Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
File:                     a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json)
Hash identifier:          RV367aXB4x6wvVBcfqtlwyC5hK1McQCQLgKyEEHX+jc=
Subject key identifier:   BF:B1:25:44:C2:79:C8:F2:8A:3A:7D:AD:0C:28:8C:ED:F1:96:AB:04
Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC
Certificate issuer:       /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
Manifest number:          CD
Signing time:             Mon 27 Jul 2026 08:56:40 +0000
Manifest this update:     Mon 27 Jul 2026 08:56:39 +0000
Manifest next update:     Mon 03 Aug 2026 08:56:39 +0000
Files and hashes:         1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: fxigApDqovTSWLxrgqlgArw7YlTArdtX1yWW/7tq2y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl
                          rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC
        Validity
            Not Before: Jul 27 08:56:39 2026 GMT
            Not After : Aug  3 08:56:39 2026 GMT
        Subject: CN=6a671d48-6c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:11:d2:3b:3b:d5:bc:4c:a3:b3:7a:85:1a:
                    4a:71:54:cc:ab:17:01:b8:8f:3f:d9:48:ef:86:61:
                    39:79:3e:be:ed:2d:b7:4e:a5:8e:e6:e7:a4:6f:2a:
                    7a:77:e9:1e:1f:5f:16:b4:74:ac:b1:2c:f2:64:f5:
                    f6:1f:40:8d:e2:a0:41:ad:62:03:e4:77:af:77:40:
                    a0:77:ad:20:ec:22:47:41:c4:00:c6:52:dc:32:5f:
                    f8:c7:6d:18:10:d9:2e:c0:d9:df:ec:ed:c1:ff:32:
                    07:ed:3d:08:fe:66:cd:a4:a9:57:fd:59:95:6d:e2:
                    df:f4:7f:6f:4f:6c:44:92:d3:8c:36:b5:86:87:97:
                    c1:3e:51:c4:d6:73:b8:1b:c4:07:74:5d:20:13:75:
                    c0:b8:d5:fe:73:f6:59:dd:cd:f1:af:aa:62:68:3f:
                    fa:91:86:7e:d9:d0:86:78:1a:6b:55:02:87:a5:23:
                    f5:3f:10:06:67:fc:91:39:14:c4:fe:ce:3d:50:9b:
                    40:e7:3e:17:a9:b4:31:05:11:db:f8:65:3a:af:ed:
                    ae:4f:e9:c7:90:f1:58:25:46:0f:5f:d8:f0:7b:1d:
                    6e:c7:2f:a5:1c:ce:75:9f:7a:17:55:42:6c:99:61:
                    2d:12:3b:9a:e1:27:23:ad:af:70:f7:6c:67:ab:05:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B1:25:44:C2:79:C8:F2:8A:3A:7D:AD:0C:28:8C:ED:F1:96:AB:04
            X509v3 Authority Key Identifier:
                keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1c:62:07:37:ae:45:b8:66:e7:36:2c:c6:12:9f:65:f3:e5:
         c6:c0:51:1e:74:d0:b0:e5:7f:9c:ad:3b:43:77:5a:e5:f2:2d:
         17:4a:77:92:d4:58:6f:4a:c5:52:c3:d0:98:b1:fe:a8:aa:52:
         7f:fb:9e:5f:d0:81:f5:db:3b:4f:db:2f:bc:2b:be:30:9d:ab:
         0c:01:e7:61:58:12:f6:ff:bc:ee:bf:4d:25:e7:1f:47:68:c9:
         6c:61:94:28:bf:2c:90:fc:81:be:72:c0:bd:89:78:51:49:d7:
         5f:35:ab:35:6c:03:34:25:8c:1d:a4:47:ef:a1:a0:19:64:a2:
         7d:5f:79:ec:9b:e6:a2:4a:e0:0d:59:b7:52:b6:c0:e0:85:0f:
         30:30:93:9c:7d:45:9a:92:79:33:2c:e7:ef:d9:5c:9b:8e:df:
         4d:e2:c4:75:ea:7c:06:04:45:3d:ee:b9:12:37:65:c3:4d:26:
         5b:ff:58:73:10:2c:42:04:8a:80:35:ba:89:a5:65:8c:22:ef:
         de:18:da:ec:c5:50:78:15:01:56:d0:b7:60:dd:c6:5e:26:b9:
         99:ce:03:3a:7d:74:18:f5:73:3f:e2:ed:c6:4f:07:16:98:26:
         dc:34:74:75:bd:25:46:8a:0f:57:52:a2:4a:0e:dc:68:ae:3a:
         c5:43:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:03 2026 by rpki-client