Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
File:                     r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json)
Hash identifier:          9xEEYjRrygTA09blsN6K9MrO6sRfx/A7s3wf0K3Zhaw=
Subject key identifier:   5E:98:7D:9F:F3:D9:DF:8E:E4:BF:8E:40:BA:33:B4:ED:C2:09:9E:D3
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
Manifest number:          98
Signing time:             Fri 17 Jul 2026 08:42:13 +0000
Manifest this update:     Fri 17 Jul 2026 08:42:13 +0000
Manifest next update:     Fri 24 Jul 2026 08:42:13 +0000
Files and hashes:         1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: QfF2HiM7WN1vxKfAB50d2mwtgqnvrAguNIxXZxoqjtU=)
                          2: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=)
                          3: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: sHZWg+rU11rfUXJ4Q8l6qWY6glFT+3CM23A66tmDljo=)
                          4: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Jul 17 08:42:13 2026 GMT
            Not After : Jul 24 08:42:13 2026 GMT
        Subject: CN=6a59eae5-70d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:dc:58:ac:2f:a1:35:a7:54:70:8f:32:4b:
                    71:d9:94:c4:9e:75:7d:31:ac:c7:2e:e1:63:a1:ee:
                    80:98:52:5c:82:e6:58:7f:da:09:eb:1c:e5:9d:8a:
                    dd:8c:8a:41:a2:b3:7f:03:b0:20:61:38:5c:0a:d5:
                    7a:7b:5e:43:94:3e:1f:f8:cc:02:eb:68:6f:94:c8:
                    56:cd:28:21:d5:ad:e1:35:26:c4:ed:c9:b4:7f:6a:
                    5f:63:c0:7b:25:09:7f:c2:e3:84:9c:70:db:13:6b:
                    a8:27:be:fa:93:93:55:6d:d8:35:70:bd:8d:33:76:
                    27:07:d1:d9:26:28:67:c5:c8:b2:55:b4:29:a7:3c:
                    f0:b0:5c:04:5e:9e:7e:c4:c8:9f:30:f4:d3:93:5b:
                    a3:72:d6:25:ce:45:9b:20:f3:e7:c0:e9:90:cd:c3:
                    c4:e6:17:d6:70:a3:12:20:93:ac:dc:84:e1:5f:ca:
                    21:7e:47:11:6b:47:2e:23:46:aa:20:e2:0e:0f:cf:
                    c0:3c:90:1e:16:1e:6f:c0:6d:94:ee:a8:89:2e:cc:
                    62:cb:8d:9b:20:74:60:1e:02:bf:37:5f:75:95:9d:
                    b8:df:87:11:1e:2b:27:00:a6:9f:fb:f4:89:1c:63:
                    91:64:16:76:cf:2d:fc:c8:bb:9b:2e:33:f5:9e:70:
                    99:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:98:7D:9F:F3:D9:DF:8E:E4:BF:8E:40:BA:33:B4:ED:C2:09:9E:D3
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:dd:37:e8:a5:b4:77:51:bf:f4:7b:99:9e:e7:bf:d2:59:67:
         33:e1:35:59:77:16:9e:aa:bb:fe:61:30:64:29:9e:8e:8d:e8:
         ad:33:69:0e:ad:3d:2c:00:07:52:e9:b0:12:7e:dd:fa:32:09:
         2b:13:40:d9:5f:47:be:c5:c4:75:e1:32:02:b8:4b:9f:b1:6b:
         b8:e8:30:e6:f7:72:c8:b4:9d:ae:c8:c1:94:ae:7a:9d:00:6f:
         11:03:9a:40:a5:a8:19:d8:75:a2:11:75:25:82:3c:6c:83:70:
         e6:b2:7b:a5:9b:38:61:d4:f9:15:54:bb:25:ba:cc:42:c9:43:
         e1:0c:ed:d6:c2:d3:f0:0b:97:e5:a1:83:09:fa:24:bb:84:f9:
         0d:c1:1d:41:25:55:bd:c8:25:8d:bf:a0:d1:e3:63:d7:ed:e3:
         21:76:6f:0f:3e:a3:92:ef:cf:2a:33:2b:70:64:83:ee:3e:a9:
         1c:d5:bb:ac:8a:ba:8d:e8:af:a8:5e:ff:e2:66:b9:82:6e:ef:
         ca:aa:46:71:25:a0:ee:f9:ef:1a:50:cb:f9:ae:02:31:f9:36:
         a3:86:ca:c9:89:c8:65:97:42:bd:9f:70:44:67:f6:e2:8d:13:
         4d:2f:a8:e9:bf:ed:64:b3:bf:8a:8a:0e:a5:99:93:f8:0c:d3:
         dc:66:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:00:05 2026 by rpki-client