Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
File:                     arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json)
Hash identifier:          utM9hZhCMO1VOnb5TFYJdaoe/WGM/0F6NMNlZ+9OJfQ=
Subject key identifier:   98:9F:55:CD:9A:D7:44:7F:DE:8C:B5:66:D6:CB:43:75:47:3E:4B:8C
Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
Certificate issuer:       /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
Manifest number:          01CE
Signing time:             Mon 27 Jul 2026 05:28:35 +0000
Manifest this update:     Mon 27 Jul 2026 05:28:34 +0000
Manifest next update:     Mon 03 Aug 2026 05:28:34 +0000
Files and hashes:         1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: ARapoTuO7WaqINSxEu4KMf6khrTPATxmkuyrO5+SzXA=)
                          2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: Dy1nuBVOv5zlPF1NmK8r+tPhGrR42+dXOgfOIxmTV1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
                          rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
        Validity
            Not Before: Jul 27 05:28:34 2026 GMT
            Not After : Aug  3 05:28:34 2026 GMT
        Subject: CN=6a66ec83-5a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:3f:2b:ca:89:58:d4:be:aa:9b:aa:7e:cd:
                    a1:41:9b:13:ad:f4:b5:d1:d3:6a:22:44:8d:68:5a:
                    68:5b:8f:2e:d9:ae:e1:2e:17:2c:84:83:19:0a:ea:
                    b2:0b:c6:24:a5:fd:d9:3e:a5:6d:68:a4:c8:7f:8d:
                    ea:ea:21:91:57:89:ed:73:fe:69:6c:28:47:d9:21:
                    12:c1:9e:31:d6:2a:2d:85:5a:5d:7f:8d:f4:37:c8:
                    09:ff:8f:c9:f6:3d:98:90:f0:10:e5:34:d5:87:dc:
                    2e:1b:78:36:e1:95:ff:aa:2f:af:82:38:57:4a:79:
                    48:c1:64:08:a0:6b:b5:7f:82:48:18:9c:a0:73:4b:
                    56:cd:00:e2:05:8b:48:44:5c:e6:38:4e:49:db:f0:
                    e2:5d:0f:b2:40:22:b0:24:fc:45:c4:20:d3:90:86:
                    f7:3b:19:5c:07:f8:a5:42:51:ec:09:8e:88:ee:56:
                    32:c2:e9:2d:ab:2e:05:a5:39:19:aa:35:68:1e:8f:
                    d1:ef:73:63:99:f1:70:1d:b0:dd:48:f1:19:33:fd:
                    db:69:3b:1a:25:b4:db:3f:6c:b6:67:5c:c6:50:9d:
                    ae:2f:1c:8e:c4:00:dd:23:4b:8c:f1:dd:82:b3:0c:
                    6e:62:8d:c7:94:e7:e9:91:3a:4e:54:ef:fe:04:c9:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9F:55:CD:9A:D7:44:7F:DE:8C:B5:66:D6:CB:43:75:47:3E:4B:8C
            X509v3 Authority Key Identifier:
                keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:21:77:c9:42:f7:4f:83:aa:a5:70:2b:e4:38:5d:99:be:96:
         28:13:73:60:1d:bb:a1:8c:f4:3b:6b:32:2e:0f:e2:1a:8e:21:
         ba:f7:5e:dd:03:09:29:e3:12:88:30:c5:2d:d4:12:e0:cd:26:
         12:dd:ec:22:ed:2e:cd:33:ff:f8:22:25:14:f1:1f:a4:a5:f4:
         c2:ce:a4:99:cb:46:50:e1:6f:a2:46:27:be:4b:36:89:0e:99:
         13:62:4f:f1:93:ff:90:90:b9:57:33:47:c2:fd:ef:46:0c:92:
         cb:cc:0f:95:d8:28:fa:8b:f4:88:82:6a:01:91:aa:23:63:55:
         54:0b:03:14:35:37:b1:31:a2:0e:f3:dc:3e:f1:0e:ca:94:f3:
         3a:37:39:0a:60:5e:34:d2:9e:52:d6:8c:66:d8:da:e1:55:59:
         7c:1c:ab:cc:1d:fc:c3:a8:79:d7:a4:6d:70:84:bd:41:7b:87:
         02:c0:8b:09:c8:2a:eb:99:28:6a:81:df:6e:b7:25:b8:48:54:
         86:bd:58:22:1c:8e:c2:2c:b8:0f:77:f6:f5:1f:ac:cf:ad:2b:
         68:25:67:ac:47:6a:4a:c3:d2:7a:0f:28:38:2a:1b:bd:a8:39:
         05:c2:91:ae:d6:45:31:a1:ed:a8:18:ff:31:25:e2:c5:8b:0d:
         d3:0c:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:57 2026 by rpki-client