Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File:                     4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier:          vcpQZoB0TFnsxXirudHYURr1eWoMlQZw4fONDFFvUAc=
Subject key identifier:   11:F9:28:31:E8:BD:53:B6:07:8F:A7:5F:23:90:D8:7D:18:B4:3D:0A
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number:          0341
Signing time:             Mon 27 Jul 2026 02:11:59 +0000
Manifest this update:     Mon 27 Jul 2026 02:11:59 +0000
Manifest next update:     Mon 03 Aug 2026 02:11:59 +0000
Files and hashes:         1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: a2UIMYZTwE+oZ8VA1ADwKb8p6FIl3QtkDgsEp34SV9o=)
                          2: C3CAF2B45FA411F1BEAC166C6447A888.roa (hash: eWIo7kbVQkKc0K9IfxrOFYr5X4owiTYv5hYN6CSCNfY=)
                          3: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: AInTRm364fWSsEgGDzFSbiLVDp6l9PBB3u+vGg6CfFw=)
                          4: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=)
                          5: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: qxr1xAZVPVy5IH5flTFbZouBg69ZSR0F1Rre519E1ps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Jul 27 02:11:59 2026 GMT
            Not After : Aug  3 02:11:59 2026 GMT
        Subject: CN=6a66be6f-66c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:34:8e:a1:a2:dc:b4:3b:39:cb:b6:c2:15:
                    c1:3b:e1:5d:b3:a6:f0:49:15:7a:14:95:d4:be:79:
                    0d:33:ff:cb:73:63:3d:14:a2:fa:20:3b:24:b2:94:
                    25:59:33:05:82:c9:7d:f6:62:dd:96:d9:90:a4:ad:
                    c8:4b:cc:cb:82:33:5c:a7:2e:16:be:b3:86:91:d1:
                    1f:cb:ad:1a:c0:3d:4d:02:0b:6e:59:4e:2c:e6:6e:
                    50:b1:2c:44:9f:f1:33:20:68:5a:c4:40:5e:e6:ff:
                    86:30:21:30:2d:d8:62:11:97:3f:ee:d4:ac:5c:e8:
                    8b:a0:34:1e:7a:3c:98:67:8c:27:ca:1d:0d:45:17:
                    4e:08:20:a3:47:42:d6:4d:bc:94:95:c1:f7:8c:8e:
                    42:69:71:d4:a2:50:85:93:fb:d7:74:f3:a1:98:b9:
                    e7:84:64:cc:07:c4:ed:76:77:ad:6b:45:59:75:de:
                    e4:d9:f9:de:ad:7c:28:e3:6e:9c:d2:d1:cd:2a:5c:
                    40:30:91:b6:e4:d4:97:06:8b:25:dc:3f:0e:52:00:
                    f2:a6:74:90:c7:b0:76:67:fc:79:c4:ba:74:f8:f8:
                    b9:20:90:26:e8:9e:bd:78:33:34:11:09:b2:be:9e:
                    30:c7:a4:ca:0c:de:1f:83:8d:4c:9e:7e:d0:bc:a7:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F9:28:31:E8:BD:53:B6:07:8F:A7:5F:23:90:D8:7D:18:B4:3D:0A
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:34:30:36:0e:d7:68:bb:78:47:07:75:0e:df:80:fb:3c:
         93:4e:89:57:00:34:49:f3:ea:e9:47:25:7b:be:4d:ef:04:62:
         d8:0a:8b:f3:20:74:5e:84:df:22:58:1d:74:0c:b6:15:9a:ff:
         4d:57:d9:99:4e:24:b4:8c:69:c0:5b:fe:87:98:2c:6e:8a:8e:
         47:e6:72:fd:69:ea:56:1f:b6:75:42:f9:d0:72:d3:fb:c0:f6:
         50:06:bf:ae:b5:e8:ad:31:27:7c:b7:af:05:ea:ed:64:07:e9:
         63:f2:ca:43:a2:59:bd:c8:48:75:0f:ba:cc:b1:9b:8b:b3:fd:
         93:1e:b8:11:98:e0:11:b5:81:7b:d5:0d:a7:1f:25:21:a7:dd:
         8f:74:15:e2:39:4f:0d:ff:e4:3e:99:b5:4e:80:b2:3a:45:a9:
         35:d2:72:2b:46:2b:c7:0a:9e:e2:01:80:46:cd:8a:b3:35:87:
         21:e7:79:5d:8e:de:52:96:ef:5c:d9:02:0c:9a:b0:f2:19:8b:
         5a:42:77:36:fd:a4:62:39:36:c3:3b:4b:94:84:19:e6:0d:cf:
         ef:be:f0:26:db:b1:c5:8a:03:59:71:4d:d1:b7:9d:20:0c:7e:
         97:de:44:5d:3e:c6:e6:9b:78:f2:a5:4c:b0:1f:c0:de:6e:d8:
         07:9a:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:47:18 2026 by rpki-client