Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File:                     4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier:          PRpMMtKse+lbh6hKAvD/EIJUBAOOYk8VjIJu1K4Vx/U=
Subject key identifier:   71:65:87:D9:11:17:45:62:8E:62:BF:6A:AA:DB:CB:0B:86:11:41:BB
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer:       /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial:       0783
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number:          075D
Signing time:             Tue 28 Jul 2026 16:53:41 +0000
Manifest this update:     Tue 28 Jul 2026 16:53:41 +0000
Manifest next update:     Tue 04 Aug 2026 16:53:41 +0000
Files and hashes:         1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: pEOTM+N1Blj16GNGmR40+6kWxD0gVHT8k40ql3oqxyE=)
                          2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: +C2epm2cuJ3GR0nAkShPOcsEF6oYoWgKxDRuq2dxIhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1923 (0x783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
        Validity
            Not Before: Jul 28 16:53:41 2026 GMT
            Not After : Aug  4 16:53:41 2026 GMT
        Subject: CN=6a68de95-a7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:51:6e:18:41:0a:52:67:e2:18:4d:91:1d:
                    92:a5:be:fb:7f:4f:28:af:02:6f:31:85:ef:24:a4:
                    9b:fe:0f:e1:fd:0f:3e:68:db:d3:37:b5:1b:01:3c:
                    29:b3:81:40:b2:8a:1c:cc:e0:33:02:f0:24:61:c9:
                    41:3d:ce:fa:cd:b5:2c:f0:14:8e:d6:4d:bc:ba:89:
                    47:57:4e:da:64:3b:2f:f6:bc:30:a7:0c:19:e6:2d:
                    70:ca:49:95:65:83:10:e0:a9:d0:86:3d:e5:9f:3c:
                    15:2c:ba:78:d0:e8:55:77:81:a8:6e:92:87:cf:01:
                    e6:6c:7a:20:d1:10:54:21:14:87:b5:6f:53:b5:e5:
                    fb:44:20:81:da:57:ec:1a:81:41:ce:c2:a7:c8:a9:
                    cf:77:2b:70:2c:ab:bf:62:03:c5:12:b9:61:ef:ca:
                    a8:f6:9d:d8:01:91:18:35:ef:ff:8d:fe:c8:67:cb:
                    5f:f7:54:f0:a7:03:61:8b:f5:73:e8:61:02:eb:57:
                    76:aa:d2:a5:aa:bb:f9:36:14:b2:56:39:18:a3:5e:
                    1b:9d:59:d1:2b:d7:08:e9:62:d6:ee:ce:b6:58:4f:
                    7b:09:03:3b:e5:f0:60:35:8b:d9:97:b9:cd:a4:0a:
                    94:59:74:af:cc:9d:ef:5f:e0:4f:de:d2:04:b5:9b:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:65:87:D9:11:17:45:62:8E:62:BF:6A:AA:DB:CB:0B:86:11:41:BB
            X509v3 Authority Key Identifier:
                keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3b:02:5c:00:6c:e9:9b:ba:87:d1:1b:3e:53:17:d3:05:a5:
         bc:0e:a8:c5:fb:dd:84:f3:37:5f:2b:f9:65:2f:40:f8:0e:29:
         8e:50:e5:57:ea:d1:62:e5:f7:f6:e9:da:bf:94:30:f9:f1:26:
         ec:f1:9d:3e:79:ac:dd:8f:f8:bd:4e:47:e0:e1:85:e5:c5:a2:
         d7:49:75:c8:00:6c:e1:25:71:79:18:6d:ca:18:e7:dc:94:21:
         05:37:8c:0d:30:b6:85:9b:78:4e:3d:98:7c:91:88:b7:1c:5b:
         d2:b8:c1:0f:c7:19:9d:14:1d:d2:d8:c8:b2:94:a4:8e:c4:1e:
         0d:48:c9:ba:f3:21:26:38:2e:38:ba:bd:c7:6c:ff:11:81:aa:
         53:fa:70:19:de:3e:5c:db:45:97:c2:3d:c8:81:4c:41:48:35:
         d8:4b:35:19:33:0c:8b:2a:09:d4:ba:7c:f0:63:31:03:7c:0b:
         b1:95:bb:2c:af:6b:c5:4f:f2:a5:05:bc:86:38:92:b2:53:e1:
         90:78:8a:c9:eb:ae:51:86:b1:c5:84:90:5d:31:ae:89:a5:cc:
         be:78:5c:24:4d:a3:2b:bf:4c:aa:43:32:a2:41:9e:70:36:53:
         b0:43:06:62:36:78:9d:58:6f:43:74:75:99:a0:09:99:c8:c6:
         86:6c:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:03:38 2026 by rpki-client