Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File:                     0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier:          hGbGyAI0Dvkn5cNFfbTxAptXIaGgSWSQDaiEOCfn430=
Subject key identifier:   2A:AC:82:DA:60:B7:E7:77:95:D2:48:74:13:1E:69:C9:69:8A:43:1B
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer:       /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number:          01A0
Signing time:             Mon 27 Jul 2026 05:49:37 +0000
Manifest this update:     Mon 27 Jul 2026 05:49:36 +0000
Manifest next update:     Mon 03 Aug 2026 05:49:36 +0000
Files and hashes:         1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: Q/b6C15e3fCUh2+J4JnckyPhSQ9/eWOtx1N6+cclUbE=)
                          2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: rTmYP4vftuu9LnK2M6aljj2neyfU2VajOjI+M4V6OzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
                          rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
        Validity
            Not Before: Jul 27 05:49:36 2026 GMT
            Not After : Aug  3 05:49:36 2026 GMT
        Subject: CN=6a66f171-fdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:77:a5:d7:45:f8:50:5a:84:13:80:29:53:
                    12:f3:50:0c:0e:a6:0d:59:ff:93:68:b1:fb:29:78:
                    84:55:92:6a:10:60:7f:42:4d:4a:1d:88:0e:f5:12:
                    78:63:97:a4:39:0f:3b:e5:5c:92:47:45:4e:1d:8e:
                    4b:57:98:f0:33:22:c7:13:32:46:b2:46:15:bb:8a:
                    45:1b:9f:64:21:8d:16:5d:ff:8a:8d:95:9e:5a:56:
                    a9:dc:2c:41:d5:89:6e:ca:9e:74:0e:4d:0f:00:41:
                    c1:63:7c:3d:c8:c1:51:6c:e7:12:a1:f1:82:5b:90:
                    6c:19:01:e7:a5:8e:54:50:67:76:a1:e8:7f:24:18:
                    75:19:e6:c2:be:83:de:cc:6d:50:53:b0:a3:4b:cf:
                    16:2f:dc:99:45:67:67:e2:ca:df:36:6c:25:82:06:
                    74:13:ed:3d:71:d8:fa:e4:8c:cb:68:8b:4e:77:b7:
                    53:f7:27:40:12:0c:e5:62:a8:eb:79:bf:e8:84:27:
                    55:18:df:86:eb:0a:58:ea:9e:ed:bf:3d:a9:15:27:
                    60:92:35:7a:46:dc:9a:98:9e:a7:2a:31:66:8a:fa:
                    4b:38:00:02:48:d2:2b:b9:e5:7b:9d:5c:02:a1:13:
                    0e:f1:f8:ab:c6:5d:e2:2c:aa:9f:af:ee:b1:1b:a7:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AC:82:DA:60:B7:E7:77:95:D2:48:74:13:1E:69:C9:69:8A:43:1B
            X509v3 Authority Key Identifier:
                keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:b6:93:2c:f5:2c:2b:1a:b2:92:03:9d:c2:fa:ef:43:70:
         99:1d:65:7c:e5:3e:f3:c3:75:9b:f5:e9:dc:00:7e:71:85:21:
         e0:ce:37:8a:32:76:2b:ad:94:84:1e:9d:5b:18:a9:78:e5:e4:
         53:e8:b8:49:52:07:cb:ae:e2:c8:fa:c1:a0:6f:a6:5f:b8:34:
         b1:a0:86:59:d1:0f:55:6c:51:c0:d3:ec:d8:55:b0:c5:25:e1:
         40:8e:1c:d0:03:1e:21:e0:58:b6:78:ba:4a:f3:94:3a:b7:fb:
         e8:c0:d4:65:8d:c7:3c:e8:34:3a:e3:4c:bc:f4:f5:19:e4:52:
         8c:6c:f6:37:04:64:ef:69:86:05:b9:05:49:56:27:74:a3:a4:
         7d:ee:70:e5:84:23:cc:d9:99:ec:5c:b2:c0:3e:8c:c3:c2:d9:
         21:7a:e5:3a:15:52:cc:c0:47:36:da:6d:e1:79:c7:eb:43:d0:
         60:97:bf:b1:28:f2:0c:52:6e:a9:30:7c:60:7e:1d:7b:17:7f:
         c4:b0:96:9d:c1:f0:19:88:8d:e5:0f:b5:60:38:91:72:df:e4:
         bc:11:5b:36:92:0f:c8:39:ba:08:09:6b:f0:16:74:3e:cd:a4:
         11:c0:84:72:af:4d:47:7d:2d:83:5f:87:26:14:c5:d7:fd:78:
         75:1e:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:10 2026 by rpki-client