Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
File:                     4dFD2djqAiJMHLDJFey4TuKLWqo.mft (raw, json)
Hash identifier:          6+nzpT+rZmx0OkVZtz6ZlzMF/CS72uMymCcIus9p2aU=
Subject key identifier:   E0:D1:F7:84:09:F0:D1:28:89:8A:C8:9A:C0:9F:C4:72:05:4D:FF:5A
Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Certificate issuer:       /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
Manifest number:          026D
Signing time:             Mon 27 Jul 2026 03:33:26 +0000
Manifest this update:     Mon 27 Jul 2026 03:33:25 +0000
Manifest next update:     Mon 03 Aug 2026 03:33:25 +0000
Files and hashes:         1: 4dFD2djqAiJMHLDJFey4TuKLWqo.crl (hash: HvAShZvIcccKCIg11xmjWT2tIEMvwLkpJcBeQz0i9+Q=)
                          2: 916EFEE0DA6011ED9BC6175FC4F9AE02.roa (hash: RremoPLYHwOMsWIoI3OXSWs8zLNwfSA8SoWwpFXqkZA=)
                          3: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (hash: sE0FXcv6AB6dmDFKiWcu8KQiOOpk2VVY0iuOGiUmgoI=)
                          4: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (hash: GKQTSqIzwIY4GOth+FkYLT5SOAlB26R/4wVLOg8mq+Q=)
                          5: 9283C1F8DA6011ED9BC6175FC4F9AE02.roa (hash: LUHYZ/6kqurL/jOA9WsqOIbXqqpGM7KM4Mk7l+DENE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
                          rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
        Validity
            Not Before: Jul 27 03:33:25 2026 GMT
            Not After : Aug  3 03:33:25 2026 GMT
        Subject: CN=6a66d185-8944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:08:38:21:2b:60:6a:40:bf:e4:e2:0e:80:
                    00:6b:48:7c:3e:a0:d9:a8:58:6a:23:62:69:ef:57:
                    45:44:d1:2e:a1:86:11:a1:7f:56:fc:c8:d3:7a:63:
                    66:65:d9:f5:f6:65:29:98:e7:47:fa:d0:25:4f:5c:
                    15:a7:3f:f6:40:18:ca:01:d6:66:48:a0:28:ef:5f:
                    6a:64:88:ae:83:68:ba:dd:91:e5:e3:78:63:fe:36:
                    28:b7:2f:c8:f9:2d:b0:64:1d:40:27:3b:a4:d6:31:
                    06:c5:39:83:38:e5:af:ad:78:1a:cb:f4:ea:e0:b4:
                    26:85:cd:96:5f:fe:b8:a2:c1:99:45:da:3c:de:59:
                    02:50:de:42:01:f1:54:31:ba:d0:dd:58:15:de:e4:
                    3d:f5:0b:d0:ae:39:ba:b4:89:0c:48:3a:16:2a:34:
                    ff:d4:68:d1:d0:f9:1e:8f:f3:69:21:a4:4b:f5:78:
                    87:8f:45:c4:fd:03:bd:e9:cc:07:85:30:a0:47:7f:
                    4a:ea:d6:63:f6:70:51:41:5e:3b:9f:cb:df:77:95:
                    f2:b2:74:07:64:1f:76:94:ff:1b:bc:df:11:9f:3f:
                    49:2e:04:0c:fa:3a:ef:34:1a:f6:b3:f9:77:99:08:
                    22:cb:d3:21:6d:39:bc:97:db:62:c1:44:d1:4a:08:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D1:F7:84:09:F0:D1:28:89:8A:C8:9A:C0:9F:C4:72:05:4D:FF:5A
            X509v3 Authority Key Identifier:
                keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:58:6f:2b:a5:d6:b9:a6:fe:ed:04:b0:37:a5:6e:86:09:59:
         af:d0:e1:09:2c:a8:6b:ec:f7:65:70:3e:a4:9e:16:be:b2:71:
         4d:ad:30:10:e9:70:0f:cf:d2:50:95:85:16:ef:53:af:92:19:
         ec:ee:02:b5:ed:c2:9e:71:73:48:79:15:1f:cb:fa:e6:f1:ff:
         60:19:19:de:47:86:cc:9e:93:4f:0c:e8:5c:88:57:2c:19:72:
         dd:6b:06:7e:e8:ef:9d:d0:93:f4:d4:5b:02:9e:9e:0f:be:78:
         22:cd:c2:7c:69:d7:3f:d4:07:00:e1:dd:d6:85:2d:66:23:7b:
         51:4b:51:9a:99:4b:a1:d1:83:a6:56:73:72:b5:dc:f0:70:1d:
         a4:ad:35:2f:e9:88:70:d5:1c:69:9e:20:9e:89:77:b7:41:a8:
         64:e8:3f:88:5c:6c:ff:21:be:e6:b4:35:6e:17:44:fd:7d:3e:
         47:f6:7a:db:6d:ff:08:30:04:df:96:da:fb:2f:d2:55:85:c8:
         c2:df:01:76:24:95:51:2a:a7:9f:18:e6:8d:32:96:d9:9b:ab:
         49:c7:4f:62:7a:6b:81:af:94:ca:60:de:b0:a0:76:aa:1b:0b:
         dd:d8:7f:a6:8c:15:23:fe:51:94:ff:e9:e3:5c:31:a7:62:30:
         14:d6:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:10 2026 by rpki-client