98:29:c8:69:46:54:5e:a7:a6:e4:5b:8f:5d:e1:54:
                    10:03:11:78:81:35:5a:00:7e:cf:97:bf:69:5f:1c:
                    07:fd:55:b7:17:3d:cd:e3:f1:bf:f7:2c:5a:21:69:
                    c7:ee:97:0b:32:b6:a5:bd:00:f7:d8:98:73:cc:e8:
                    be:28:63:29:fd:7a:e3:39:23:28:d1:0a:e4:a4:46:
                    d5:35:93:83:52:01:1a:54:37:30:07:ec:74:9e:d4:
                    04:10:1f:e2:e1:d5:27:cf:65:bd:35:ba:de:b1:2a:
                    2c:a4:d5:42:df:c4:4b:6e:ba:a2:65:00:a3:71:57:
                    da:66:bc:02:43:6d:3c:27:a1:27:84:24:56:f0:e9:
                    9b:05:75:4d:4b:d6:f1:09:14:9b:01:fe:42:e2:3f:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:41:27:5D:40:C8:F0:62:6A:7D:75:4A:45:A2:BB:21:1B:7C:43
            X509v3 Authority Key Identifier:
                keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:67:14:70:0a:c2:11:90:1f:d4:a3:6f:11:8b:df:da:1e:6d:
         ec:42:70:9c:7d:d4:52:41:cf:22:64:fa:4c:21:0f:21:b1:8d:
         a7:ac:1d:f6:28:5b:cd:eb:62:b0:4f:03:9f:a1:af:9f:2f:23:
         82:d0:d7:7a:a3:a3:32:19:8b:0e:3f:e0:a6:c1:8b:c9:d7:7f:
         20:fa:49:89:6f:23:71:1d:88:23:a9:27:03:6e:e5:51:5f:90:
         04:e7:46:67:35:08:2e:43:a4:37:c9:6d:6a:4e:ef:b5:b2:e8:
         37:c2:52:1a:b0:0e:bb:0a:f7:67:2b:15:d2:5f:ef:36:13:9a:
         b4:d3:37:2b:fd:55:df:78:64:7c:2c:bb:a7:c4:51:37:51:57:
         0e:f6:af:4b:ce:35:58:d2:71:b9:0e:b8:0d:74:fc:9a:ff:e4:
         ac:24:ea:85:7f:8f:4c:9c:7d:ac:b8:a3:ab:fc:80:00:a2:18:
         09:2f:de:68:22:b9:09:a6:d4:23:74:da:d6:ed:c4:ed:0a:f4:
         eb:64:3a:a2:73:c6:9e:ec:8a:98:b2:78:ad:c4:22:31:ac:76:
         7e:fc:0d:c4:d8:ca:db:4b:8e:22:e9:17:c0:ed:fd:23:cf:56:
         25:ad:5d:92:be:e0:b8:fb:c8:20:75:9e:26:03:f7:93:36:87:
         17:12:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:44 2026 by rpki-client