Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File:                     MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier:          mIHLQ8sd85uex6juRUXs40D9+OCVGNZJvoJhc8p4tgg=
Subject key identifier:   CB:1D:A7:10:33:7C:91:47:9A:0C:89:17:DA:9D:E4:76:6F:29:FB:A4
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer:       /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number:          017F
Signing time:             Mon 27 Jul 2026 06:43:54 +0000
Manifest this update:     Mon 27 Jul 2026 06:43:53 +0000
Manifest next update:     Mon 03 Aug 2026 06:43:53 +0000
Files and hashes:         1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: Tz0T6Va1cciTGOfgqhYMhue/zJkSi2ExYjkMTTn5P8Q=)
                          2: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: zSJXhjcxuRoRMZAMSvVxgLmiPMxSJBBZzT41UMv2hwY=)
                          3: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: 9HNmZVsE8qMY9qG/jp14H0D4amK1SUgdtWzVlZ7OP6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
        Validity
            Not Before: Jul 27 06:43:53 2026 GMT
            Not After : Aug  3 06:43:53 2026 GMT
        Subject: CN=6a66fe2a-a3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:47:51:a1:bf:23:df:c1:ab:74:22:8d:77:
                    3e:1a:6c:cc:38:01:94:6d:35:4e:9a:55:cd:74:2d:
                    96:b4:dd:c2:b9:30:22:f5:44:fa:cd:21:2a:ad:7b:
                    b3:01:5f:bb:68:94:fb:5b:23:05:c3:f5:cf:93:dd:
                    38:bd:d4:f4:c4:c6:f5:b9:76:bf:5e:c5:42:02:fa:
                    1d:cb:79:b2:05:6a:fa:fd:1f:60:f4:49:d2:14:78:
                    d1:c9:57:d0:58:f2:d4:f6:0c:4c:3c:cc:8b:8d:3d:
                    3a:0e:b8:fb:25:9c:23:24:e4:67:34:67:25:8a:41:
                    8e:5c:61:53:0d:a2:5a:e8:d2:38:86:d7:98:aa:f8:
                    ca:b8:51:83:0f:a9:1c:c6:18:28:50:e5:cb:0e:a0:
                    1d:4f:f6:85:37:cb:59:11:b8:63:fa:2e:bc:f1:49:
                    2a:ac:ca:6a:8e:d7:0d:63:75:47:83:13:34:e2:68:
                    cd:db:32:c5:dc:da:e6:64:42:78:47:71:3f:b2:85:
                    7d:13:02:cc:12:95:af:97:95:7d:71:6e:74:88:98:
                    9e:32:b2:69:cc:30:9d:d9:d5:bc:f6:8d:fe:92:76:
                    ec:91:b7:da:6a:fd:de:cb:54:1d:e5:2c:bd:20:ec:
                    bf:60:a0:92:05:81:fb:c2:8a:d4:f7:9a:aa:b1:86:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:A7:10:33:7C:91:47:9A:0C:89:17:DA:9D:E4:76:6F:29:FB:A4
            X509v3 Authority Key Identifier:
                keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:1f:4e:1a:b7:39:3d:54:6e:87:10:f7:52:f0:e4:3b:d1:
         f1:c1:22:40:a2:63:76:f9:90:84:6b:f4:b5:f0:fd:4c:ec:01:
         91:57:3b:0f:7b:83:d9:03:27:e2:51:d8:61:48:cb:a6:2a:d2:
         fc:c7:ed:e7:ed:52:75:d1:e5:53:9a:69:17:d7:be:a6:2c:05:
         8b:e9:41:b1:66:bf:73:14:5a:23:f0:b3:a4:ab:50:86:26:52:
         d0:42:ba:95:33:d5:03:8a:73:f7:9b:30:ea:23:87:7f:8d:07:
         11:1f:84:af:10:f4:f1:6a:7b:7b:f9:fe:4c:55:22:a5:9e:17:
         7b:63:bc:05:07:69:57:f7:b2:cd:0b:e9:1b:6f:24:ef:97:fa:
         d8:c2:80:be:08:14:92:b8:c7:c1:7e:0e:85:31:bb:19:34:9f:
         5d:51:0c:3d:ea:cb:ba:20:73:95:aa:7e:39:e8:2e:20:5a:87:
         43:76:4d:a4:6a:3e:4f:c1:8f:ae:e9:f8:e2:e4:d2:db:3a:05:
         fe:fe:ac:2d:a1:c4:76:07:5d:7c:17:9c:f7:1c:ec:ea:ca:49:
         68:30:34:b7:45:19:3b:e9:40:c8:18:70:a9:cb:cc:97:6c:02:
         61:db:f2:38:19:47:20:49:51:27:e7:2c:81:6b:95:c2:00:c5:
         39:18:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:54 2026 by rpki-client