Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
File:                     -tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft (raw, json)
Hash identifier:          3kK8m1/W10GY6u81GRONZH+Uy3R4notRch4TNo6HCnw=
Subject key identifier:   47:52:2E:66:B2:C6:C5:23:07:29:3E:84:6C:70:8B:FA:E3:DF:3E:6F
Authority key identifier: FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
Certificate issuer:       /CN=A915E061/serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
Manifest number:          4A
Signing time:             Tue 21 Jul 2026 10:12:27 +0000
Manifest this update:     Tue 21 Jul 2026 10:12:27 +0000
Manifest next update:     Tue 28 Jul 2026 10:12:27 +0000
Files and hashes:         1: -tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl (hash: vUNLCW97XkFdVCgrWKyxVCgHdtKdJdCBFZDQ3Gxab4k=)
                          2: CE992CA0138D11F198EDAC703A3D8C67.roa (hash: hnj4b5BrR1oDY8K6unPrq2mmpWra5ZUyWl2C0okWTrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E061, serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
        Validity
            Not Before: Jul 21 10:12:27 2026 GMT
            Not After : Jul 28 10:12:27 2026 GMT
        Subject: CN=6a5f460b-1f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:60:51:0a:ab:f2:f2:18:0f:3d:b6:f3:cf:
                    e4:a2:9d:fa:7e:44:0f:ff:11:1b:b6:b3:f2:98:49:
                    d5:87:b0:99:93:78:79:e0:40:36:8f:98:c4:3b:9a:
                    88:a5:67:bf:99:a4:46:59:41:a5:14:4e:87:4e:44:
                    42:89:9d:09:7d:71:75:b4:28:28:7a:aa:5f:74:77:
                    28:dc:59:c2:2e:b2:07:d3:a9:a8:6a:7d:3f:8f:88:
                    e0:7c:06:75:f5:a2:c3:63:72:9c:6b:8c:0e:26:e4:
                    81:36:61:29:b2:0a:b2:98:d6:21:8b:ab:5b:a7:58:
                    b1:91:f0:fa:d5:bb:f7:91:23:5b:4a:87:68:c4:10:
                    7d:d2:94:b4:7f:28:19:c9:d7:6c:5f:fc:35:59:f4:
                    77:3d:6f:ee:3c:6f:3f:5e:63:cd:35:7b:39:45:a8:
                    dc:9d:a8:d4:8a:2c:56:f0:95:11:23:32:8c:c5:13:
                    88:f1:0e:23:79:23:a9:33:79:50:85:28:19:c0:0a:
                    bb:1d:ae:71:ed:6d:4e:e0:fa:61:5c:dd:ea:bf:4e:
                    60:bd:3b:eb:be:1f:1c:40:ed:b8:b8:36:fb:23:7d:
                    c5:08:78:70:c0:97:c4:d6:32:d4:6c:98:7d:e7:d5:
                    c4:03:38:a3:86:e5:bd:26:90:22:10:9e:91:13:96:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:2E:66:B2:C6:C5:23:07:29:3E:84:6C:70:8B:FA:E3:DF:3E:6F
            X509v3 Authority Key Identifier:
                keyid:FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:38:68:96:75:bf:f5:57:b4:d0:e5:18:e8:fe:ac:2b:76:b8:
         49:66:88:54:3f:e5:be:fb:0a:41:65:00:5e:dd:e5:be:3c:c4:
         f0:36:dd:6b:eb:7f:83:9d:ee:2c:ec:04:48:ce:9e:c3:5b:24:
         7a:6f:79:af:a9:23:62:0a:44:6f:fa:c2:73:29:04:60:2e:85:
         5a:2d:13:6e:19:06:8f:dd:c0:91:6d:da:46:3c:89:30:55:3a:
         60:d9:a2:39:50:a3:20:b5:44:f5:18:38:e9:f2:42:15:ff:72:
         75:d0:fd:20:76:d7:f8:69:e7:c0:fe:26:45:40:ad:f8:77:f2:
         d4:de:83:49:47:8e:7b:e6:6f:00:2d:bb:77:37:5b:0c:fb:a9:
         ea:9d:93:68:5e:f3:b5:a6:b9:49:66:83:22:f2:fa:ef:b9:d8:
         0d:90:dd:4d:83:f1:8f:5d:4a:c3:60:d0:09:ff:8d:54:56:ba:
         6d:07:f8:d2:67:df:cf:66:2e:d6:4c:9e:9b:9a:3a:3d:0b:fc:
         da:13:17:73:b9:51:d4:4b:51:65:5d:5d:63:4d:51:1b:a2:b4:
         53:54:1c:fa:06:5b:0e:d0:57:3e:84:f6:5d:09:0e:f5:b5:71:
         08:86:30:89:89:54:a4:2e:66:41:84:51:f2:4f:8e:c2:4a:e4:
         4e:5c:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:50:22 2026 by rpki-client