Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
File:                     aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json)
Hash identifier:          4J45UVpOTZAcQtD7p5v3bTD+E2KVJJtIlo3OdRVgDxM=
Subject key identifier:   07:9E:36:DA:35:8A:D0:3D:A8:AA:7E:36:EA:4D:75:8E:B9:E5:41:AA
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Certificate issuer:       /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial:       039D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
Manifest number:          038B
Signing time:             Mon 27 Jul 2026 01:51:22 +0000
Manifest this update:     Mon 27 Jul 2026 01:51:21 +0000
Manifest next update:     Mon 03 Aug 2026 01:51:21 +0000
Files and hashes:         1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: Om8AD9UtDpX8IFtqfcKjRP6URSgke951Yd9dYKMSJBM=)
                          2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: YaLUoS4NO6gvXeP/FB11InRUuC2v1zSJTE++6llurm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
                          rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
        Validity
            Not Before: Jul 27 01:51:21 2026 GMT
            Not After : Aug  3 01:51:21 2026 GMT
        Subject: CN=6a66b99a-d8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:7e:10:7c:b7:c7:d5:32:a8:92:14:29:9a:
                    4a:ad:67:0a:a4:62:21:28:f9:3c:fe:fb:db:9d:7a:
                    6d:f1:14:dd:04:4c:d5:14:c9:db:75:dc:2a:ad:96:
                    db:68:09:6f:16:c6:a4:d4:78:6e:fe:4a:1b:37:da:
                    2b:3a:51:1e:c3:00:88:ee:7a:dc:8a:cf:9c:8a:a9:
                    f0:84:38:fd:40:7e:70:fe:fa:72:ac:f4:24:1a:dd:
                    0c:62:02:6f:65:68:84:5d:2e:b4:07:86:1e:e7:02:
                    01:c7:24:3f:34:eb:90:46:50:e0:6d:c9:ea:4a:27:
                    34:66:6e:1a:ed:67:a4:a2:a4:b5:8b:84:b9:4b:0e:
                    b7:2b:29:27:40:8c:42:3a:fc:1f:cd:20:ea:34:65:
                    f9:27:48:58:00:6e:ec:92:30:4f:d3:58:08:87:81:
                    a1:e6:45:a0:76:0c:b2:d0:c0:e7:e7:5c:54:dd:6b:
                    53:5e:13:e0:62:bf:6a:ff:70:d7:d2:a6:c3:9f:2f:
                    9e:c9:17:20:2b:46:92:0b:05:c1:08:2c:4e:c4:69:
                    74:ae:a4:3d:47:2f:de:e3:51:5f:86:58:94:81:ac:
                    db:9b:f5:a0:ab:53:62:a4:fe:ff:bc:27:a9:3c:58:
                    56:4c:d9:57:50:b9:a2:2a:26:95:19:99:ec:a5:1a:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:36:DA:35:8A:D0:3D:A8:AA:7E:36:EA:4D:75:8E:B9:E5:41:AA
            X509v3 Authority Key Identifier:
                keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:d0:cc:a8:91:0a:27:61:79:c2:3a:f0:9c:ab:e9:45:e2:
         85:38:f4:d1:4c:ac:06:59:1e:d9:76:5b:d1:a7:07:ee:04:9f:
         85:60:a1:85:51:02:ea:f0:47:f4:4c:17:17:3f:f4:a6:1b:6a:
         16:c2:9e:f7:d2:1f:29:26:c4:74:dc:5c:e9:bd:54:58:c1:4d:
         1c:89:df:c0:c4:0b:49:f8:6e:2b:69:45:ca:cb:05:04:a7:c2:
         b0:3e:ee:cc:bd:34:ed:5c:8a:3b:bb:d2:b0:09:9f:13:d1:b7:
         d4:a2:47:51:f5:d8:88:3f:0c:aa:07:e1:b3:e3:8f:a7:bf:76:
         e4:03:b6:6a:8c:00:ce:d7:94:bd:8d:64:d2:b1:92:38:81:ba:
         99:cd:3c:38:5d:f5:86:8e:1d:94:72:dd:84:d8:4a:a1:3c:6d:
         35:01:57:47:95:fa:2b:cd:c4:0f:40:e4:20:5d:56:2b:ec:60:
         10:63:dc:56:8d:e4:45:4f:ed:e9:98:8f:68:8c:64:c0:5a:32:
         c9:e7:0d:41:df:52:47:b7:e1:b5:6d:77:ec:dc:43:05:92:4d:
         6a:30:89:bb:20:95:63:06:3d:86:88:55:ed:76:16:1b:61:21:
         02:3e:c4:5b:e8:2d:2e:77:6f:47:69:23:12:04:ca:c7:6a:c0:
         99:e3:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:18 2026 by rpki-client