Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File:                     jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier:          LbzX7cb5YOG5U2912ygdoupumNuudHHRVTERlCfAtpM=
Subject key identifier:   0E:7B:19:7B:C2:D1:AA:64:DA:DB:74:1D:E4:DF:ED:00:D3:43:90:BE
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number:          0173
Signing time:             Mon 27 Jul 2026 06:34:43 +0000
Manifest this update:     Mon 27 Jul 2026 06:34:43 +0000
Manifest next update:     Mon 03 Aug 2026 06:34:43 +0000
Files and hashes:         1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: BI+R95fy9+mNGJeZTtl63/+aGvv1rfQBKi0PkIt4L0g=)
                          2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
                          rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: Jul 27 06:34:43 2026 GMT
            Not After : Aug  3 06:34:43 2026 GMT
        Subject: CN=6a66fc03-587c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:92:40:3f:27:42:b8:f9:f2:06:c7:13:0a:
                    95:19:55:5b:47:be:c4:84:a2:4d:4c:4a:62:c0:56:
                    fc:bc:f1:40:0a:85:0a:e4:75:0e:df:71:4f:8d:a7:
                    c5:69:b8:95:5b:b9:95:7e:81:4e:25:52:82:43:72:
                    0b:e1:d8:55:c9:de:8f:8b:72:57:36:e9:8b:40:13:
                    08:3f:29:60:f0:f7:e8:00:1c:02:8f:d7:5b:63:5c:
                    64:4d:52:51:7a:45:e3:bc:e0:cc:84:83:2f:4c:b1:
                    81:5b:a5:fe:72:98:eb:d1:3b:b1:df:24:24:22:fa:
                    0b:7b:f4:fb:05:03:78:c5:9c:3a:d9:df:83:7b:59:
                    4a:79:51:04:06:0d:d9:04:7e:2b:67:db:ea:37:5f:
                    02:0c:72:a1:bd:bb:69:f7:2f:c7:80:51:07:ee:77:
                    0f:ad:d9:9c:67:13:1f:d8:9c:44:31:5f:63:61:c6:
                    da:0e:a2:4b:c6:be:16:eb:83:21:1f:02:0a:6f:32:
                    f7:31:72:41:73:26:29:a3:a1:20:81:98:c3:3c:73:
                    ff:5a:91:e7:b4:e3:5f:e0:dd:60:24:d1:56:1c:06:
                    8b:f2:c0:ac:bf:ce:c4:b7:31:9a:d4:e3:3a:2a:9b:
                    aa:bd:19:1a:d5:f3:54:3d:90:f9:05:9d:4c:c7:b8:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7B:19:7B:C2:D1:AA:64:DA:DB:74:1D:E4:DF:ED:00:D3:43:90:BE
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fc:1f:c0:cb:3c:9c:c5:98:57:1d:1b:38:96:07:80:da:4c:
         ff:52:70:71:79:19:81:bc:5a:c2:ff:8f:07:41:24:5f:f1:a3:
         56:34:ad:aa:6a:c5:08:e0:c1:cd:aa:97:af:f4:81:d9:e3:b0:
         29:41:52:a7:24:a5:0d:c4:25:7b:6e:03:80:58:73:23:a1:94:
         8a:ca:e4:54:3e:4f:f4:17:70:b0:da:f2:25:22:3b:39:f9:c7:
         9e:0c:15:af:53:3f:15:bb:7b:15:1f:62:41:ec:39:22:86:61:
         33:c9:e4:b6:57:ee:aa:ca:93:e7:d7:42:87:a7:09:d0:cb:c2:
         66:7e:16:d6:62:f4:08:e5:32:53:53:db:48:f7:33:c4:b1:be:
         38:bd:c6:6c:d9:6f:b1:01:b1:6f:2e:29:d0:33:a2:50:dd:a7:
         cf:66:5a:d1:08:c2:3f:e3:60:60:66:d5:18:47:f2:28:b3:dd:
         cf:a2:6f:83:a5:63:a2:d0:35:d9:1f:f4:bb:1b:ec:fe:d3:95:
         70:fb:5c:cf:eb:f5:9c:f0:91:3e:2c:ca:5a:d0:c6:5c:cd:7b:
         34:7e:0d:9f:d8:3a:9f:d5:e6:03:b3:df:05:d1:74:29:62:03:
         32:3a:fd:d1:c7:c1:84:71:1f:6f:a8:a5:a0:10:ef:7c:9b:48:
         3a:88:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:39 2026 by rpki-client