Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
File:                     AflcxfCmuelnxvjzbH9k1CRLrHI.mft (raw, json)
Hash identifier:          WEZaE0waou6Kxyk4Dq8Th2OBkHcLKbSKF7vK7+MdmFI=
Subject key identifier:   9E:06:92:50:A9:48:24:A0:E9:D7:26:21:7F:A0:9D:CB:17:AB:BD:14
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Certificate issuer:       /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial:       02E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
Manifest number:          02DF
Signing time:             Mon 27 Jul 2026 02:26:49 +0000
Manifest this update:     Mon 27 Jul 2026 02:26:48 +0000
Manifest next update:     Mon 03 Aug 2026 02:26:48 +0000
Files and hashes:         1: AflcxfCmuelnxvjzbH9k1CRLrHI.crl (hash: JOmGzcrA3UKvmjPbhn51ItydGY/OIYi2ofBwrtXnDek=)
                          2: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (hash: akPAZSOa93x2Wngs9MzKkfgLP+esBNNQavCi79ZhFO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
                          rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169451, serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
        Validity
            Not Before: Jul 27 02:26:48 2026 GMT
            Not After : Aug  3 02:26:48 2026 GMT
        Subject: CN=6a66c1e8-3329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:95:59:44:5e:ad:66:9e:0f:ea:43:1b:18:
                    6e:bf:31:32:fa:b6:c7:86:7b:7f:45:9f:9a:ad:00:
                    75:b5:0f:19:99:30:e5:70:58:6d:ee:54:0c:42:3e:
                    ab:95:3f:80:90:04:8e:4b:c4:a5:a7:f1:81:e6:27:
                    37:e0:69:ce:ab:aa:22:71:3c:c6:dc:70:9a:80:e3:
                    3c:c8:1b:af:fc:2e:36:4b:7f:e6:c0:6c:8f:a2:72:
                    62:c3:d9:7a:3d:73:08:a9:d5:db:4b:98:c6:20:28:
                    1b:dd:09:ed:50:55:47:c0:74:1b:47:87:d4:6f:e7:
                    8d:9b:13:7b:2e:0b:40:3c:ed:04:8e:43:60:02:ad:
                    9e:49:a9:c0:41:c6:f1:15:41:81:40:e1:ba:83:00:
                    7d:62:3d:b3:c2:99:0c:0e:18:04:2c:03:50:22:60:
                    48:f8:28:ea:cc:e8:fc:61:b7:8c:47:c8:10:32:80:
                    2a:da:68:a3:49:95:a8:c4:01:35:e9:9b:7d:f0:58:
                    31:51:14:ab:af:80:bf:3c:56:0f:81:5a:53:65:3f:
                    aa:b7:bf:34:fa:32:62:31:54:13:32:87:24:36:ea:
                    67:df:f0:08:1d:b5:af:0b:02:f2:9f:b7:e8:b9:e4:
                    43:cd:0b:c2:51:5c:dd:b3:8b:eb:0c:22:9d:69:f0:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:92:50:A9:48:24:A0:E9:D7:26:21:7F:A0:9D:CB:17:AB:BD:14
            X509v3 Authority Key Identifier:
                keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:78:8d:b3:70:81:47:a9:8f:fd:b5:c7:9f:9a:71:e8:0c:
         ee:a3:6c:56:35:2d:37:ea:f8:16:16:27:bb:fe:e6:42:13:b1:
         19:cf:10:e6:45:da:3c:7d:ae:12:95:57:99:48:57:00:98:6a:
         d2:12:72:05:cc:ac:2b:9f:fa:85:a0:02:48:55:73:a3:c7:3d:
         f1:e3:5d:dd:8f:1c:06:24:ed:03:39:3c:57:e5:9f:10:fa:bc:
         c9:05:a7:13:71:26:9f:23:d2:8c:78:a2:0b:a8:70:81:e7:fb:
         cc:c1:f2:09:cf:3f:1f:13:f7:f7:c1:f6:d3:68:5f:f7:5b:36:
         73:11:cc:81:15:43:11:7b:81:1a:d6:7c:9a:b6:7c:75:9e:ac:
         a7:fe:49:b4:62:63:c5:69:3f:88:cd:cf:b0:29:b9:c8:4b:fa:
         06:36:5e:9e:4c:a2:7b:f5:5e:51:79:f0:32:e9:91:64:93:51:
         90:8e:25:fe:c3:03:3c:73:78:c4:55:4e:dc:90:b2:25:94:7c:
         50:68:ad:cd:61:ad:ae:d7:dd:80:15:de:16:79:34:0f:29:e7:
         d8:26:36:ef:0e:13:61:76:b0:a8:9c:10:32:7e:42:9c:04:0e:
         17:01:be:25:e8:a5:51:f6:15:63:32:e8:0c:b8:0d:cb:30:99:
         14:85:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:27 2026 by rpki-client