Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
File:                     p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json)
Hash identifier:          b+u85xaUnTI92u48UP1ms6pn21mwpTY3vPRxwHuKE48=
Subject key identifier:   66:12:62:4E:0B:FC:84:24:F2:20:70:28:40:56:0A:7C:1E:4D:72:19
Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
Certificate issuer:       /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Certificate serial:       0283
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
Manifest number:          027D
Signing time:             Tue 21 Jul 2026 03:01:43 +0000
Manifest this update:     Tue 21 Jul 2026 03:01:43 +0000
Manifest next update:     Tue 28 Jul 2026 03:01:43 +0000
Files and hashes:         1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: 5nSw7RH+0FZPX7Znc3foqlrXG0rF2Y4lq2AtjOA/Xpg=)
                          2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: WGorStRkbLwrigBvf/nQZHMe+/jic6JfhsJdmCHSYZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl
                          rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
        Validity
            Not Before: Jul 21 03:01:43 2026 GMT
            Not After : Jul 28 03:01:43 2026 GMT
        Subject: CN=6a5ee117-674e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:d4:5e:0f:50:9e:f4:3c:3f:ff:80:46:1c:
                    a8:f4:f0:23:61:4a:ab:ed:30:cd:0d:75:cc:be:5a:
                    4a:c6:13:54:b3:e0:2d:d2:62:57:17:16:c7:ef:33:
                    24:9c:dd:f5:c5:fe:d5:2a:4f:f5:4f:93:54:ad:73:
                    c6:45:50:e8:cf:13:ee:a2:3a:dd:b7:cf:a8:ee:9b:
                    17:d5:54:80:45:42:1f:a2:61:0d:26:0d:a7:c8:e0:
                    86:4c:f2:52:cc:89:94:f3:b8:4a:c9:ed:98:a9:92:
                    f8:41:11:24:3e:70:3d:15:7a:d7:94:50:e2:92:cb:
                    4f:64:5d:e5:d6:fe:ca:0b:64:2a:6f:a3:12:b4:7f:
                    70:1c:cc:f9:1b:29:e3:cf:75:98:df:61:15:e0:ec:
                    f5:d4:60:c0:29:b4:dc:e2:3f:1a:6d:94:7d:c6:bb:
                    a7:8d:7f:8a:87:7c:e6:d3:14:8a:32:72:5e:2f:75:
                    de:77:1f:35:5d:63:70:94:cd:75:fe:26:f7:d4:c8:
                    6a:42:24:a2:7a:ba:54:8b:6f:27:17:27:f3:a5:b2:
                    06:0e:da:98:97:08:18:f2:18:81:04:49:7a:b2:0d:
                    3b:78:d4:ae:53:08:44:60:ac:68:72:ea:23:f1:34:
                    b2:c4:b7:54:56:d2:ce:fc:eb:33:dd:21:c8:cf:fd:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:12:62:4E:0B:FC:84:24:F2:20:70:28:40:56:0A:7C:1E:4D:72:19
            X509v3 Authority Key Identifier:
                keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b4:a4:8e:ad:70:78:0b:e1:af:cf:8e:53:08:06:5b:91:02:
         03:7a:47:cc:96:71:dd:4b:88:a5:0a:5f:f8:e6:59:34:3e:73:
         b9:15:a0:59:0d:7b:ce:e1:bd:33:1a:f8:80:a6:08:a5:b1:7e:
         45:96:c4:85:df:c9:a6:3f:ce:e8:6b:3e:8d:fe:15:f0:db:11:
         cf:3d:48:f4:34:47:15:ec:4b:29:5f:29:00:1a:85:bd:fe:79:
         d6:90:d2:e8:d9:c6:1a:55:60:6b:16:fd:13:64:4e:6d:0b:b0:
         2f:05:e2:22:19:34:0f:ee:d9:31:c2:14:1e:87:1b:bd:77:50:
         c1:fe:81:27:23:4f:f3:1e:35:3e:00:e9:4e:0e:88:ef:c0:0b:
         77:61:95:f5:95:9d:32:5e:bc:1c:f3:94:c6:3d:4e:65:bf:fd:
         39:65:00:e6:35:44:13:83:fe:a7:5f:9e:f1:5d:82:23:de:53:
         c7:d8:ea:9a:3d:c0:23:7e:db:2b:18:8c:a0:0a:0b:74:64:64:
         fc:09:6d:2a:49:82:20:25:b2:9c:5c:31:c4:b3:9b:16:35:c0:
         08:30:f7:3a:c0:77:1f:b2:d8:44:2b:72:53:83:67:d7:02:92:
         b4:44:a7:ac:1b:47:de:cf:a7:9e:83:e0:cf:5e:0c:19:62:fd:
         74:6f:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:32 2026 by rpki-client