Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File:                     fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier:          SZRDy/iS5Qmz0WmrDtV4Cghb3Vz942mdzCjmABoW/z8=
Subject key identifier:   5A:23:6B:74:7E:49:1F:06:F8:E0:AA:5C:C6:56:70:4E:C1:A2:19:77
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer:       /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number:          0885
Signing time:             Wed 08 Jul 2026 21:26:20 +0000
Manifest this update:     Wed 08 Jul 2026 21:26:20 +0000
Manifest next update:     Wed 15 Jul 2026 21:26:20 +0000
Files and hashes:         1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: IbuE9PaIw9a40+Tng/htCYxqu3GmRMEhushtkRcBdgY=)
                          2: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=)
                          3: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: 0c3kOHhoaretnNoGmEe06A8CZn/rk8uulX8vCvx7VMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
                          rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 21:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
        Validity
            Not Before: Jul  8 21:26:20 2026 GMT
            Not After : Jul 15 21:26:20 2026 GMT
        Subject: CN=6a4ec07c-6ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:e9:44:2f:ad:90:00:7d:54:b1:0d:ea:d6:
                    d5:85:14:22:63:bf:77:8e:93:b0:5b:9f:b5:50:52:
                    7f:77:2b:97:e0:a0:4d:77:7e:a1:ad:cc:71:3b:4c:
                    2b:e2:ef:e0:50:7f:04:3a:75:1f:e5:d5:be:ce:4f:
                    92:ff:20:77:95:f4:a7:3e:4b:9d:fa:57:71:36:6a:
                    0f:4c:b0:61:3a:ad:ad:31:d2:8b:dd:47:3a:c7:33:
                    85:a9:4c:a6:62:9c:ba:34:10:d2:e2:10:91:20:a8:
                    e5:ac:92:d1:26:73:37:3d:78:c3:6d:b6:5c:17:a5:
                    ec:b0:4f:ca:db:51:f9:88:dc:30:ca:93:1b:84:a4:
                    35:7a:17:2d:d3:b9:47:90:6a:7d:4b:e4:89:a3:17:
                    0e:3c:41:3d:96:3a:45:cb:1c:27:e8:31:39:76:b1:
                    90:ea:9b:04:d3:36:cf:2e:5e:cf:73:83:c8:24:e7:
                    6b:2f:e2:92:59:7d:8d:a2:e6:ac:13:2a:99:e5:06:
                    c4:be:25:5a:86:fb:07:bd:22:84:27:27:58:d4:50:
                    3f:08:a4:c7:64:77:a5:e3:5c:25:91:a2:ed:b6:af:
                    81:60:86:6a:ce:8e:b6:60:44:0f:39:60:cb:88:bd:
                    1f:62:99:73:51:4c:ee:39:41:b8:64:94:df:91:03:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:23:6B:74:7E:49:1F:06:F8:E0:AA:5C:C6:56:70:4E:C1:A2:19:77
            X509v3 Authority Key Identifier:
                keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:3d:9e:88:c7:58:83:54:75:72:1b:3d:4a:63:54:39:63:
         e2:26:ea:c2:39:08:9e:63:31:85:d3:55:c6:57:21:04:1e:de:
         81:b3:5e:de:b6:9c:70:55:52:3a:18:29:23:91:80:3f:5e:df:
         5b:87:53:bb:f9:3f:04:56:b2:2d:b5:04:84:81:ee:25:59:13:
         3a:1b:7c:d4:d3:1d:14:b8:33:e4:b3:bc:4b:28:05:b8:12:0a:
         e8:cb:0b:cb:30:b2:d6:ad:54:15:be:cc:60:cb:f7:ee:62:3a:
         89:30:af:c0:ef:0d:c0:b6:9f:d5:91:33:00:5c:3b:e3:0a:38:
         27:02:ee:3f:c0:3f:6e:f6:c6:9c:ff:ea:63:13:10:ba:24:3c:
         95:6d:bc:38:fd:59:f1:e4:3c:38:8b:d5:2b:79:3e:4d:ae:b3:
         0f:f7:4a:27:53:4e:59:c6:38:24:4c:25:d8:db:2b:09:f9:ed:
         79:b0:9b:a1:d7:f0:11:03:77:72:f9:40:86:2b:2c:c1:54:90:
         22:35:9b:50:ec:a1:04:19:e1:6e:7d:93:de:1a:be:3d:17:f8:
         37:c7:bb:3b:53:f3:d9:ba:bd:e3:c6:f2:12:0a:2e:49:0f:d1:
         6f:03:96:db:79:c0:ec:d5:6e:8e:9b:3f:2a:81:79:d0:ca:73:
         7a:34:3f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 11:07:24 2026 by rpki-client