Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          tyymDLOycSivRRaHrty9ZZDGpF89jHSQFDDyBsn65E4=
Subject key identifier:   60:C4:77:DF:49:2D:E0:44:7B:66:7D:4F:1E:1A:0F:F2:24:1B:BB:21
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          0166
Signing time:             Mon 27 Jul 2026 06:55:57 +0000
Manifest this update:     Mon 27 Jul 2026 06:55:56 +0000
Manifest next update:     Mon 03 Aug 2026 06:55:56 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: PVQ3hA9Aj+jhmeFvqApC0549Rej2qA/WdQXG51MWE2I=)
                          2: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: zR70IjBkFq8imIW3hGFMMhMRDbM40qlqunUzoF9Z2S8=)
                          3: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: 1lIzFQEALQy8v+QadRa7FoXrMcnKcVBzKsOnfc22ih8=)
                          4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: qYPMtqaT2dl4M1S1nYlOq36a/DlHhwOSpr/FUWfOeEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Jul 27 06:55:56 2026 GMT
            Not After : Aug  3 06:55:56 2026 GMT
        Subject: CN=6a6700fd-0ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:60:ed:17:88:a0:68:07:80:76:cc:ec:05:
                    c6:3a:60:96:33:94:a3:eb:83:96:b4:35:b0:0c:df:
                    72:b0:bd:82:68:dc:33:8a:4a:ab:7c:14:19:96:15:
                    f1:5a:b3:91:f7:23:58:b8:23:4c:8c:e6:20:a9:c5:
                    aa:fe:51:76:a3:bd:73:6f:2d:58:eb:19:8c:a2:36:
                    28:56:5a:83:77:47:3f:87:1d:12:db:4c:5a:b1:f5:
                    9d:f7:cb:75:2f:39:8a:44:db:a3:7d:60:4d:fa:7e:
                    be:12:0a:f4:11:a7:c2:f4:28:ee:43:8a:c5:3b:b0:
                    fa:fe:a3:3a:80:fe:fe:06:bf:9c:fa:1b:10:14:d6:
                    f3:93:45:e5:e8:1b:03:63:5f:68:bc:50:82:c1:55:
                    4e:8d:0b:62:e7:b7:14:4c:69:c4:0d:da:09:ec:bb:
                    32:de:a5:46:10:60:df:d2:49:87:fe:7e:c2:c3:ef:
                    b1:a0:c0:42:7b:c1:38:b7:43:e2:ca:f2:36:4c:3b:
                    9f:30:01:f6:24:79:13:d9:17:6d:12:f6:50:8e:71:
                    d9:ef:c5:31:9e:88:ef:91:16:b6:70:17:d5:58:e5:
                    39:92:4e:f6:c2:c2:b0:97:42:30:74:45:49:6c:59:
                    bb:fc:11:f8:f2:37:96:9d:0f:93:48:87:f4:7d:63:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:77:DF:49:2D:E0:44:7B:66:7D:4F:1E:1A:0F:F2:24:1B:BB:21
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:93:ef:67:3e:bd:06:29:2d:c5:31:d9:b8:a0:a4:9b:bb:
         86:07:5b:25:5f:f7:ab:1a:d9:9f:53:d5:32:02:23:de:0b:be:
         43:7b:5a:ed:c8:94:4b:78:a7:5e:c0:c2:b8:30:15:c8:61:38:
         42:a9:59:4f:25:30:26:57:06:c1:d7:b4:7a:22:85:2c:17:86:
         c6:e7:70:35:4f:34:24:21:e7:29:09:8d:ea:bf:da:b0:8e:0c:
         f0:19:40:a3:61:9d:1a:95:a9:01:8f:45:a2:d3:6f:d9:41:cc:
         5e:16:0f:da:ae:3a:25:48:1a:6d:c6:08:e2:7f:11:bf:83:ee:
         f7:55:41:c3:1f:b8:e2:b7:69:33:f5:87:22:89:1a:3d:26:25:
         43:d8:b9:62:75:d5:55:e2:e4:8b:ec:c6:e6:79:8d:f6:e2:f5:
         f6:d6:9e:41:68:e3:00:53:5b:77:c4:98:40:49:10:99:3e:4e:
         db:67:af:2a:19:27:fe:9a:4a:16:60:c7:d2:df:a2:8d:bf:eb:
         3a:42:cc:09:1c:9a:9f:d6:6b:ef:3b:91:fa:59:6b:be:8a:24:
         7a:92:8e:8a:3e:b6:54:5f:56:fe:79:e3:ff:0a:e6:76:23:ac:
         bd:31:a2:09:d3:ce:60:b8:c1:e3:29:db:28:44:9f:1d:80:99:
         cb:dd:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:50 2026 by rpki-client