Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File:                     4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier:          9buIQbu+ifyKgR8ypC7RDWroIrSPoIVgimxk8r6pFmo=
Subject key identifier:   2C:C5:CF:A7:BF:B6:8B:96:E1:19:5A:C3:F7:BF:BD:08:79:3E:05:10
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       0375
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number:          033C
Signing time:             Fri 17 Jul 2026 01:44:15 +0000
Manifest this update:     Fri 17 Jul 2026 01:44:15 +0000
Manifest next update:     Fri 24 Jul 2026 01:44:15 +0000
Files and hashes:         1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: HLa3JURgZWgituvxfCbiC1hQHZvllELqVXObwWZt7ig=)
                          2: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: AInTRm364fWSsEgGDzFSbiLVDp6l9PBB3u+vGg6CfFw=)
                          3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: qxr1xAZVPVy5IH5flTFbZouBg69ZSR0F1Rre519E1ps=)
                          4: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=)
                          5: C3CAF2B45FA411F1BEAC166C6447A888.roa (hash: eWIo7kbVQkKc0K9IfxrOFYr5X4owiTYv5hYN6CSCNfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 01:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Jul 17 01:44:15 2026 GMT
            Not After : Jul 24 01:44:15 2026 GMT
        Subject: CN=6a5988ef-04e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:bb:c1:bd:3a:99:e9:da:d7:ea:4c:ee:45:
                    22:82:3a:69:ee:b2:5e:c3:b4:09:a4:22:10:55:9f:
                    05:3b:d6:92:8d:b6:e7:c3:5e:8d:c5:9d:04:6d:4a:
                    39:50:bf:82:7e:17:3a:16:19:84:71:25:01:43:76:
                    d9:8b:c7:fa:f7:3f:23:c4:1c:c9:7a:7f:01:7c:04:
                    9e:a6:d2:c6:56:f7:1a:fa:f5:11:20:aa:21:f2:e0:
                    de:86:5c:d8:5a:74:64:7d:e1:c4:20:16:ed:7a:cd:
                    49:d5:75:03:6e:e8:ec:f8:33:23:16:6a:3c:b0:c2:
                    dd:06:58:cd:81:19:ae:ea:08:5f:32:78:6b:37:e0:
                    e7:e9:19:f9:42:81:ff:91:82:82:d6:73:2f:37:db:
                    b6:b3:f5:06:ee:59:00:19:d5:b0:39:4a:ab:e5:d2:
                    6c:58:9d:62:32:10:6a:0a:87:f0:f3:be:85:68:c7:
                    e9:7f:b3:20:98:82:90:8f:1a:63:9c:b9:a0:8b:8a:
                    16:0e:aa:03:e2:a9:76:b8:91:18:40:7c:0f:dc:91:
                    9a:3e:5d:c3:1d:f6:26:fb:cd:f9:16:e3:21:53:54:
                    9c:b9:bb:19:4f:24:f0:25:17:1b:88:e5:0d:16:02:
                    3e:e2:04:b0:90:0e:dd:f2:dd:8e:8d:a1:cc:76:23:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C5:CF:A7:BF:B6:8B:96:E1:19:5A:C3:F7:BF:BD:08:79:3E:05:10
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:20:5c:74:b8:bd:d3:2f:d7:23:d2:c3:be:76:c2:fc:d4:58:
         f0:58:d0:53:9e:8e:96:3b:70:de:29:aa:6b:2c:5f:13:a2:57:
         64:ad:2d:f2:16:53:72:c0:4f:cf:3b:49:39:6e:26:d2:05:9e:
         86:88:c5:7b:dd:d1:16:5d:e5:a1:0f:c3:f7:f9:10:b5:78:ff:
         c7:39:7b:60:bd:26:41:16:b5:ad:56:18:6a:30:48:50:73:90:
         93:75:c4:05:32:67:a3:e2:1c:1b:51:ee:24:82:f6:39:c8:5d:
         ad:15:fe:cf:58:83:54:77:a2:48:a8:b0:74:65:54:e7:91:c8:
         53:28:6e:80:32:0e:4a:8c:cb:ce:ad:ef:5a:e2:93:66:b3:ea:
         fb:39:6c:53:fb:2a:89:c8:4b:f2:35:9a:de:f4:8a:da:af:8b:
         0b:d2:1f:1b:61:62:fb:03:57:6a:7d:34:b6:f9:81:62:62:8e:
         7d:b6:25:b2:f5:82:79:78:8f:54:57:e1:ec:f8:86:7b:de:13:
         7e:2e:4f:cb:e0:67:84:6c:9a:cb:0d:49:1c:2f:22:73:19:18:
         75:45:98:4c:af:50:b6:f8:52:71:7e:14:6d:51:57:59:03:8d:
         ed:85:7e:90:39:6f:ca:89:ca:8f:26:c9:74:c7:0b:d6:09:5e:
         4f:65:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:52:40 2026 by rpki-client