Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File:                     ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier:          0mCV9fkKCwcDd1znyu7U4O7+CPuRorp9b29VjaeX6EU=
Subject key identifier:   F3:86:64:F2:9C:3E:E4:C6:46:71:D5:80:F6:9F:14:57:A7:47:33:F7
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer:       /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number:          01FD
Signing time:             Mon 27 Jul 2026 04:46:16 +0000
Manifest this update:     Mon 27 Jul 2026 04:46:15 +0000
Manifest next update:     Mon 03 Aug 2026 04:46:15 +0000
Files and hashes:         1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: 2oyFTH4xDwjjQa5qOcp5fqq6Z3cdhfFceTkYIierTdM=)
                          2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: HD0K5jglBpup2Ya1bJZyAOnbAr95k75UE1CHe344A3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
                          rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
        Validity
            Not Before: Jul 27 04:46:15 2026 GMT
            Not After : Aug  3 04:46:15 2026 GMT
        Subject: CN=6a66e297-5413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:da:15:f3:fd:e6:b4:14:15:e5:c9:7d:28:84:
                    56:0e:33:96:9d:f9:da:78:d7:d2:e9:36:b5:50:01:
                    0b:f3:d8:61:c8:5c:63:13:db:53:d8:d3:d8:bb:28:
                    79:61:1e:99:52:aa:fa:e8:16:47:f1:b9:62:32:62:
                    aa:96:06:ec:da:9a:5a:d2:09:62:40:fc:e3:af:3d:
                    d3:06:c4:4e:5a:7a:e4:48:dc:24:53:d3:96:2e:01:
                    a2:c9:37:3e:de:d8:d9:72:48:75:c2:e2:70:43:16:
                    10:24:2f:b8:5c:bb:fe:5e:1f:cd:75:54:56:af:a8:
                    63:54:cd:da:7e:2c:97:11:04:9c:c2:37:d7:1d:fe:
                    2b:fb:d9:da:0a:40:1f:a7:ed:6b:cf:dc:72:6f:7d:
                    f6:d0:af:53:d4:91:c1:12:44:65:fd:2e:cc:b3:bc:
                    a6:17:b6:17:7a:65:69:8c:01:2c:8c:02:c9:45:b9:
                    89:30:59:10:4f:f6:56:fb:35:92:64:f0:50:07:bd:
                    7b:0b:a3:50:76:ea:a2:48:f0:f7:02:1e:4c:62:86:
                    45:30:05:04:27:29:9c:00:06:34:bd:e4:b8:b7:1f:
                    30:70:cf:bb:91:f0:14:0c:02:5d:80:a0:7e:27:1e:
                    89:20:57:10:f5:37:03:f2:15:16:ee:f5:01:19:01:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:64:F2:9C:3E:E4:C6:46:71:D5:80:F6:9F:14:57:A7:47:33:F7
            X509v3 Authority Key Identifier:
                keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:37:23:31:3e:d5:fd:80:07:a9:45:95:a2:22:98:65:ff:
         5a:71:07:06:e8:4c:4a:fb:eb:e3:72:57:d2:47:4f:f2:5d:44:
         bc:ff:6e:8b:90:44:9e:d0:48:cf:8e:42:df:8b:61:47:54:af:
         8f:a8:f0:23:f5:7f:37:7c:23:36:3d:33:9c:22:fb:5e:59:f1:
         03:66:95:20:6e:90:3a:cc:8f:30:5c:f8:ba:ca:1b:15:c8:39:
         d0:2f:77:25:90:d9:b9:56:d9:c4:fd:64:77:58:1a:70:69:68:
         e1:13:ac:72:b0:94:f9:3e:d7:7b:53:fd:9e:66:00:e1:66:d4:
         d6:6a:b3:04:e5:f0:4a:2e:c5:53:08:2d:30:4b:7b:fe:54:96:
         cc:05:96:a8:94:74:d3:a8:4f:cc:cc:32:ad:77:0f:89:cd:bb:
         11:e3:db:36:0e:27:06:2b:1f:a9:28:ca:15:18:e0:04:38:62:
         1e:28:dc:46:1e:d5:94:8a:b9:11:f6:d0:b0:24:62:9d:1f:99:
         f4:8b:ef:59:2d:8c:2f:fa:40:99:b1:a4:d9:8d:4b:49:5c:3e:
         2a:ff:07:53:ec:00:bb:6d:d5:d8:be:ce:b3:ba:94:d9:d0:02:
         f6:6e:ed:5b:7b:99:49:e1:53:84:e4:1a:da:bf:af:de:9e:f7:
         33:b2:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:22:59 2026 by rpki-client