Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File:                     PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier:          cwzW7/FRAgDQwnhcZnL8U1N6GRkMGxFXnbQcuzs0GgM=
Subject key identifier:   B4:DF:81:D4:6D:8E:76:C7:95:85:41:FC:BB:42:90:F9:5D:FF:DB:34
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer:       /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number:          01D9
Signing time:             Wed 29 Jul 2026 04:51:41 +0000
Manifest this update:     Wed 29 Jul 2026 04:51:40 +0000
Manifest next update:     Wed 05 Aug 2026 04:51:40 +0000
Files and hashes:         1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: wAzRvpuOgG8n+gbU7QTwWyzacn+LEv9WOQo1tAhirFg=)
                          2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: RLvkJQC71Slj35G4jfs9BmOdtDEiBC1wT0j0eVVXx8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
                          rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
        Validity
            Not Before: Jul 29 04:51:40 2026 GMT
            Not After : Aug  5 04:51:40 2026 GMT
        Subject: CN=6a6986dc-6eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:be:78:09:e3:8c:cb:a1:9a:ba:a7:ef:e6:
                    ff:bb:8f:5f:fe:f7:b2:82:aa:cf:05:67:cd:39:55:
                    e0:d7:57:3a:1d:a2:31:e6:d9:ff:54:50:a4:4b:04:
                    49:03:fa:c3:54:4b:ce:33:03:1f:c8:d2:f0:b6:df:
                    6a:7a:ab:37:cb:fd:58:32:10:8b:6e:39:cd:c6:85:
                    3d:1a:bd:eb:18:65:f1:b0:27:e8:6b:a4:c4:5e:30:
                    7c:78:9f:c4:91:8b:b3:e9:21:ce:df:a9:5e:d1:6f:
                    14:10:93:8e:f0:8d:a2:d3:38:bb:d3:77:8b:e5:83:
                    9f:04:56:8d:a4:8c:50:c8:64:e6:5d:c3:78:2e:40:
                    ac:e5:60:ec:ed:bb:e9:93:bd:8f:aa:3b:90:c9:a0:
                    26:59:60:90:49:70:75:6b:2c:68:8f:f2:8c:f4:3f:
                    6a:f3:15:5a:c0:1a:8b:19:0a:1e:6d:a8:db:24:81:
                    a3:ea:29:ca:8f:00:af:8d:99:8e:bf:3e:7e:f7:0c:
                    66:41:f1:c6:37:64:83:d5:31:66:05:eb:3a:5e:5a:
                    50:0f:9e:d8:d9:72:1d:b6:f0:74:c8:10:25:f7:1e:
                    d2:7e:b5:b4:c6:a3:74:1b:9f:9d:0f:d1:f1:bd:2f:
                    c3:ee:3f:2a:6e:15:7a:d6:b8:f5:c6:04:d4:fb:44:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DF:81:D4:6D:8E:76:C7:95:85:41:FC:BB:42:90:F9:5D:FF:DB:34
            X509v3 Authority Key Identifier:
                keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:86:e4:9b:79:3f:16:c9:b7:40:da:10:03:87:fb:c3:91:f8:
         04:db:c1:23:fc:b7:42:90:08:c4:ea:aa:b1:71:cd:df:bb:b3:
         2a:d0:0d:06:22:2c:8c:f7:22:10:53:6b:74:cc:82:54:8f:79:
         e6:0f:3d:24:39:62:bf:68:22:08:3a:d8:76:7c:50:6b:c7:8b:
         4a:1f:6f:ab:12:c7:82:3a:fa:4a:53:f7:f6:d1:d4:d8:7f:36:
         da:15:df:2c:c6:74:40:38:92:c0:ea:ca:99:87:07:b5:4a:ce:
         dd:c7:23:fb:5b:eb:ac:70:f7:ce:8e:49:9e:8f:61:7b:01:f8:
         f7:10:4b:ad:65:7b:81:c8:b8:9f:22:82:4a:4a:f6:64:f7:d1:
         df:ab:ec:57:0c:2a:98:c5:c9:40:a1:70:23:e1:18:65:6a:09:
         11:7e:23:41:17:12:ef:e6:13:d6:b1:d5:79:b6:f5:81:47:5e:
         e6:22:c7:de:18:f0:80:13:c6:9a:38:9c:b4:b6:11:06:59:db:
         2a:d1:d7:c1:dc:ea:94:81:8f:b0:77:0d:d5:af:07:96:79:c5:
         f2:48:23:ea:c9:ce:be:d9:8f:03:3b:2d:9f:23:f4:88:9f:9b:
         f4:98:70:9e:f1:9a:57:73:a8:ff:ef:5a:43:b5:fd:7b:28:55:
         98:29:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:16 2026 by rpki-client