Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
File:                     n0OyarpyjoL2JjN_omUh-Oafu8s.mft (raw, json)
Hash identifier:          qWW4U/Z3M2flihjhvkoCth8F3BahSnk1Uk6K+qY6NGo=
Subject key identifier:   2F:D9:B4:82:94:E8:A6:9B:DD:E0:F2:5F:5E:9B:63:53:91:51:DF:C9
Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
Certificate issuer:       /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Certificate serial:       0351
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
Manifest number:          0343
Signing time:             Wed 29 Jul 2026 01:52:51 +0000
Manifest this update:     Wed 29 Jul 2026 01:52:51 +0000
Manifest next update:     Wed 05 Aug 2026 01:52:51 +0000
Files and hashes:         1: n0OyarpyjoL2JjN_omUh-Oafu8s.crl (hash: +b2lxk33yEHK6pIIJtrWZZ1XvlgSbRIdhKKYOQwwX90=)
                          2: 22D1D50A58BC11ED96790F65C4F9AE02.roa (hash: A+qnbUnjSVIZC27YU1NZxiXk+sZg+SOpLKE+1J+co/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl
                          rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB41, serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
        Validity
            Not Before: Jul 29 01:52:51 2026 GMT
            Not After : Aug  5 01:52:51 2026 GMT
        Subject: CN=6a695cf3-4447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:bf:84:d7:de:e8:51:c8:e6:fd:20:41:c3:
                    32:9c:32:bf:ed:c4:b6:1a:c6:74:54:f1:3f:1a:d0:
                    57:64:d6:91:e7:ba:a7:d1:c2:3a:e7:55:53:41:32:
                    15:db:c4:c4:95:73:16:38:c9:54:5e:33:45:3b:d2:
                    60:ef:32:a6:15:15:51:5b:5f:5a:1d:62:22:66:fd:
                    39:7a:23:80:c1:c7:73:27:f7:26:7c:98:4f:3f:09:
                    32:ec:28:8e:38:5a:95:85:80:5c:52:0d:bf:c0:7f:
                    93:67:bd:d0:6b:0b:19:41:bb:73:80:1d:50:4f:99:
                    10:93:fe:65:b0:92:49:ab:6b:fb:3e:a4:6b:aa:0b:
                    fc:5a:25:a9:cb:65:aa:91:c3:7f:22:9a:fc:31:cd:
                    10:ae:89:52:13:bd:b2:21:e7:40:b2:38:70:6c:b2:
                    88:03:60:dc:e0:12:b8:57:28:29:e5:ae:c7:40:3d:
                    16:8a:c1:8b:11:c6:7f:9c:14:a9:a7:fc:c6:07:ed:
                    f5:48:c4:a3:ce:75:0e:53:81:26:9f:12:e8:b3:4b:
                    1c:a0:78:9b:2f:52:6b:c6:74:81:19:b2:da:dc:c4:
                    49:ee:1c:39:ab:86:18:73:ef:c9:cb:7f:85:2c:05:
                    36:f3:e6:8a:c9:d8:f5:a8:df:c6:a2:09:03:ee:cf:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D9:B4:82:94:E8:A6:9B:DD:E0:F2:5F:5E:9B:63:53:91:51:DF:C9
            X509v3 Authority Key Identifier:
                keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:51:86:21:48:98:0c:55:15:47:e7:ac:e1:61:b3:c0:ec:aa:
         d2:be:ec:2f:cd:42:51:b9:e2:40:e9:95:9c:e2:e3:cb:39:ec:
         7a:46:34:ae:f2:f7:77:e8:77:75:41:a7:f6:39:39:5b:52:7d:
         7b:d8:1a:6d:e0:35:5a:1f:41:ac:db:40:30:7f:6e:e4:e5:11:
         11:91:68:22:ea:f7:35:07:14:19:88:40:c8:3b:0a:6e:2a:12:
         bd:b2:0c:b0:18:7d:8a:4a:65:e3:6b:1e:7f:c0:4a:65:33:e9:
         0d:95:3d:ed:a2:98:08:ba:a8:6d:bb:13:11:75:cd:44:b7:cf:
         51:4e:fb:da:4c:fd:1e:02:76:1a:23:9d:8a:33:97:1c:f5:de:
         7b:d3:b7:fc:71:42:da:ca:b5:f7:22:75:46:a0:9b:45:75:a8:
         23:8a:33:35:b0:d0:53:51:44:95:2c:52:ad:10:72:70:10:44:
         4d:84:d0:04:94:0e:b9:93:97:7a:01:20:d3:c1:4f:62:92:9e:
         79:65:00:2f:9e:1e:36:af:d2:8b:2f:da:bb:6b:3f:6f:d1:e8:
         01:72:54:9c:e3:4e:c6:a7:c7:fc:02:b3:12:a3:57:d3:cb:23:
         57:12:23:65:36:56:e5:e8:73:d4:eb:06:8e:79:1e:76:b1:a7:
         87:a5:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:46 2026 by rpki-client