Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File:                     G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier:          DkL7Z5wlsWuYu8taw133x2T3jsrsnC3yHf3SeY9NEVs=
Subject key identifier:   83:07:BA:F8:34:87:F0:0D:4C:0C:25:1E:E5:A2:B3:E9:DE:74:9E:50
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer:       /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial:       05DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number:          05D3
Signing time:             Sun 26 Jul 2026 23:54:24 +0000
Manifest this update:     Sun 26 Jul 2026 23:54:24 +0000
Manifest next update:     Sun 02 Aug 2026 23:54:24 +0000
Files and hashes:         1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: LWBtH7V4f/kHwXx1mOpvsWElwZvL9bv1cWNJLwsJEGg=)
                          2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
        Validity
            Not Before: Jul 26 23:54:24 2026 GMT
            Not After : Aug  2 23:54:24 2026 GMT
        Subject: CN=6a669e30-1b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:ec:6e:4d:f1:37:72:24:21:d8:29:2b:50:
                    cd:25:de:bf:db:cf:4b:81:06:08:e9:b8:b7:8b:3a:
                    17:b9:36:d6:f9:eb:a8:ca:29:84:cc:16:cd:0d:4e:
                    40:7a:7a:98:7e:02:88:a0:3d:b1:09:95:0a:72:e6:
                    29:34:23:82:98:7c:17:7b:db:a6:c4:06:35:be:da:
                    e1:39:a6:4e:a1:cd:0e:28:8e:c0:18:23:82:13:f2:
                    7f:8b:3d:16:8f:39:33:fb:99:48:13:37:52:1f:0d:
                    46:1e:68:85:cb:69:c1:b8:9e:0c:1a:cb:23:16:9b:
                    98:7c:8c:a4:6e:6e:16:93:25:c1:73:be:3a:fa:8f:
                    11:49:60:1f:e6:31:3d:ab:ba:bb:ec:32:07:93:9b:
                    09:8d:c3:06:1f:9a:e1:78:5d:02:e4:28:7b:72:3a:
                    06:9c:0a:f1:b7:1a:18:0e:2f:a0:a2:27:08:53:e2:
                    72:03:69:97:c5:f4:c4:c0:14:0e:0d:95:d6:99:35:
                    ae:f3:16:19:d7:c7:5b:ec:d7:25:68:18:ba:8a:2a:
                    c8:be:b8:42:d3:2c:37:26:55:a0:0c:03:21:d4:ea:
                    24:cb:a5:41:45:71:22:68:f4:c1:4d:22:bb:d5:f6:
                    b0:b1:5e:b4:af:51:f0:45:e9:2d:ca:d5:47:77:06:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:07:BA:F8:34:87:F0:0D:4C:0C:25:1E:E5:A2:B3:E9:DE:74:9E:50
            X509v3 Authority Key Identifier:
                keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:9d:66:cf:ea:17:69:70:41:91:e2:cf:e5:bc:73:84:ef:
         8c:04:30:3d:50:30:2e:25:39:61:c7:fe:bb:32:ff:60:20:67:
         6f:48:5d:86:e9:d3:ec:81:15:69:45:00:ef:2e:23:ed:94:66:
         22:63:23:05:2b:a0:7b:9b:6e:dc:a7:0c:15:61:70:24:a7:09:
         dd:55:53:75:c3:c8:ad:a2:a4:e7:65:3f:7d:3a:c7:1f:93:44:
         91:83:7b:00:94:97:da:40:b3:05:a4:27:81:80:b8:b8:d3:2b:
         3b:1d:32:89:4e:32:c3:cc:46:36:04:c8:3c:da:fa:dd:f5:b8:
         8b:6b:df:1d:8d:19:51:c1:18:83:21:8e:bd:0c:5b:3f:22:60:
         01:a2:65:b0:55:17:12:ea:3d:35:85:c2:71:a9:a4:78:73:96:
         05:d8:d6:7e:d7:65:ec:00:2b:1a:c7:9f:a3:ad:8e:f5:00:b5:
         52:f1:d1:83:b6:88:61:10:ca:f7:e1:5c:39:0f:2f:fa:1f:23:
         57:f6:e8:cf:5d:55:80:be:b6:4c:14:d5:35:db:67:db:9b:06:
         64:44:0a:ed:27:68:5a:15:1b:f0:83:49:97:41:82:18:60:71:
         2b:96:ab:41:97:36:7b:da:1e:35:7c:1b:72:93:24:97:50:87:
         77:ee:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:13 2026 by rpki-client