Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
File:                     vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json)
Hash identifier:          DH2xGgLKYfEFhe36s9dfpxl99auKj7HkzbiARBDO/rU=
Subject key identifier:   AA:2E:D3:85:E9:86:89:87:21:C3:5F:73:20:46:BE:DB:06:48:44:1D
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Certificate issuer:       /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial:       1F41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
Manifest number:          1F14
Signing time:             Tue 28 Jul 2026 16:06:59 +0000
Manifest this update:     Tue 28 Jul 2026 16:06:59 +0000
Manifest next update:     Tue 04 Aug 2026 16:06:59 +0000
Files and hashes:         1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: uDKbwFj+9dkn52ouACfAuLAdIZNWk16JgtWVw2kAM1o=)
                          2: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: 5Ecw3oats5AkjNp0HP71hd8W4T5v8KM41PLBROx3FeA=)
                          3: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: yXfDvxwixQCVNXGXtCqoWdhakT5p23NjgL5kMuTrTAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
                          rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8001 (0x1f41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
        Validity
            Not Before: Jul 28 16:06:59 2026 GMT
            Not After : Aug  4 16:06:59 2026 GMT
        Subject: CN=6a68d3a3-9a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:3d:b3:b9:81:ee:1a:7d:56:73:01:f1:7c:
                    a4:f6:d0:78:f0:04:ff:b5:30:86:18:9d:ea:e5:3c:
                    da:f4:4a:61:e8:39:48:57:86:03:56:89:f9:95:73:
                    d9:35:ac:0d:b1:61:60:f1:0f:33:e0:3c:81:96:e2:
                    63:d7:ff:bf:8d:f3:91:95:32:a9:60:37:23:7f:56:
                    c4:93:f8:eb:35:0c:84:c7:c3:b0:2f:9a:35:3a:4a:
                    83:51:5b:b2:86:45:b5:dc:c9:86:9a:7b:52:79:bf:
                    d3:e0:04:07:8b:21:87:20:cf:80:57:f5:58:99:cd:
                    fe:56:ca:eb:34:81:e8:5f:e2:00:2c:66:b4:38:81:
                    2c:29:72:29:af:0c:e0:92:2d:eb:39:b1:1b:d3:32:
                    60:2e:83:cf:48:c7:72:81:03:5b:76:98:a5:e4:e7:
                    00:94:bb:ac:d7:4d:20:40:8a:30:95:7b:e7:c2:c0:
                    98:1d:d2:2e:60:92:ec:60:d6:8f:5a:d7:e5:96:2d:
                    c6:9b:2a:a5:d5:3d:4c:9a:c8:c5:81:9b:95:03:91:
                    a7:ca:d0:d9:89:db:e3:6f:19:51:0e:41:b2:f0:8d:
                    eb:be:16:8e:d2:33:2a:21:f8:0b:92:ef:fa:86:58:
                    8d:2a:98:ad:fb:74:21:d3:85:4e:0d:48:90:58:1e:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2E:D3:85:E9:86:89:87:21:C3:5F:73:20:46:BE:DB:06:48:44:1D
            X509v3 Authority Key Identifier:
                keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ec:fd:18:1d:02:d3:95:ab:a9:5f:e2:32:18:79:12:ff:50:
         90:b1:cf:b0:12:1a:8d:d7:e3:06:0a:1f:fb:85:63:f8:d1:57:
         9a:ea:a3:3e:c2:7a:c5:3c:56:72:62:81:a8:1a:05:72:6f:d9:
         9b:89:27:86:bc:ff:d8:c0:ae:b4:91:b8:1e:5f:78:16:25:1e:
         a4:2c:65:7d:15:57:f1:d0:74:13:46:dd:c5:1c:13:15:92:87:
         ef:64:b8:58:a1:7f:33:71:7d:a6:ef:3d:81:fa:5c:d4:1c:c7:
         2b:7d:3e:69:83:90:ab:c3:0b:91:5b:17:d2:5c:81:1e:da:b2:
         12:e0:b8:96:ea:0b:e5:0d:21:99:5d:3e:b2:c8:cb:01:83:59:
         ee:e2:e5:af:87:25:a7:89:3b:aa:d5:78:81:bb:30:bf:5e:62:
         81:60:b7:bc:05:33:4b:a2:ca:52:57:80:70:f9:0b:b9:02:a1:
         99:bc:14:d4:8f:3c:77:c1:aa:4f:bc:b8:6a:b3:8d:f6:c3:a6:
         56:01:95:eb:3d:16:e2:96:ce:97:ae:10:d7:1f:7b:88:73:4b:
         8b:e2:31:01:b9:36:09:f1:fd:2d:4e:59:92:9f:06:b5:d4:25:
         7c:ab:2a:b7:09:4d:bc:30:cb:0b:52:c0:f7:c9:8b:32:9c:3f:
         32:bf:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:16 2026 by rpki-client