Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
File:                     fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json)
Hash identifier:          0rBG/vgBfxrCzJjN+/X11ir8Cq1zQ6aGYQa7RgU0Kk4=
Subject key identifier:   B8:AC:32:B7:1A:87:8E:07:23:DC:02:E9:E7:0E:D6:BF:65:A0:81:09
Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
Certificate issuer:       /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Certificate serial:       03B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
Manifest number:          03AA
Signing time:             Mon 27 Jul 2026 01:44:29 +0000
Manifest this update:     Mon 27 Jul 2026 01:44:29 +0000
Manifest next update:     Mon 03 Aug 2026 01:44:29 +0000
Files and hashes:         1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: gqhSImQih2Se1+Zb0AutxMtgQ0NrOiFgmuOqBQZRBv0=)
                          2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: Xl6LPHCgMIaL4uMyGZdF/u4P23v9oCG6fy6f1O7/cxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
        Validity
            Not Before: Jul 27 01:44:29 2026 GMT
            Not After : Aug  3 01:44:29 2026 GMT
        Subject: CN=6a66b7fd-9e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:24:2a:c2:3d:fe:bb:07:f2:d1:ac:97:21:
                    19:88:b0:31:98:c6:27:c8:bb:8b:4f:9c:1f:62:1d:
                    55:53:fe:3c:ec:e6:a6:5c:13:c9:2f:5a:a3:c7:ab:
                    97:6e:ad:6a:f1:2b:34:3c:77:37:03:66:11:6e:35:
                    9f:68:5f:c8:12:12:70:ed:f6:9c:37:84:38:b2:9e:
                    62:cc:0d:43:a3:c0:1c:48:7f:08:3d:0a:85:2b:25:
                    25:87:d5:f5:4d:54:2a:be:2b:6c:dd:bd:37:cf:e3:
                    61:65:34:4a:ee:d5:49:34:14:bb:d9:51:02:65:c7:
                    4d:87:66:37:97:e5:cb:af:12:3f:9c:f6:be:fb:ca:
                    68:8e:06:29:5e:83:0c:f0:73:5b:34:6a:27:18:0d:
                    59:95:23:06:62:54:dc:61:0e:07:30:11:9d:9e:b1:
                    53:74:97:1d:7a:e6:d1:fc:08:c2:12:38:2f:6a:86:
                    ac:f8:3c:5a:71:1d:7c:1d:80:6c:3a:6c:39:36:a0:
                    69:b9:c9:3f:31:d5:e9:57:0c:d8:23:f3:95:d9:a4:
                    31:54:9e:d6:85:b7:5e:6c:85:64:19:3b:2e:70:90:
                    7e:91:bf:ab:54:d0:a8:03:fe:d4:4a:a0:e2:f3:0c:
                    04:d8:a7:dc:1f:35:f4:f3:30:39:5a:da:66:42:63:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AC:32:B7:1A:87:8E:07:23:DC:02:E9:E7:0E:D6:BF:65:A0:81:09
            X509v3 Authority Key Identifier:
                keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e0:bc:b0:fd:58:10:af:66:df:45:4f:e1:6e:1f:3f:e7:e3:
         47:87:3c:98:bc:0c:c5:4d:7d:ab:1d:b0:ce:78:72:46:66:e3:
         76:cb:55:14:c4:b0:2c:35:cf:66:da:cc:f3:db:21:eb:79:04:
         f6:b2:5c:28:b0:62:ca:69:9a:1e:1b:fa:8a:87:a5:e2:06:78:
         2c:b9:d8:8f:64:52:0d:08:16:bb:59:39:6d:68:64:8c:ae:67:
         b6:73:a5:94:b0:66:72:75:b5:ba:b9:58:c2:74:a1:70:62:49:
         98:8f:d5:17:fc:37:9c:cd:0f:f1:6b:87:6b:51:82:f1:28:20:
         41:80:71:06:38:f9:c6:56:de:08:d9:c3:9e:6e:e0:af:17:80:
         11:db:29:8e:5e:c3:9b:bf:f5:44:68:6d:ba:8b:d7:da:c1:3c:
         20:54:72:15:29:ee:6b:1f:ba:35:03:97:e7:97:84:ce:82:55:
         06:50:71:ce:91:75:d7:a2:9d:22:e9:ff:76:70:04:74:30:ec:
         9a:5c:5d:7d:2e:ff:7a:40:01:35:0b:4d:54:94:76:b4:be:61:
         e7:05:1a:f4:d7:28:a8:a2:c6:29:1e:12:db:92:f0:07:f0:d1:
         20:42:c7:6d:f9:8e:66:21:e0:ae:fc:23:44:ac:61:6c:32:45:
         5f:3f:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:04 2026 by rpki-client