Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
File:                     c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json)
Hash identifier:          g0TRNqhuoHVFelgFLwWCjI5Q6znwhcW2ePwFODa8MH0=
Subject key identifier:   C6:71:68:BF:66:23:81:0A:D3:0F:92:39:A8:3F:AD:E8:6B:27:43:5B
Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
Certificate issuer:       /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Certificate serial:       0AD2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
Manifest number:          0AA6
Signing time:             Sun 02 Aug 2026 19:47:51 +0000
Manifest this update:     Sun 02 Aug 2026 19:47:50 +0000
Manifest next update:     Sun 09 Aug 2026 19:47:50 +0000
Files and hashes:         1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: eYyeLC+wxijuUoqmeJ2Qm6pT+lllUJLGHJnw5YCUA2o=)
                          2: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: G/h6ay+lVDrxmj5QAHf9M00uXSgMYuBFxLTXw3Ioa1o=)
                          3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: GltJ8ldfOd4MALKW5R9sn4CvSE9nA9cuV/EopB0f2fc=)
                          4: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: bk/7/6niDOy4Wgez/WOfJOA9hAaC3ZIe5csnBCnmc2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
                          rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 19:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2770 (0xad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
        Validity
            Not Before: Aug  2 19:47:50 2026 GMT
            Not After : Aug  9 19:47:50 2026 GMT
        Subject: CN=6a6f9ee7-d16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:db:cc:36:94:f5:56:9a:8a:82:e0:09:d5:
                    34:5e:e7:a1:90:f6:1f:69:2a:b9:5c:ae:26:ee:0d:
                    36:3a:60:40:bb:17:f5:18:10:4b:8b:ce:0a:17:e1:
                    94:0e:26:c3:5f:56:fb:50:b5:83:c8:e1:02:47:62:
                    eb:93:d7:7d:69:dd:f0:22:ff:90:0c:f5:c0:cd:1e:
                    de:1b:b3:7c:63:c7:63:6d:20:71:04:36:84:8f:55:
                    eb:00:0a:27:ba:18:a7:ba:88:56:98:09:6d:7b:c9:
                    2c:04:1c:ad:91:ec:68:16:2c:e8:6c:89:32:ba:03:
                    f6:05:ea:0d:53:67:7d:15:cb:46:01:df:37:d9:bf:
                    bb:29:b2:be:3d:7e:8e:b0:9a:fb:62:59:7c:75:a8:
                    af:4b:39:a7:ca:3c:a5:c3:eb:a4:bf:dd:18:19:09:
                    5b:92:08:bc:1c:45:9e:54:76:d1:9e:62:21:73:b3:
                    59:b5:47:80:76:66:96:30:d9:fb:2b:97:53:11:8d:
                    06:0a:3c:f2:19:8e:21:bd:72:92:c2:42:a5:2a:90:
                    7d:e3:24:1d:d4:e5:be:c3:57:57:63:52:12:19:35:
                    ab:89:10:88:35:9b:c4:37:a7:8f:4b:cf:07:6e:3a:
                    7f:ef:c3:b6:69:8a:13:da:de:df:d1:33:a2:fe:ad:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:68:BF:66:23:81:0A:D3:0F:92:39:A8:3F:AD:E8:6B:27:43:5B
            X509v3 Authority Key Identifier:
                keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:13:ff:14:5e:2c:3d:34:e4:dc:06:2e:9b:1b:31:df:e5:94:
         c4:c3:fa:8a:03:fd:4a:11:a3:aa:ec:11:e2:bb:62:93:97:ba:
         6e:7f:95:05:c1:58:41:41:85:f5:c3:8b:39:fb:8e:9b:47:b4:
         c0:97:6f:11:fa:d8:aa:6f:48:0d:3c:70:78:08:6d:9b:c0:7b:
         ca:50:d0:2f:21:f9:b2:b9:d1:22:54:6e:d9:d5:37:95:da:de:
         6b:6a:9a:01:d2:4c:35:df:b9:1d:4f:28:ef:db:93:b1:10:73:
         b4:46:db:5e:52:f2:35:f9:f0:f0:db:08:f6:73:2d:49:4f:ea:
         13:13:e8:55:95:d4:da:fc:38:f9:99:01:b8:74:53:e0:b5:43:
         6b:98:a7:0e:7f:eb:73:79:85:7e:e0:9f:ed:80:bf:eb:56:0a:
         2c:62:1f:8d:b8:72:0a:c9:fe:48:75:b6:58:21:3d:06:76:86:
         25:39:b2:fc:74:1c:e3:93:6b:63:cc:79:ff:8a:df:86:32:de:
         9e:b7:17:4c:4b:3a:16:a5:7b:cd:51:a2:d6:dd:11:a9:49:cd:
         a8:54:f9:6d:dc:98:5d:9d:42:13:d4:c1:02:cb:8c:6a:80:5a:
         24:c8:1c:9e:9f:3c:52:2d:ad:88:68:42:14:9b:07:d9:39:91:
         01:be:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:33:57 2026 by rpki-client