Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
File:                     R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json)
Hash identifier:          yBnSbcxSswqGjJXUpwUrga9QUorGpEHEc8uT/B2y7wQ=
Subject key identifier:   F2:05:1F:EC:4A:39:10:1D:6F:06:9D:4D:6F:4E:AA:4B:AE:2D:9C:0F
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Certificate issuer:       /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
Manifest number:          027D
Signing time:             Wed 29 Jul 2026 02:59:47 +0000
Manifest this update:     Wed 29 Jul 2026 02:59:46 +0000
Manifest next update:     Wed 05 Aug 2026 02:59:46 +0000
Files and hashes:         1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: xTFrkrBk/QKkUr8XLl1JaChutaBM8+i1rqDpYr+bDsQ=)
                          2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: LIdhf9ay4v6pNkqEXLVs+I0RR4BOPrXO+QQVxcMgeeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
                          rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
        Validity
            Not Before: Jul 29 02:59:46 2026 GMT
            Not After : Aug  5 02:59:46 2026 GMT
        Subject: CN=6a696ca3-4630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:af:6e:c7:e9:34:45:39:82:a9:90:bf:2b:
                    cc:e1:4c:7e:6a:5c:b0:d6:62:84:c9:31:9b:92:f6:
                    1c:bd:10:ad:ae:5b:d2:52:f5:4d:0c:b3:dc:c5:e3:
                    c5:d2:b4:73:d0:fe:86:0b:57:89:8a:60:57:08:78:
                    1f:57:50:d0:e2:e8:7d:b7:ca:82:fa:6a:51:6d:c3:
                    bf:3b:69:b3:cb:05:92:f3:8c:49:c3:f5:ae:eb:6b:
                    d8:d9:83:e5:ad:ef:96:1c:79:1e:ca:25:7d:45:6d:
                    56:97:93:71:a8:c4:67:84:37:40:58:72:84:d0:0b:
                    53:53:7f:47:5b:6f:b1:da:49:75:cf:7c:00:c5:f5:
                    23:30:c4:39:37:06:ab:52:b8:48:cb:1f:c6:11:11:
                    fc:24:12:72:ca:36:76:e2:bb:8a:3f:49:56:d0:0b:
                    5c:63:a9:70:cb:1a:b6:ab:4c:e4:e2:40:36:26:ef:
                    f1:66:65:44:1d:14:21:24:ce:e7:cf:6e:d9:2d:12:
                    84:dc:27:2e:a1:15:28:29:4c:fa:c8:16:df:df:b8:
                    12:cb:5f:c8:7c:c9:35:25:29:83:ed:d2:c6:c0:cb:
                    4b:99:3f:72:39:65:14:f1:36:f5:b6:47:2f:1d:77:
                    0e:8b:ca:4c:31:50:92:f3:b8:2f:20:5c:67:ef:f4:
                    11:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:05:1F:EC:4A:39:10:1D:6F:06:9D:4D:6F:4E:AA:4B:AE:2D:9C:0F
            X509v3 Authority Key Identifier:
                keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:ac:68:d5:d3:ec:99:24:cc:55:47:27:d9:11:41:32:54:
         dc:ad:29:58:e1:f6:2e:23:11:01:85:a1:d4:36:28:51:38:19:
         79:41:5c:0f:a4:3c:b5:5a:bc:6e:f1:6c:eb:13:db:05:e4:9a:
         3f:d7:32:ca:7b:a1:e4:0b:63:41:a5:33:e5:9b:5c:ce:da:57:
         e6:4b:5d:7d:1c:80:7b:7a:ec:57:33:5d:8c:84:4b:21:57:eb:
         11:e9:5f:05:69:48:ca:e6:5d:05:7d:b0:59:11:5b:2f:06:5b:
         55:69:55:2f:46:b4:8d:fa:c2:c7:90:54:fc:0a:86:0d:ec:20:
         2f:74:26:ff:66:99:17:1c:15:01:91:22:a6:f7:07:42:5b:a3:
         66:6d:6c:22:88:6b:1d:bb:ea:ae:46:e5:f8:60:0b:bd:22:81:
         bd:2c:64:08:19:0c:63:c2:3f:8b:1d:bf:51:7c:b8:9e:fe:50:
         34:70:8a:5d:2a:54:2f:02:88:26:e0:0e:ac:55:6e:0b:f7:32:
         95:69:a9:e5:19:b0:f1:a2:5e:16:d4:46:7c:1e:4b:be:45:1e:
         46:58:ba:cb:b7:78:06:e7:96:d6:3d:00:14:26:29:e4:7e:bf:
         13:de:1e:e1:e2:3a:91:fe:1c:81:43:2e:b8:34:45:47:3c:7a:
         96:6e:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:59 2026 by rpki-client