Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File:                     B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier:          oFINorOVcEQCXtMkqpbU6ytXt1WEDcnGT1Zudj4qB3Y=
Subject key identifier:   DC:E1:3D:8A:22:06:2F:6D:5B:20:3B:50:4D:B2:B8:7F:77:15:19:DC
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer:       /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number:          0141
Signing time:             Mon 27 Jul 2026 07:18:18 +0000
Manifest this update:     Mon 27 Jul 2026 07:18:18 +0000
Manifest next update:     Mon 03 Aug 2026 07:18:18 +0000
Files and hashes:         1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: Ie7PayVok3Er9Wz/hEOZhgpefo5bpStOZxwmxef+krw=)
                          2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: PJLa3dcXC2/TqvhR77SxkhOWTThse4ZX840dFNg6P88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
                          rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
        Validity
            Not Before: Jul 27 07:18:18 2026 GMT
            Not After : Aug  3 07:18:18 2026 GMT
        Subject: CN=6a67063a-6249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:eb:e2:db:b1:c9:aa:8e:56:c7:71:2c:83:
                    e5:4c:ea:43:28:8f:79:2e:70:1b:34:41:4c:27:61:
                    0a:28:b9:8d:a4:81:ab:17:55:17:c9:77:8f:f4:d7:
                    ac:a2:65:e6:37:10:07:a2:9c:31:c4:cb:10:fb:54:
                    c8:be:1e:5b:9b:44:69:a6:09:f0:18:bd:11:4b:98:
                    6c:ee:cf:89:52:60:12:65:e2:17:85:46:22:12:fe:
                    fb:16:00:3c:20:66:b1:4d:fe:72:f8:ac:92:4c:fe:
                    8d:f3:fe:20:28:13:e6:7e:b0:63:b7:b9:96:c3:11:
                    b6:e9:7d:d1:7b:68:b1:55:08:9e:d4:fd:3f:a8:1b:
                    f3:9d:ad:34:28:f4:45:60:95:c0:ca:39:55:d3:a3:
                    bd:c5:4c:69:03:38:d3:e3:e1:51:ea:cf:c6:5c:af:
                    16:08:90:66:f1:9f:c8:40:ed:f4:28:65:39:21:92:
                    f2:4b:9d:7f:45:4a:ec:ec:8b:13:23:ee:31:14:81:
                    0e:bd:2b:9c:81:ce:1f:0a:fd:46:14:2b:36:c4:cd:
                    79:e9:a4:cf:8b:39:8f:e0:8b:1d:d4:8b:1f:31:5d:
                    02:f3:70:a3:08:d7:87:48:19:38:79:91:b1:72:f6:
                    0d:ab:c3:76:58:a9:25:de:2a:64:ca:4a:98:25:58:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:3D:8A:22:06:2F:6D:5B:20:3B:50:4D:B2:B8:7F:77:15:19:DC
            X509v3 Authority Key Identifier:
                keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:94:17:5a:b3:61:3c:68:fc:cc:e7:ae:8c:75:2e:19:79:0a:
         43:71:26:ed:3f:fc:42:b6:82:a0:80:dd:0a:f7:a0:44:66:35:
         54:b8:98:d6:14:7a:46:e9:9d:b2:33:da:4a:2c:ce:83:ab:fc:
         e8:52:d2:96:b0:fa:fa:eb:24:b8:85:e1:7e:70:a2:6e:8f:c5:
         7f:eb:7b:02:6a:2e:6d:d3:e1:dc:cd:43:58:60:83:3b:50:fa:
         ba:1f:70:7f:2f:1d:53:c8:f0:50:39:4d:e3:4b:f4:a3:b7:e0:
         64:16:39:d4:02:4e:51:d5:c2:92:76:a0:3d:70:09:6d:9a:08:
         42:02:d3:ce:66:c2:9c:ef:3a:a8:19:7a:ce:32:79:c2:28:6c:
         46:f9:a4:1d:e7:0b:4f:df:b4:34:f0:39:31:b6:36:b0:11:8b:
         0e:23:e9:08:80:8a:aa:7f:ef:4c:06:c9:a7:6b:a0:1e:23:88:
         85:7c:1c:24:f0:b8:9b:c4:c8:63:e5:47:cd:59:42:0a:33:dd:
         d5:fd:ab:3f:32:80:5e:9a:7b:8a:db:f7:5b:1e:f9:e0:b1:6d:
         2c:65:12:c8:97:2e:e6:5a:e3:53:ec:7b:c4:f3:c2:f0:6c:e0:
         60:85:6d:ff:da:6d:49:0f:ad:97:fb:c0:62:10:01:a2:19:f7:
         85:b9:c2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:40 2026 by rpki-client