Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
File:                     A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json)
Hash identifier:          PuUvXcWHjqYOuEyPOTNucgJ7LFLt+K4VASSOcYgAKkw=
Subject key identifier:   6D:00:B1:E3:ED:17:0A:35:E8:F0:57:DC:C9:3A:90:30:A6:FF:7B:46
Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
Certificate issuer:       /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Certificate serial:       170C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
Manifest number:          16F4
Signing time:             Tue 28 Jul 2026 16:46:02 +0000
Manifest this update:     Tue 28 Jul 2026 16:46:02 +0000
Manifest next update:     Tue 04 Aug 2026 16:46:02 +0000
Files and hashes:         1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: aZjwYs9L5wB9jpq1hnAJ73sazgpCeB9OWF6WM/ZeFwA=)
                          2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: vxWTeDCOHWuEhOaJAF4VGFM0DqtGWr26nr5q8brIPcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
                          rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5900 (0x170c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
        Validity
            Not Before: Jul 28 16:46:02 2026 GMT
            Not After : Aug  4 16:46:02 2026 GMT
        Subject: CN=6a68dcca-9c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:00:d5:6e:46:7f:0d:2b:5b:05:1f:3d:79:
                    89:77:73:f2:59:3b:36:40:7c:1a:d8:1b:e4:a8:cd:
                    8a:92:00:c9:cd:d8:eb:60:f2:b6:f8:bf:9f:5b:62:
                    b6:ac:ad:82:92:42:c8:4c:30:13:ec:37:ae:9a:a5:
                    25:de:1e:91:20:bd:54:f0:43:90:98:c6:63:86:96:
                    9d:27:87:50:5a:d9:77:e4:68:b7:ae:31:5b:82:19:
                    de:a0:2d:87:b9:15:ac:61:22:ab:6b:9b:7e:c9:a0:
                    cb:99:14:17:d9:41:5b:91:4c:5d:94:18:17:bb:60:
                    8f:2a:cc:2f:07:77:cc:46:bb:bf:07:d3:28:5d:f3:
                    2c:d3:97:0c:bb:3f:34:b8:b5:62:77:17:b1:29:82:
                    8b:53:7c:b4:4b:26:d1:ab:c3:3f:c1:65:31:f0:4a:
                    fe:62:ec:36:f2:14:26:30:95:17:bb:81:31:ae:d8:
                    45:87:2d:67:7d:ea:cb:6c:85:99:ef:c3:8a:fe:d3:
                    f4:56:98:45:1c:05:c2:e0:20:56:4c:f0:e9:df:6a:
                    ef:ed:82:34:a7:38:14:ca:62:d4:87:f9:bc:1a:7c:
                    e5:a6:5e:84:de:99:17:a5:b7:39:2a:d6:5a:67:74:
                    74:22:6d:c6:d1:54:ee:f6:28:81:ac:b4:c2:7e:12:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:B1:E3:ED:17:0A:35:E8:F0:57:DC:C9:3A:90:30:A6:FF:7B:46
            X509v3 Authority Key Identifier:
                keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:92:0c:13:6d:d3:43:67:fd:cd:64:c6:fd:6b:27:15:dd:a7:
         b9:e1:56:19:1e:65:a7:ce:b2:fd:33:4c:cb:57:8b:a5:2a:8d:
         18:2f:81:20:09:3c:84:2a:ac:77:1e:a6:88:83:90:da:73:1f:
         5c:77:dc:63:8f:20:e0:3a:4e:b8:3c:db:5f:90:97:31:ee:19:
         11:24:0b:09:11:a8:b4:fe:cd:99:f8:9c:df:60:99:a7:65:93:
         3d:23:43:f9:f2:c4:c2:5b:ff:c7:04:31:c8:31:07:98:b2:56:
         62:55:20:79:af:9d:8d:b1:8a:67:19:b5:82:f0:fe:de:69:08:
         c2:c0:52:d0:18:be:6e:5a:77:92:e5:6d:40:81:b9:6c:a6:6a:
         21:ed:48:98:dc:6d:a6:bc:20:79:8d:84:60:d8:ed:d8:d2:f8:
         c3:75:33:39:4e:b3:a1:72:a3:52:cc:71:be:96:be:f6:c1:63:
         5e:36:81:96:9e:03:23:81:c2:b2:ce:c5:6a:a6:f9:a1:34:f0:
         68:d6:07:8c:91:db:6a:9e:4f:7f:03:8a:11:09:44:a3:2b:26:
         7d:22:ab:2c:83:00:18:89:1b:45:71:a5:ac:3a:87:8b:ae:0b:
         d6:22:32:be:11:57:0d:84:74:fc:61:2e:2a:25:4a:f1:60:21:
         53:f8:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:54 2026 by rpki-client