Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
File:                     AiMNlU5PPWqtRJXXTNs-4PKHygc.mft (raw, json)
Hash identifier:          IVIYcJvEpYulIcRDJxKC355I90F4VbTpP8ishNaNrTU=
Subject key identifier:   38:B7:2B:59:E6:D3:8E:16:AF:45:55:30:8A:D9:7B:15:E8:7C:A1:65
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Certificate issuer:       /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial:       24AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
Manifest number:          2478
Signing time:             Tue 28 Jul 2026 15:52:39 +0000
Manifest this update:     Tue 28 Jul 2026 15:52:39 +0000
Manifest next update:     Tue 04 Aug 2026 15:52:39 +0000
Files and hashes:         1: AiMNlU5PPWqtRJXXTNs-4PKHygc.crl (hash: oiAGe9qWlLMw1caQhRF13Ppdnm6F1pR0813DjAnAIMs=)
                          2: EDC8B49086EE11F19E006003A7EE528E.roa (hash: h+jWpQU5RPeD0V9iWjQpKIX46qoIpgt7mOA43N2WPl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
                          rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9387 (0x24ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4C6, serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
        Validity
            Not Before: Jul 28 15:52:39 2026 GMT
            Not After : Aug  4 15:52:39 2026 GMT
        Subject: CN=6a68d047-b21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:6c:6b:8f:4c:c5:b4:08:7f:34:8c:1c:80:
                    1b:8a:bf:17:fb:47:10:d5:d5:72:76:d3:42:c0:a9:
                    84:b5:cf:f1:8f:db:c8:43:15:04:fb:ef:55:e8:e6:
                    4c:e9:4b:3d:b4:97:16:42:88:95:08:d2:4e:e9:69:
                    6b:45:5e:b9:eb:4d:86:c2:89:4e:43:07:d6:57:db:
                    8b:0d:df:43:63:a6:15:15:be:5b:4f:17:7f:54:cc:
                    b1:c8:33:36:54:6f:30:3f:d3:6b:0a:06:bf:c8:90:
                    ef:5a:a4:ba:45:97:91:fb:48:d6:57:7f:d8:87:7e:
                    9f:e3:5f:ae:0d:58:72:ed:71:03:46:90:40:98:22:
                    88:27:78:5e:dc:6e:74:94:64:62:88:be:d4:e7:26:
                    81:40:13:c3:fe:07:94:8e:23:69:6c:45:13:17:95:
                    a9:e6:56:9d:99:fe:e6:eb:ae:95:2b:b2:a3:b3:d1:
                    32:b3:0a:fa:ac:a8:a1:9f:de:78:ce:f5:9d:41:53:
                    20:18:30:f6:d6:67:38:40:7c:cd:0c:ad:03:ed:d5:
                    29:7a:e4:db:0d:68:95:ab:a2:ca:6c:d3:4d:8d:70:
                    a5:e3:b6:56:ae:41:41:37:c3:53:35:72:6d:db:1b:
                    90:34:04:0c:0d:80:6d:ea:ee:45:f2:09:d5:a8:67:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B7:2B:59:E6:D3:8E:16:AF:45:55:30:8A:D9:7B:15:E8:7C:A1:65
            X509v3 Authority Key Identifier:
                keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:1c:2a:46:98:bf:8f:db:1e:0e:94:c1:41:98:ec:57:a3:e6:
         dc:37:b4:bd:0f:d6:86:0e:ed:63:3c:96:8f:a2:cc:08:75:38:
         27:55:3a:53:8a:9a:e1:f1:ba:92:a6:30:35:8b:20:45:22:5b:
         af:18:f6:f4:7e:d8:ca:43:e6:c0:28:30:c7:d0:4a:87:58:fb:
         50:5d:d6:ee:42:3b:28:63:e3:f0:71:05:8a:6d:f5:3c:30:0d:
         9a:31:1b:f3:44:35:6d:cc:49:14:fe:01:ed:d4:bd:d3:f9:e4:
         84:bd:18:df:3b:27:dd:f3:f1:42:90:71:31:2f:38:63:46:05:
         9b:d1:32:c1:90:63:a2:d9:b0:f0:77:21:2d:e8:e5:ca:7c:90:
         1d:ef:c6:08:ba:72:79:64:94:3f:d3:7d:9a:66:c8:d9:01:55:
         09:27:98:fa:02:d6:18:2d:31:4f:9a:68:ca:ab:5b:5a:88:52:
         6d:9d:82:fa:2c:a7:c6:3c:56:90:2f:ca:de:b6:8a:63:31:95:
         b6:15:20:3a:d6:e6:d3:9f:61:9b:67:19:9e:d7:d1:f2:24:a2:
         af:e9:bb:0e:7a:9e:11:e7:a9:69:44:10:2b:29:70:cf:f6:e5:
         b3:27:b3:31:41:bd:0a:b5:7f:0d:81:fe:61:77:f6:5c:11:07:
         62:17:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:47:03 2026 by rpki-client