Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
File:                     madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json)
Hash identifier:          w5HrD81WAdDAuMwa75/LHFkeDXFYeoyeTnQYEEstHsk=
Subject key identifier:   80:FA:72:A4:64:71:CE:2A:FE:16:6C:47:74:F6:A6:5C:39:FC:A8:C2
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Certificate issuer:       /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
Manifest number:          0167
Signing time:             Mon 27 Jul 2026 06:46:41 +0000
Manifest this update:     Mon 27 Jul 2026 06:46:41 +0000
Manifest next update:     Mon 03 Aug 2026 06:46:41 +0000
Files and hashes:         1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: c4JspJr8hJyPlqz0DbRrLqqPF4eeDIJwc6+YxK/Wz2o=)
                          2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: VOUYAm4vUARPOBx8hzx51ITs/3U+Tn4nx1d9cHtgB/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
                          rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
        Validity
            Not Before: Jul 27 06:46:41 2026 GMT
            Not After : Aug  3 06:46:41 2026 GMT
        Subject: CN=6a66fed1-7eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:15:d8:87:df:5e:a7:4a:86:47:84:b6:4c:
                    49:cd:53:fc:4b:9a:02:2d:f5:a7:2e:43:a6:91:47:
                    66:5c:5d:82:3a:21:36:c1:12:c1:15:35:3e:fa:54:
                    a9:82:9d:41:4a:00:76:33:82:07:84:5f:57:e7:4e:
                    c1:63:03:2a:be:fb:58:65:e9:6f:8c:27:1f:65:30:
                    eb:c8:1b:c4:40:49:41:76:28:39:85:f4:1c:61:87:
                    a6:01:45:c1:ad:cb:65:d2:8e:ce:53:fe:c1:f1:1f:
                    1f:4d:e8:d6:fa:79:95:be:16:91:64:c5:49:26:b7:
                    fb:62:e6:13:d4:5d:6a:4a:21:6f:4a:7f:44:39:53:
                    78:c4:2d:ce:21:94:b7:c2:ca:c1:6d:21:91:60:9c:
                    03:84:4c:27:02:00:e0:e7:e0:36:27:47:89:88:3a:
                    0e:48:64:25:1f:6c:20:cf:1c:54:23:05:dd:98:0b:
                    cb:e1:73:17:19:37:8d:9f:44:60:47:e9:34:e6:b1:
                    5a:d9:1e:91:fa:93:a0:95:66:5e:19:27:ff:1d:c1:
                    47:af:68:1e:5a:f2:64:f6:d5:dd:e4:22:27:4c:95:
                    d2:a5:e9:88:fc:4f:a6:9d:42:82:af:ee:ec:a5:95:
                    4e:6f:dc:4f:78:e4:b6:29:09:63:40:28:b9:d7:3d:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:72:A4:64:71:CE:2A:FE:16:6C:47:74:F6:A6:5C:39:FC:A8:C2
            X509v3 Authority Key Identifier:
                keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:ff:ea:47:b0:0f:05:83:d0:f8:0c:b8:b8:13:16:4f:28:
         5e:d1:b4:e4:99:92:db:9b:2a:08:5f:8e:d3:55:f6:3f:6f:01:
         06:3f:35:de:b6:5c:82:3a:d5:13:83:cb:e0:ea:2c:91:69:c4:
         13:a1:90:54:de:21:d2:ea:79:fe:31:d8:4f:8c:6e:12:3a:bc:
         82:89:1f:21:4b:26:a6:dd:ab:f0:73:f6:64:e1:47:fe:c2:b5:
         73:9e:e5:8f:3c:a2:de:fc:07:a5:2f:a5:31:d7:0a:bb:03:85:
         fa:c6:23:35:a3:46:78:17:b0:9c:ac:df:35:9f:bd:94:c5:ad:
         e2:27:0c:1c:39:2a:09:ce:eb:5d:6c:1b:03:70:b3:ee:88:ec:
         64:ee:f7:2d:9f:d4:1f:aa:e9:10:8f:a9:f5:29:5b:d7:c3:84:
         63:73:5b:ad:dc:bf:6e:ac:98:a2:69:82:4c:1c:da:e6:50:ef:
         a1:bf:c5:7c:b5:49:07:a9:8a:fb:af:90:d3:0c:dc:bc:66:e5:
         ef:b0:a0:fa:d9:b2:57:6e:4a:fa:87:aa:9a:0d:c4:80:8a:2f:
         3b:3b:08:b7:70:24:36:2c:89:6a:2a:57:9c:9b:59:35:a0:a5:
         1b:47:2b:a5:4a:97:f4:9a:c4:1b:64:10:e1:d7:60:dc:db:17:
         9d:24:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:08:47 2026 by rpki-client