Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
File:                     sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json)
Hash identifier:          L8aVaxmzNPxhYgifqg/kXT97GmuWDkH4NEtFoTV7xpg=
Subject key identifier:   CA:6E:AA:FA:53:0D:A9:92:85:E3:0F:5B:E0:04:92:B8:29:48:5D:6E
Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD
Certificate issuer:       /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
Manifest number:          0139
Signing time:             Mon 27 Jul 2026 07:26:23 +0000
Manifest this update:     Mon 27 Jul 2026 07:26:22 +0000
Manifest next update:     Mon 03 Aug 2026 07:26:22 +0000
Files and hashes:         1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: SMcTF4EAFiW1QPmMFFSKbBK6UTscuf0iLDuNIqoeAsU=)
                          2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: dlS+L3hoSIpEJ+oVU6LIz9k7ig30GNwI16r61UE8PJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl
                          rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD
        Validity
            Not Before: Jul 27 07:26:22 2026 GMT
            Not After : Aug  3 07:26:22 2026 GMT
        Subject: CN=6a67081f-31f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:18:d1:81:29:49:80:af:b8:6c:18:ae:9b:
                    d4:ff:d2:2b:be:83:eb:d7:44:20:ca:83:25:53:00:
                    05:37:33:4c:4e:bb:87:22:be:01:f0:35:89:f0:9b:
                    54:50:95:50:62:71:6b:e0:f4:46:8f:f6:df:39:33:
                    17:98:ca:3c:91:29:22:b0:3d:f8:05:bc:e3:f4:3e:
                    44:7a:13:3e:70:7b:4a:0b:fa:9c:71:0d:12:fc:db:
                    c9:de:40:e5:e2:f6:c3:b1:a5:6a:e3:f1:3e:86:c4:
                    4d:65:38:51:73:57:e5:17:a4:a2:bd:90:74:c8:7e:
                    74:09:e9:84:d9:08:89:c0:5e:e4:d2:5d:57:1c:b7:
                    6c:0b:74:2d:8c:26:1e:86:8b:38:ad:e4:63:79:90:
                    11:cf:4e:14:0a:d7:4a:d0:1b:5f:80:46:63:37:2f:
                    47:d3:11:ed:dd:e0:97:31:56:d3:c5:64:e4:ca:c7:
                    92:d3:e2:aa:41:16:8d:38:21:7f:72:68:63:a0:f8:
                    8f:63:d4:02:f1:87:f2:e7:4d:c6:10:54:34:0d:d2:
                    87:4c:93:63:ce:03:ec:bb:b3:a7:ef:67:96:3b:c2:
                    81:c6:3c:cb:b9:20:87:37:87:ac:9a:ed:3a:7a:8c:
                    35:0d:8b:de:66:ee:69:51:8a:02:c2:db:a9:20:07:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:AA:FA:53:0D:A9:92:85:E3:0F:5B:E0:04:92:B8:29:48:5D:6E
            X509v3 Authority Key Identifier:
                keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:08:27:c6:a1:63:98:5b:88:e1:ff:eb:38:84:ef:73:ed:1f:
         cf:f7:79:07:e8:37:97:69:c5:ef:00:c4:29:7a:e5:90:d1:98:
         7f:40:4a:99:85:91:12:11:b8:5a:4e:0d:4a:e0:62:df:c7:2b:
         9c:68:67:f0:1e:40:dd:d4:27:63:c8:dc:ea:6d:69:fb:06:93:
         0d:ed:9a:ff:44:e2:b4:e2:55:35:b4:99:f8:7b:ab:50:dc:a9:
         7a:c8:78:1c:34:53:30:83:70:c8:20:9b:37:b2:15:8a:3d:4a:
         c3:48:b5:35:61:25:87:85:ea:58:95:8b:1f:ed:3b:65:0a:1a:
         ab:76:f2:cf:f7:05:ac:45:94:5d:f0:13:08:1b:34:54:df:49:
         bd:b5:d3:10:62:74:dc:e7:db:ef:a6:76:87:01:5e:48:10:d1:
         04:21:1b:8d:c4:cf:51:fe:4d:24:86:ef:ee:fc:1f:9d:06:93:
         32:33:4a:c3:b4:8f:a0:08:8e:1f:cc:d3:43:db:19:49:16:ce:
         44:d5:d5:bb:ad:98:8a:2b:36:3d:b3:6e:48:ba:07:93:b5:6e:
         e3:7c:3d:80:5b:8e:fe:13:26:05:20:29:7c:c3:a0:36:91:97:
         47:a3:8a:4d:79:fc:5f:e4:ea:8e:99:ea:cd:64:6b:16:b3:0d:
         ca:9e:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:55 2026 by rpki-client