Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
File:                     RFYGB9mXqksKc6pXxvY1ND3QGNY.mft (raw, json)
Hash identifier:          +CqtzLPoPM/n16XhlxMH4/zl/MDNhaRfHpjFGbtKk8c=
Subject key identifier:   6C:31:8D:60:B7:DB:E9:16:31:A6:66:35:0E:FF:4A:92:AB:97:8E:93
Authority key identifier: 44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6
Certificate issuer:       /CN=A917047F/serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
Manifest number:          0F61
Signing time:             Sun 26 Jul 2026 17:50:12 +0000
Manifest this update:     Sun 26 Jul 2026 17:50:11 +0000
Manifest next update:     Sun 02 Aug 2026 17:50:11 +0000
Files and hashes:         1: RFYGB9mXqksKc6pXxvY1ND3QGNY.crl (hash: WlrhIcrAV8hqfTjBG6FLUtwi96kl4JgCraf4ipLTveg=)
                          2: 58A1565020E711F19CC84E688AEE528E.roa (hash: is3dWN0Su2mbaSEiG0w1bwbtnKZ0EJhAU5pPfLOo5P8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl
                          rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 17:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917047F, serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
        Validity
            Not Before: Jul 26 17:50:11 2026 GMT
            Not After : Aug  2 17:50:11 2026 GMT
        Subject: CN=6a6648d4-e80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:d5:c7:f5:a5:8c:fe:b7:53:bd:6c:58:d4:
                    40:78:a5:4b:5e:81:21:cb:e3:8b:e7:0d:86:ba:a7:
                    84:28:46:b5:77:cf:2c:a9:5f:50:45:e9:3e:1e:0c:
                    71:fe:66:19:51:82:f0:96:52:f4:1f:b0:2b:1a:88:
                    37:ae:53:86:50:aa:c5:1c:ee:fc:c7:8c:6d:ed:5b:
                    e0:b5:96:29:81:81:5d:2a:d3:53:a9:f6:29:c4:4f:
                    6b:34:12:a8:ed:6a:74:ba:7f:10:66:59:31:75:be:
                    ec:c4:28:9e:04:e8:ae:87:45:fc:d7:76:7b:e2:e0:
                    ad:78:a5:3a:14:7f:45:82:65:58:ce:ff:d5:88:3a:
                    1a:6a:8b:dd:68:f8:8f:c7:b1:fc:3a:c6:4b:a1:c3:
                    03:a3:26:9c:f8:36:54:bc:21:f4:32:85:0d:37:a6:
                    eb:6b:37:7d:9b:52:da:c3:91:37:bb:a4:66:c6:a9:
                    da:91:b0:4c:d3:7f:f4:1a:65:3c:de:a4:31:42:29:
                    20:0c:11:47:72:30:ef:b0:5a:b0:15:de:9e:ab:f6:
                    8d:50:99:38:7e:d9:40:fc:08:50:0a:0d:77:53:87:
                    cd:ff:a5:18:58:b8:64:c5:cb:d7:26:58:30:89:b6:
                    3d:d4:02:3d:b1:7f:b2:75:6c:ca:2f:6e:01:b7:e9:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:31:8D:60:B7:DB:E9:16:31:A6:66:35:0E:FF:4A:92:AB:97:8E:93
            X509v3 Authority Key Identifier:
                keyid:44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:64:b9:a6:7f:38:8e:06:83:92:d3:67:c3:37:10:0d:f7:
         d5:44:bd:2f:a6:a9:6c:a9:9c:1e:ad:a1:f4:9f:4e:51:5b:69:
         c4:c4:7c:59:12:f2:47:b1:cf:48:f2:70:e7:c4:a6:90:1f:92:
         96:59:c5:17:df:18:1f:5b:77:a5:33:59:e8:6c:f3:b2:a0:a5:
         e8:f9:cc:68:14:22:3d:38:97:0f:f1:d9:ad:2f:f3:59:da:b9:
         9d:f6:41:5c:b7:37:b0:8a:f8:dd:c1:ce:08:b1:6b:57:86:88:
         ee:46:08:6f:12:9e:ba:10:62:90:72:86:01:66:07:73:44:59:
         56:8e:de:17:32:3e:61:c9:89:d5:2c:54:3a:01:10:86:1f:29:
         f0:ee:be:ec:33:ee:e8:16:80:91:31:ed:dd:56:dd:4c:7b:e1:
         e4:c8:89:79:a1:6f:76:7a:82:7c:ec:08:84:b4:16:54:8e:f9:
         6f:a7:83:2a:41:4a:75:48:10:52:f6:35:db:97:bf:94:92:f0:
         51:f8:78:64:a4:bb:cf:d5:2f:78:3c:6d:39:4e:26:33:8d:26:
         90:04:48:ee:8a:f6:fe:60:65:a4:2b:90:aa:71:a0:60:d7:88:
         32:92:3e:87:33:4e:b2:68:ab:0e:84:f7:f4:44:31:d1:85:bf:
         e1:03:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:53 2026 by rpki-client