Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File:                     8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier:          u/CC45smrMsNKlhIqv692DJO5pIATkCD8/dCTSiUnmQ=
Subject key identifier:   AC:5F:DF:85:02:86:94:49:A2:8D:36:8E:D9:D8:78:02:06:8D:64:67
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer:       /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number:          DE
Signing time:             Wed 29 Jul 2026 08:05:28 +0000
Manifest this update:     Wed 29 Jul 2026 08:05:28 +0000
Manifest next update:     Wed 05 Aug 2026 08:05:28 +0000
Files and hashes:         1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: 0LtPCw8aE/13tFU/c1yBM8GNvvYD8smsvDrF7env8S4=)
                          2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
        Validity
            Not Before: Jul 29 08:05:28 2026 GMT
            Not After : Aug  5 08:05:28 2026 GMT
        Subject: CN=6a69b448-154f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:9b:00:06:68:48:c3:37:ae:aa:b9:03:c0:
                    a0:67:f8:cb:cd:4b:9a:67:2e:40:aa:62:8d:5e:c6:
                    61:4f:6a:b7:02:4b:8b:71:46:dd:f3:28:d0:b4:a5:
                    d4:41:a7:67:c7:6a:bd:97:e9:31:76:c9:77:79:37:
                    9c:aa:b4:4a:d0:a9:bd:09:ad:c6:be:38:58:34:57:
                    3b:cc:67:9e:e0:cf:89:2e:ef:0d:91:c4:f1:50:a2:
                    0f:cb:bc:22:4d:3b:7c:02:b8:1a:9d:ec:db:c2:94:
                    51:75:b6:c1:21:55:70:36:51:0a:56:76:6f:85:3b:
                    ee:a4:49:30:70:f1:23:f9:3d:3b:fe:d2:2a:84:78:
                    9f:2c:a3:73:b0:79:e9:1a:e4:80:28:1e:d3:32:60:
                    a1:ee:79:e6:09:2f:c4:0d:ed:8c:25:06:8d:c4:c6:
                    c0:ca:d2:38:05:d0:21:18:d6:3b:7a:3b:33:b0:a2:
                    81:15:fa:5d:1b:bc:74:a9:8b:d5:f3:40:83:db:a7:
                    14:d6:63:6f:f4:e0:f1:56:a2:ee:9c:fa:29:e2:a9:
                    22:7c:61:d3:c0:5c:ef:c2:07:70:2c:fe:12:04:f5:
                    0c:47:9d:95:ed:1d:37:ad:e5:27:3e:b7:0a:55:8d:
                    df:30:8e:5b:3e:8f:ea:c0:07:25:fd:b3:2d:9b:3f:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5F:DF:85:02:86:94:49:A2:8D:36:8E:D9:D8:78:02:06:8D:64:67
            X509v3 Authority Key Identifier:
                keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:60:aa:9c:0f:b3:b0:79:96:8d:6f:68:d4:e1:31:1b:b8:52:
         03:42:9b:cf:a3:aa:be:15:8a:f1:8f:c3:c7:80:23:24:4f:1b:
         d1:06:92:ed:1f:a0:50:99:0e:3e:7e:ec:b1:ba:aa:00:1b:4f:
         82:2d:02:38:bf:2b:86:e5:ec:36:02:8a:77:27:2e:49:eb:71:
         d4:d5:6f:76:f4:24:31:c1:81:4e:18:6c:68:6d:9d:34:de:e5:
         6c:eb:74:5a:59:d4:9b:f5:de:49:ac:46:db:33:a1:69:85:28:
         7d:30:18:21:75:34:fe:4b:06:a1:57:12:5e:63:fa:78:61:42:
         93:d2:61:05:e4:14:dc:4b:de:75:6c:dc:cc:cf:9f:a5:39:51:
         bb:58:c6:93:f1:79:5a:ee:4a:33:0f:8d:36:f5:63:00:42:4a:
         d3:9c:d8:0a:89:f3:76:38:e8:77:e9:f9:f7:58:af:5d:80:c5:
         09:c6:df:e8:4d:49:4f:74:82:98:05:c0:78:e4:09:c2:06:57:
         f7:93:c7:e3:e3:2e:2b:9f:a8:46:97:52:61:dd:ce:ac:a4:6c:
         85:dd:2f:c3:90:d0:f2:6f:c4:c7:04:a5:61:c3:c9:b9:26:98:
         61:8e:f2:d4:f3:f0:46:69:55:98:48:b2:79:90:19:6e:78:8f:
         31:09:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:37 2026 by rpki-client