Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
File:                     pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json)
Hash identifier:          0vxSYeQdt+8NRozQ4OT/tg/yF3WGSPVYxhmLyKrtbAQ=
Subject key identifier:   F6:94:CC:43:19:E1:A3:9D:01:4F:3C:2F:A9:13:B4:7D:4B:BC:B2:81
Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
Certificate issuer:       /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
Manifest number:          022F
Signing time:             Mon 27 Jul 2026 04:18:55 +0000
Manifest this update:     Mon 27 Jul 2026 04:18:55 +0000
Manifest next update:     Mon 03 Aug 2026 04:18:55 +0000
Files and hashes:         1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: iwWOTNWUAiGdT7zvj0nsAJ/1v4CV5PVS/+jnnG/ZChI=)
                          2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: SGEw+Wke9h17PBLbOBO5SyI9VOxovY3gn1ceeJEPhms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl
                          rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
        Validity
            Not Before: Jul 27 04:18:55 2026 GMT
            Not After : Aug  3 04:18:55 2026 GMT
        Subject: CN=6a66dc2f-b701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ae:be:eb:7f:66:ea:00:18:1e:e3:83:67:fd:
                    5d:d2:91:09:15:1a:c8:81:09:f2:50:11:50:5b:9c:
                    fb:f5:76:02:8a:3b:d7:08:a7:32:bf:d3:d4:70:57:
                    da:35:eb:fb:4b:05:bd:1c:56:71:b8:4a:a9:ea:8f:
                    ae:0b:6e:17:41:4e:c8:0c:b3:59:d8:1e:48:23:93:
                    12:2e:11:3b:48:21:5f:ae:cb:3e:51:8f:1d:21:c0:
                    65:c3:0f:61:82:c1:8f:99:74:40:ab:31:23:77:7a:
                    23:02:80:b6:c8:d0:f7:d0:77:14:a7:f7:f3:e5:37:
                    77:8b:5a:fa:73:67:c7:c9:5d:0b:bc:4a:8b:eb:2a:
                    f8:a4:06:b6:13:87:40:94:b7:00:49:4d:05:1f:cf:
                    73:60:87:b0:3c:40:b7:75:17:cc:5e:38:00:88:77:
                    25:af:00:55:4a:7a:44:52:d0:aa:1f:10:1d:30:b6:
                    76:30:6f:5f:57:a3:20:b6:de:40:00:9a:e4:16:af:
                    a9:a0:8a:e3:ee:31:d1:b9:5f:3d:fb:77:11:be:98:
                    1d:3b:6d:1c:d3:b0:71:a6:27:e6:47:5c:48:0c:27:
                    20:9b:db:d1:1a:f9:03:31:c7:a5:5f:18:67:8c:55:
                    0e:48:cd:ee:a2:7a:a4:6a:d9:d1:fc:c8:14:9e:90:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:CC:43:19:E1:A3:9D:01:4F:3C:2F:A9:13:B4:7D:4B:BC:B2:81
            X509v3 Authority Key Identifier:
                keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:d0:5f:05:9e:be:0e:31:22:5a:76:01:57:ec:a8:ea:4a:
         1e:0d:1e:f6:58:b9:14:6e:aa:8b:1f:06:00:e1:57:fd:4b:63:
         46:80:c6:34:cf:e6:3b:74:a5:6e:42:55:d5:4b:61:b3:02:ed:
         d9:1a:a2:14:bb:4c:b3:9f:c5:41:01:45:0f:c5:88:3b:79:8f:
         cf:46:d4:33:54:83:71:4e:48:8f:4c:e3:3b:bc:ab:31:51:57:
         b4:82:90:28:c5:51:d0:c7:99:94:4b:04:89:03:e3:bc:da:72:
         b6:14:4f:6d:f6:1b:a2:1f:23:9d:bd:b6:02:8f:56:20:c6:b0:
         e3:33:42:14:04:d8:6e:32:55:e0:b7:15:9d:bc:44:5f:57:a1:
         0a:fd:cf:06:50:0a:68:fc:92:5e:25:1e:cd:5a:66:a4:37:7b:
         a0:1f:ff:ce:de:df:e2:73:9d:61:c5:59:59:90:e9:39:f7:67:
         dc:3b:7f:34:8f:eb:22:17:4e:4d:f4:32:26:4f:4c:9e:50:9d:
         84:11:3a:9c:60:5c:2b:5c:88:88:bc:7d:f9:2c:6e:8a:a8:50:
         1e:65:e2:af:8b:d3:15:38:86:00:62:c1:9a:a0:a0:4a:d5:16:
         b3:66:1b:c4:43:57:3b:ee:25:e2:b1:04:37:28:ab:e3:5d:8b:
         fc:46:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:59:37 2026 by rpki-client