Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
File:                     rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json)
Hash identifier:          hKco59+OB3oqreeo7WGxYd+/aHuTk8hYp1RWOMRQU2w=
Subject key identifier:   09:05:99:01:15:EF:75:CF:25:60:A4:F1:30:E2:E5:21:B2:13:6B:42
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Certificate issuer:       /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial:       0564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
Manifest number:          0556
Signing time:             Wed 29 Jul 2026 00:04:26 +0000
Manifest this update:     Wed 29 Jul 2026 00:04:26 +0000
Manifest next update:     Wed 05 Aug 2026 00:04:26 +0000
Files and hashes:         1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: rFKSdNTg3745BePJYvWzKc8t6W6YeIXho128dAGQkHY=)
                          2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=)
                          3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
                          rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
        Validity
            Not Before: Jul 29 00:04:26 2026 GMT
            Not After : Aug  5 00:04:26 2026 GMT
        Subject: CN=6a69438a-e2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:dc:4e:df:f7:40:6f:45:9f:e9:52:69:7d:
                    0e:86:fe:e4:f3:76:86:33:8d:9e:80:83:b8:b3:83:
                    1d:b0:be:3f:b9:a5:80:f3:73:f5:b6:70:0b:1c:d5:
                    e9:c2:27:57:4f:ff:55:29:bf:ce:d2:42:43:24:8f:
                    75:9e:3a:65:7c:05:73:1f:40:03:e9:be:9b:8d:19:
                    1e:2a:4e:9b:93:72:11:c1:ac:d6:46:f7:91:de:52:
                    59:dd:44:83:5d:f4:3a:4b:61:0d:39:22:1e:f0:e6:
                    a9:db:fd:05:e2:ee:bf:e4:d6:17:df:3a:32:7b:26:
                    42:13:bd:b8:c3:02:94:ca:7e:f2:07:60:d7:1b:ca:
                    3d:3b:f8:59:cc:87:69:6d:61:01:aa:f4:80:39:4d:
                    0c:5d:55:27:1b:68:43:f6:65:b4:07:9d:51:45:f6:
                    bf:5d:db:1b:dd:40:58:55:0e:e4:eb:19:0c:14:b9:
                    68:c9:f9:d7:b4:17:af:1a:8e:11:bf:fd:7c:6a:dd:
                    92:41:79:4f:62:1b:e7:50:03:27:43:cc:ac:78:ba:
                    01:73:41:ef:ad:00:83:f0:de:a3:8e:96:f5:57:80:
                    36:7c:af:23:cf:68:54:51:42:47:82:c8:d3:f6:f0:
                    09:73:bf:fa:55:59:bc:ed:2a:a8:15:99:0d:f0:0d:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:05:99:01:15:EF:75:CF:25:60:A4:F1:30:E2:E5:21:B2:13:6B:42
            X509v3 Authority Key Identifier:
                keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:55:84:ef:38:7b:0d:04:b7:69:d4:4c:9e:e4:e7:90:2f:34:
         12:d3:cf:60:1d:05:0b:8c:c0:fd:e6:a4:3d:31:83:19:c9:c7:
         fa:b5:b6:ca:7e:61:db:ee:75:50:5f:f0:93:05:92:db:00:49:
         02:bc:7d:68:fb:f7:38:dd:50:6f:ab:58:e5:82:df:ed:ee:c6:
         a1:88:be:36:9e:8e:6d:3e:89:66:26:ed:07:1c:77:4e:4c:09:
         5e:a3:2e:65:82:7b:c8:26:dd:62:67:96:da:af:82:84:4d:90:
         a5:de:c0:2e:73:c4:d4:0e:e7:fa:91:0b:70:6b:05:a4:a4:c3:
         25:7a:ea:6e:ad:ab:54:c4:8a:be:c9:7d:7f:da:76:34:c7:28:
         3b:35:0c:89:00:00:dd:b3:05:d4:78:2d:6f:a8:55:4a:e3:b4:
         ad:6f:a4:42:9e:56:6f:70:0f:8d:89:22:bd:ed:46:ea:7d:61:
         f6:5f:46:ea:e5:bb:0b:b4:15:29:4f:0e:57:2b:a5:af:fc:25:
         ff:d5:28:04:30:ce:23:63:c2:6c:3c:66:b5:43:70:7a:d9:c9:
         4f:73:50:89:78:b1:7c:3c:4c:bf:68:f6:cd:4d:d2:b2:3a:07:
         d5:0d:52:ef:68:ca:60:be:fe:54:a7:51:58:f6:75:71:7a:4e:
         7c:79:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:44 2026 by rpki-client