Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
File:                     sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json)
Hash identifier:          9/aewELTAEnxqUR0KqqiBaHlzUh9vngdzn/emD8veGc=
Subject key identifier:   0E:E9:AF:95:7A:31:92:91:4D:B5:F9:2B:50:E8:0A:59:64:63:9E:B9
Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95
Certificate issuer:       /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
Certificate serial:       0404
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
Manifest number:          0400
Signing time:             Mon 27 Jul 2026 01:30:23 +0000
Manifest this update:     Mon 27 Jul 2026 01:30:22 +0000
Manifest next update:     Mon 03 Aug 2026 01:30:22 +0000
Files and hashes:         1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: 8zG1jX6EE3kVxZy0rgv+IHHOWEFD4AFnDb/UN0L4jEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl
                          rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
        Validity
            Not Before: Jul 27 01:30:22 2026 GMT
            Not After : Aug  3 01:30:22 2026 GMT
        Subject: CN=6a66b4af-850f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:47:7e:61:93:00:af:b0:e1:ea:15:3e:21:
                    65:62:ec:02:d5:15:fe:7f:6f:d3:17:fd:44:b2:63:
                    fb:15:2f:79:38:66:c8:12:c6:e7:5e:f5:23:65:12:
                    13:9b:95:81:aa:ba:7e:00:f3:03:14:d3:b4:3d:11:
                    9f:99:dd:ca:de:f9:5b:5c:58:e7:47:56:cc:c5:9a:
                    c1:02:be:98:64:a2:7f:08:6b:ea:37:d7:eb:fd:e9:
                    48:83:f0:84:61:cb:32:0f:41:d1:4a:0b:ca:94:b6:
                    61:c9:9b:41:fe:01:fc:2b:9b:26:c9:86:dd:76:f1:
                    c7:b7:31:d7:cd:82:0f:67:81:59:0e:8a:1b:ee:2c:
                    4a:16:8e:2f:3f:b9:76:68:c6:14:83:e4:16:e2:38:
                    46:67:f4:0c:4e:5e:f1:34:4b:37:73:6e:cb:2b:2b:
                    d4:01:c1:a4:91:ef:ca:42:7d:18:8b:4f:55:87:76:
                    51:36:ba:6f:d6:2a:c8:1c:8a:e2:71:03:41:d3:5d:
                    f3:21:d5:09:91:72:a7:79:1e:67:f2:eb:a8:43:e7:
                    fd:49:f4:80:6e:20:cd:5f:08:08:dc:c8:03:2c:72:
                    5c:a1:98:f9:7f:5b:4e:90:97:96:f6:e5:0f:29:13:
                    33:7c:6c:57:e8:e3:3a:08:94:4f:7f:6a:70:76:69:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E9:AF:95:7A:31:92:91:4D:B5:F9:2B:50:E8:0A:59:64:63:9E:B9
            X509v3 Authority Key Identifier:
                keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:cb:d6:63:72:60:82:46:da:f6:c9:9c:d6:4e:a0:e1:4c:
         b1:71:10:50:05:f9:eb:f7:0b:0d:36:a1:87:7c:15:f0:ca:d5:
         2c:a2:74:59:dd:54:cd:89:3c:d0:6c:fe:f5:5b:b1:eb:69:07:
         84:b9:5c:d9:12:58:a3:2b:7d:07:5d:df:18:a9:b6:88:15:cc:
         23:c0:d7:ec:74:30:ce:57:ea:8e:6f:4d:73:f0:f4:d8:ba:f0:
         87:70:f9:07:2a:71:f5:44:02:a9:42:42:70:69:e8:63:cb:4c:
         09:b8:4a:f2:2b:25:c6:91:77:50:1d:28:da:13:3a:04:95:7f:
         6e:4e:62:cb:0e:0e:03:50:53:1f:b3:f2:22:af:63:da:bc:84:
         02:dc:f0:43:40:26:5e:bf:a8:bd:1f:99:ed:b4:7b:3f:9f:8b:
         8b:fe:7e:a1:5c:c6:94:50:70:fb:1a:47:63:53:41:e9:f9:b8:
         e8:29:b4:c9:0f:06:b6:0e:a3:3f:99:d4:d6:83:8c:20:8c:f5:
         ff:0e:64:62:c2:8c:98:75:b9:73:6b:7a:90:36:9e:22:08:13:
         58:7e:50:3a:ba:53:7e:6d:e4:bf:1e:c9:99:7e:10:bd:1a:8d:
         c9:cd:13:72:4f:a3:1c:8e:9e:d7:51:b7:df:3d:e2:b6:74:42:
         c7:d1:d4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:32 2026 by rpki-client