Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
File:                     4mcctGrTmxwXJOxjzVOymz5IHpk.mft (raw, json)
Hash identifier:          LdBmPISglbx1FLjUomZuI+DJy+i2VkHel3ch4/IEzEo=
Subject key identifier:   B2:E6:CF:58:8C:DF:1B:39:43:91:74:7B:8F:0F:BE:76:65:B8:18:38
Authority key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
Certificate issuer:       /CN=A914145F/serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
Manifest number:          48
Signing time:             Tue 21 Jul 2026 10:13:00 +0000
Manifest this update:     Tue 21 Jul 2026 10:12:59 +0000
Manifest next update:     Tue 28 Jul 2026 10:12:59 +0000
Files and hashes:         1: 4mcctGrTmxwXJOxjzVOymz5IHpk.crl (hash: tHTgQvPIojdlUlCUax4mgAqY3ImpS35KQ33CMjWx68E=)
                          2: 2D0F8E9E16BA11F18FA4AADE273D8C67.roa (hash: yWwtKIoGzkza5ajepsaaRnUFxlesI9AwU+G4CnGMim4=)
                          3: 2C8A1D2C16BA11F18FA4AADE273D8C67.roa (hash: twoRF5oqlZ7HCh1Oa3drRkDKu566LB667OHWRh/w7Jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
                          rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
        Validity
            Not Before: Jul 21 10:12:59 2026 GMT
            Not After : Jul 28 10:12:59 2026 GMT
        Subject: CN=6a5f462b-7782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:15:0e:62:1c:b0:ca:24:3a:3b:0c:58:5c:
                    20:8d:46:f2:ad:57:ca:cc:d0:60:df:73:e6:bf:84:
                    75:cf:db:a6:b4:b9:75:7e:a3:ff:8b:ee:72:8e:95:
                    6f:ae:c0:0f:8c:2a:c9:3e:3c:e6:5e:e7:ae:43:17:
                    27:57:90:55:8a:bf:b6:c1:00:b0:96:55:28:91:6c:
                    32:de:ef:35:50:b5:ff:09:46:25:3b:59:a1:99:f0:
                    35:ed:6b:d6:73:b3:b9:9f:01:82:bf:bb:fe:99:ce:
                    7c:74:87:5b:c3:06:52:1f:3b:56:68:7f:02:59:56:
                    b5:9c:0e:d7:2f:f2:81:ce:b9:ed:50:71:73:7f:ad:
                    cd:bf:fe:a1:f1:cc:ca:2a:ea:e3:c5:24:48:05:09:
                    74:00:bd:dd:0a:bb:ac:30:13:77:13:31:71:92:f4:
                    1c:d0:b4:7b:ec:fa:29:2a:ae:62:87:4e:d6:85:97:
                    85:0d:15:1f:38:ac:81:2f:df:76:1d:e2:8a:40:66:
                    9c:09:c2:a2:64:b1:a5:d4:25:99:b0:7e:57:67:9f:
                    41:d9:de:f2:0c:6b:79:ee:46:3d:7c:59:88:12:56:
                    cc:09:5e:87:2f:e3:2b:15:58:de:05:13:c0:c6:12:
                    82:7d:db:68:d2:df:51:f4:76:f7:38:64:0e:e9:e4:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E6:CF:58:8C:DF:1B:39:43:91:74:7B:8F:0F:BE:76:65:B8:18:38
            X509v3 Authority Key Identifier:
                keyid:E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:c8:ac:fc:86:f6:32:17:f9:af:12:7d:3e:59:80:be:f5:
         d2:48:dd:57:e6:f2:ef:26:bf:25:45:49:75:a3:a1:86:f2:c3:
         d9:0f:c1:88:87:6e:4e:0f:c6:15:a5:0e:57:43:16:6a:47:b5:
         df:b2:8b:e3:07:0e:bc:39:e9:3c:ec:48:25:97:be:a8:56:dc:
         53:92:8a:a2:be:57:a3:4b:3b:9f:90:77:be:3b:75:35:00:5e:
         69:a4:da:f5:63:d7:04:47:e7:93:28:fb:ad:42:95:77:ee:da:
         e7:e2:65:f7:dc:07:1b:ce:f2:68:71:c5:75:be:5e:de:c2:62:
         a4:91:34:24:bf:42:c2:ce:30:cf:f7:ae:33:06:bb:3e:07:8b:
         03:fb:f8:6f:ef:70:b7:8b:34:47:8b:cf:9d:61:be:0d:17:07:
         ee:80:e6:df:b5:d0:c5:73:32:c2:88:9f:d0:b2:e8:87:23:3c:
         95:c0:d0:d5:4d:46:7a:75:8b:6f:b4:b0:eb:62:05:82:5e:0c:
         3b:24:2c:8f:85:7c:58:31:55:72:f8:67:e3:87:02:2e:1c:d7:
         50:e5:2e:41:98:16:b2:fb:71:0f:61:d8:37:b0:81:96:91:fa:
         13:fa:7d:c3:c4:73:b6:fe:ed:04:6e:9e:08:5b:3e:9d:98:a6:
         b3:5a:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:51 2026 by rpki-client