Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File:                     4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier:          bmx9paiRuI7K54CfOSsorx2SgLoyLq8jyMVLWyi7cfs=
Subject key identifier:   15:C6:2C:B1:5C:5E:E9:C9:8C:1C:72:89:6F:34:42:10:40:9D:41:23
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer:       /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial:       054D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number:          053C
Signing time:             Tue 28 Jul 2026 20:42:20 +0000
Manifest this update:     Tue 28 Jul 2026 20:42:19 +0000
Manifest next update:     Tue 04 Aug 2026 20:42:19 +0000
Files and hashes:         1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: WNzq3j6PwP6pem8IR5S8vO26OYkQyxrCK2/Bsf1Bzh4=)
                          2: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: YA17LyHTfthDzdk1fJZ4Q1wQt3Gaa9uu+WHv2HF57n4=)
                          3: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=)
                          4: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
        Validity
            Not Before: Jul 28 20:42:19 2026 GMT
            Not After : Aug  4 20:42:19 2026 GMT
        Subject: CN=6a69142c-c7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:b1:27:f5:6e:0f:f9:4a:2b:1d:47:0f:82:
                    e5:db:7a:c6:fa:b4:bc:e1:b5:5f:7a:18:92:9b:6a:
                    a1:7b:a3:20:ce:bb:df:c1:d8:1b:06:06:59:f2:c9:
                    e1:f4:16:b0:53:a8:5f:35:dc:76:3c:86:0b:75:db:
                    b6:ff:5d:88:39:56:f5:e5:ec:4a:04:4f:48:4e:64:
                    50:9d:d4:43:26:a5:67:88:d3:a5:dc:75:6e:a3:9f:
                    fd:8c:44:32:57:2f:53:7e:24:fe:d3:fc:2b:86:ee:
                    35:b7:77:98:d2:4b:52:4c:98:14:26:29:4d:52:f0:
                    1d:10:d7:38:00:b4:d4:71:74:07:1a:6c:9a:bb:a5:
                    14:0a:5a:ad:ba:40:c9:6a:1a:55:1a:ad:cd:54:13:
                    91:a6:f0:ec:77:d8:2d:8b:81:56:21:64:86:ba:43:
                    f4:69:ac:b4:94:1b:f9:7d:27:a2:18:25:6d:e6:7e:
                    13:eb:7a:53:70:ad:2d:a6:05:ec:32:cf:f1:61:2e:
                    bf:bb:6e:54:0d:11:84:00:6c:cb:d7:1a:63:22:49:
                    a9:f0:c0:44:33:20:7d:9b:36:80:4d:b0:e9:de:af:
                    6c:22:38:79:59:47:f6:56:f7:cc:fb:65:7f:c7:f4:
                    60:9b:49:49:0d:16:08:f7:09:00:9c:78:c7:43:e2:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C6:2C:B1:5C:5E:E9:C9:8C:1C:72:89:6F:34:42:10:40:9D:41:23
            X509v3 Authority Key Identifier:
                keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:62:79:9d:59:6c:28:51:02:8a:8b:65:e8:6d:13:31:06:41:
         1c:47:7e:7f:3e:2f:e6:ae:27:7b:6e:97:43:0c:59:9d:f9:f6:
         3a:f3:36:a8:41:42:1e:74:ac:f6:2f:3e:1c:a7:7e:a1:64:f9:
         d4:e3:67:1d:fb:1e:e1:77:17:82:12:1d:08:c8:61:f2:99:f3:
         ad:fe:5e:32:f5:a4:b7:c6:c9:5f:7f:1e:c9:46:13:28:af:3c:
         8d:a2:43:85:c2:a7:91:d3:df:91:a0:e3:bb:27:f5:a1:18:dc:
         a3:8a:59:4a:2e:bc:8d:8c:9c:51:01:90:1f:f5:96:cc:2a:dc:
         1a:e9:51:89:90:5f:06:17:b1:19:f0:03:d6:c1:8b:10:e5:89:
         ff:b9:8e:e2:9a:cf:47:85:46:b5:43:ef:b1:b3:d3:bf:2f:49:
         a7:75:a7:3d:98:cb:34:ab:e8:63:2e:cd:46:bb:3a:8b:45:47:
         f5:f6:c0:bd:25:20:61:bb:f9:2f:82:2d:3a:83:e6:32:54:d8:
         65:2b:3b:95:73:9b:6f:23:de:c9:1e:6c:f7:bf:52:bb:f6:69:
         95:6a:1a:0c:e2:bf:58:5d:63:03:33:95:14:f4:16:f2:60:a5:
         9f:44:fe:34:25:9a:e4:35:1b:88:35:9f:af:76:48:9e:9e:b8:
         95:36:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:05:55 2026 by rpki-client