Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File:                     sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier:          6+Mk/pHG9Tsvy8i9CcM836/F2CAwNdCADTQzjPQw2XU=
Subject key identifier:   AD:0F:A4:2C:93:F2:A3:64:22:97:57:1D:BE:13:F5:E9:BB:F9:09:5E
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer:       /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial:       0D53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number:          0D3B
Signing time:             Tue 28 Jul 2026 18:16:54 +0000
Manifest this update:     Tue 28 Jul 2026 18:16:54 +0000
Manifest next update:     Tue 04 Aug 2026 18:16:54 +0000
Files and hashes:         1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: cDjWU5eCWRUgPWtR7weqztUQ61LGUFigaFCmh0KD8v4=)
                          2: 5952728A100E11F18DCC78E3113D8C67.roa (hash: 4DhZatB6LL4lAu55O0tTy0XQ+dQbCozW4+CmbLY+jDk=)
                          3: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
                          rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3411 (0xd53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
        Validity
            Not Before: Jul 28 18:16:54 2026 GMT
            Not After : Aug  4 18:16:54 2026 GMT
        Subject: CN=6a68f216-793b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:67:f4:e7:b6:0c:21:3e:a0:6c:1d:03:f1:e5:
                    8d:ac:a4:e1:54:2f:db:14:ca:5b:11:3d:df:e2:86:
                    10:58:fa:5b:a5:46:99:cc:be:01:10:00:25:16:d4:
                    7f:30:6f:64:9d:9d:60:f3:59:c5:d5:66:5c:f5:25:
                    82:e1:a2:07:d0:b9:e1:bf:4f:e5:29:03:41:f2:9d:
                    cc:a0:3e:b3:5b:92:37:12:16:d4:ec:2f:96:13:22:
                    a8:f1:f8:36:8d:78:2a:84:5b:10:b8:89:c0:a5:a1:
                    7a:1c:44:9f:d6:0d:94:07:c0:49:f0:7f:60:66:e1:
                    64:fa:6a:50:a0:05:e5:e4:ed:ee:64:87:b6:c0:73:
                    31:2f:75:87:97:94:fb:89:5f:a9:2c:95:7b:b8:19:
                    77:a0:e6:dd:9f:c2:4f:a3:90:a8:4a:f5:dc:36:dd:
                    91:3f:db:4b:7b:b8:b7:ef:b2:0d:b0:53:f2:ca:ff:
                    68:5a:20:f5:79:ff:25:bd:ec:7c:01:84:44:0a:68:
                    27:8e:56:73:32:12:0f:a1:b0:ad:7f:50:60:69:94:
                    aa:14:63:b8:5d:c7:21:cf:aa:5d:53:2c:bf:33:96:
                    9d:58:2e:9a:f3:d7:b1:42:30:4e:37:03:23:99:32:
                    9d:20:cd:ee:c7:52:bc:4b:ca:ed:18:ac:28:88:03:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0F:A4:2C:93:F2:A3:64:22:97:57:1D:BE:13:F5:E9:BB:F9:09:5E
            X509v3 Authority Key Identifier:
                keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:44:22:7f:6a:a0:5b:2d:dc:18:c2:10:15:8f:10:3d:b3:c0:
         de:05:dd:0a:05:d2:76:86:56:e1:99:5e:36:c2:32:35:08:e5:
         b9:ed:cf:9c:37:20:66:a3:7c:34:28:4c:65:69:a3:53:cb:bc:
         47:32:14:44:da:6e:67:3d:c0:1c:0e:10:bf:4a:5e:7c:96:a7:
         fb:a9:f4:30:17:3b:7d:32:88:30:8f:fb:a9:3b:1a:78:1c:e5:
         db:fd:de:fe:cb:ad:aa:cc:b4:81:3f:10:89:6c:04:6a:f4:a9:
         ac:cb:5d:e5:27:9e:d9:71:3f:7d:db:35:f3:f3:e0:7a:8c:b3:
         e4:b2:6f:8b:57:3e:ee:f8:b2:87:6f:43:1e:80:d4:04:e7:06:
         8c:17:f4:f0:7e:8c:9f:53:6b:57:14:0f:f4:10:2a:63:c9:f9:
         b8:bd:bf:7e:88:f4:60:9f:0c:12:72:e4:bc:82:db:98:29:a2:
         2f:f8:33:06:26:7e:0a:1a:9d:3b:31:75:e8:8c:d6:cc:95:37:
         ef:09:53:c8:cf:e6:1a:e9:04:7d:d3:98:64:a2:13:37:d3:c6:
         6f:ba:2f:02:b2:43:ac:5c:f1:88:8b:04:8d:b1:7e:0a:d0:21:
         3c:cd:d6:4c:d9:b7:c5:79:6d:4d:8c:96:b8:78:e4:1b:ca:44:
         9a:c3:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:41 2026 by rpki-client