Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File:                     40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier:          efr3wZsf+QNwImNYB0ZiWJ5RaoUUatzv7IFhBCFcjyo=
Subject key identifier:   D4:D1:8A:7F:80:6C:E0:64:92:88:E6:3A:1A:6F:40:CC:B8:68:D5:87
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer:       /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial:       03C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number:          03B2
Signing time:             Tue 21 Jul 2026 01:33:25 +0000
Manifest this update:     Tue 21 Jul 2026 01:33:24 +0000
Manifest next update:     Tue 28 Jul 2026 01:33:24 +0000
Files and hashes:         1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: Coo9mh0jLYBiiOShwe3Rv8RDlOaJK1dmC7Zh6lsoQ84=)
                          2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=)
                          3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
                          rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
        Validity
            Not Before: Jul 21 01:33:24 2026 GMT
            Not After : Jul 28 01:33:24 2026 GMT
        Subject: CN=6a5ecc65-73e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:d6:cc:d9:34:87:8c:46:f9:a7:b7:ca:8f:
                    4c:b6:ea:8f:4a:05:fc:09:fe:95:16:d0:d4:b5:19:
                    77:14:2a:5e:a2:a0:05:39:eb:ad:d2:2f:ca:c5:17:
                    33:04:f3:95:b3:b2:ed:4d:13:6f:12:62:20:14:12:
                    93:99:69:07:0e:03:bd:9d:ff:42:ce:54:59:31:da:
                    df:fe:a2:3d:a7:27:80:c2:cf:00:e4:b9:e0:2c:ef:
                    f5:4f:e9:d7:d0:75:c7:09:1a:f9:e3:bf:c7:32:ed:
                    7a:be:65:8e:45:1b:aa:e2:3b:95:d3:c4:4e:1d:bf:
                    a7:ee:1e:d8:e0:aa:6b:3f:70:66:21:32:f2:95:ee:
                    a9:f6:75:2d:96:5d:9b:f0:6d:37:45:fd:50:a0:cb:
                    eb:a8:08:fa:79:84:fc:bd:03:7e:b2:9c:da:f9:60:
                    53:9e:57:e1:9e:58:14:57:fc:07:c3:2f:9a:69:ae:
                    9d:3d:11:5c:e0:59:93:21:34:bd:eb:b9:ac:f0:ae:
                    44:e8:ad:99:bd:ff:1d:a6:13:9a:12:2b:a0:3d:3a:
                    d6:13:9f:3a:bb:61:3f:9a:be:60:af:0c:18:a2:90:
                    18:73:56:36:db:e4:f1:48:2d:71:12:3a:cf:c1:f3:
                    19:8d:18:0b:9c:96:1a:76:12:fc:f3:e9:77:6e:76:
                    1a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D1:8A:7F:80:6C:E0:64:92:88:E6:3A:1A:6F:40:CC:B8:68:D5:87
            X509v3 Authority Key Identifier:
                keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7a:e4:da:41:43:fa:7c:c0:62:76:71:a1:c8:f8:3b:87:12:
         cb:9f:3e:61:e6:87:b5:8a:a4:6e:d0:35:d0:89:8d:ff:7d:1b:
         2a:96:12:b4:49:45:90:7b:45:3e:b0:1d:51:21:18:66:69:5c:
         28:fc:d1:c4:f6:ec:cd:07:eb:8c:3e:93:63:30:06:55:73:77:
         fc:75:3a:62:51:10:45:cb:13:99:43:f4:aa:d5:f1:36:6f:ae:
         13:35:7b:0e:c8:ef:0f:79:0e:90:5d:2b:d4:bf:34:50:b7:64:
         9d:c9:67:59:fc:05:ff:09:53:96:d9:2e:2d:10:e6:eb:06:a2:
         ec:35:d0:21:a1:43:7c:d4:27:26:f6:b4:7c:64:3c:22:10:90:
         e5:1a:8a:a8:00:fb:03:78:36:2e:c1:c1:e3:f9:5d:57:4e:82:
         3f:38:82:0c:ff:66:05:39:eb:6f:95:cc:8f:5d:6e:ac:18:74:
         b2:22:05:c5:53:99:73:ad:36:c0:81:b4:74:25:70:15:17:33:
         0e:a7:3a:63:aa:fd:92:5a:46:36:f8:fe:8f:a7:d3:a4:6c:27:
         7f:a9:22:04:b6:9b:ea:99:a8:18:c5:82:0a:d9:9b:b9:10:ac:
         d3:f5:41:20:0f:ed:81:6c:38:21:db:86:8a:3b:54:eb:41:a2:
         56:76:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:40:35 2026 by rpki-client