Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File:                     N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier:          ppsnHrcXLtl7LbH3S4vFd260UGHgDbM1OPc3zpxcywc=
Subject key identifier:   B4:EA:85:F1:DA:59:6D:3B:CF:48:59:2E:A8:D8:F9:3D:5F:04:33:8B
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer:       /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial:       0494
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number:          047C
Signing time:             Mon 27 Jul 2026 01:06:23 +0000
Manifest this update:     Mon 27 Jul 2026 01:06:23 +0000
Manifest next update:     Mon 03 Aug 2026 01:06:23 +0000
Files and hashes:         1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: 4IW443Wukh8xBSnacyNY2K6nwk26VlGp/G75HADdUlM=)
                          2: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: 2RDAppFJUdg/Iy2Cf9QB/kesdW68o49m1fLor35OKAk=)
                          3: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: CkdUgYZswSEwulpU9fUQu3yRkOodyaKWPbvJSiJrKm8=)
                          4: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: Ouh9CREf3Hlbnen95cyuHl6hFWK3B34qd2O+gqkbTkY=)
                          5: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: 0Y70q3QNAADaTsernQ0CfBdMKWaPS3MwutMbI9WslNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
                          rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
        Validity
            Not Before: Jul 27 01:06:23 2026 GMT
            Not After : Aug  3 01:06:23 2026 GMT
        Subject: CN=6a66af0f-7146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:61:4c:4d:13:63:6b:cd:d5:68:3c:a8:ee:69:
                    9e:2f:61:13:a4:27:7b:d2:00:1f:ba:f1:97:d9:de:
                    fd:72:3d:f1:1d:f7:61:24:ad:d9:50:54:fb:91:e0:
                    cc:6a:0f:5a:54:ef:31:5e:03:07:e5:41:ff:fb:29:
                    af:9e:fb:77:93:c3:5e:13:20:31:c2:9b:04:70:21:
                    f0:a3:1a:e9:eb:6a:ae:7d:1e:4e:3f:aa:b4:65:d8:
                    7f:b5:ee:0c:1c:93:25:bc:f9:7a:02:e5:9b:ef:11:
                    b3:d1:48:5c:28:dc:69:f4:10:b6:9d:40:c0:62:e1:
                    60:b8:52:9d:a3:2d:4e:b7:ac:38:47:e1:2f:d8:ca:
                    74:e8:16:49:7d:45:3c:f5:14:75:d5:4c:8b:a2:28:
                    1e:db:d5:9a:09:4e:e8:25:6c:9d:c7:c5:47:87:0f:
                    9a:aa:35:3e:bd:66:88:59:94:37:e4:33:a9:49:ff:
                    3b:9b:64:c9:cd:88:74:1f:40:10:2f:25:d8:64:54:
                    5b:2d:38:59:d6:52:71:b5:98:05:38:b2:4d:4f:2d:
                    a6:b0:29:fa:90:be:59:23:e6:65:3d:b5:68:d5:0d:
                    60:9c:ca:37:3c:c6:e5:0c:86:d9:45:6e:19:f3:21:
                    75:33:bd:52:55:16:b0:85:f7:11:03:c0:c6:94:16:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EA:85:F1:DA:59:6D:3B:CF:48:59:2E:A8:D8:F9:3D:5F:04:33:8B
            X509v3 Authority Key Identifier:
                keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ed:54:3f:3f:96:b1:99:c6:ec:2d:b0:5b:f8:db:80:88:6b:
         11:73:71:3d:c5:e3:18:73:f8:e7:6a:e5:ac:09:ce:70:1b:1a:
         5a:7d:be:f4:7f:b2:20:68:c7:c3:52:cf:fc:5b:2e:70:c2:9b:
         ab:49:95:f8:43:99:46:c5:f0:15:43:6e:59:46:28:80:90:f6:
         6b:02:85:fe:0f:bb:d0:b8:9f:88:de:21:f6:37:c6:f4:ad:30:
         b8:f8:8f:ee:17:aa:63:c6:c1:8c:db:76:1a:64:aa:03:4a:ad:
         5b:59:60:6d:c6:eb:fe:f6:ff:82:dc:dc:52:a1:9a:20:f1:26:
         0f:75:5d:17:f4:c0:b9:11:93:c4:78:ae:de:ab:58:42:63:b1:
         65:f8:db:f1:9d:51:c8:c0:63:7c:7b:8d:eb:23:cf:4d:d5:08:
         4c:a2:82:54:be:b1:28:68:83:33:c7:68:78:14:d4:4b:1a:ef:
         cf:c4:9a:01:20:12:ac:34:8e:31:2e:7c:48:1e:a0:9b:71:d5:
         f0:46:44:f8:e5:95:fa:5a:87:61:42:2a:6f:b6:c3:c4:bf:35:
         fc:0f:02:62:d0:3e:0f:9e:91:c5:77:72:90:e7:d5:cf:ee:e0:
         55:af:e5:28:01:a1:67:66:14:0f:d2:82:8b:55:c8:7b:09:02:
         f9:70:57:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:37 2026 by rpki-client