Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
File:                     fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json)
Hash identifier:          xJEGsf/XV0gzhE97O9q4KKTbgI5jnOxD8JizEWc+Spc=
Subject key identifier:   14:B5:2F:3B:5A:C0:C3:B6:49:F3:B3:C7:27:D8:C3:09:63:50:6D:E3
Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
Certificate issuer:       /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Certificate serial:       05B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
Manifest number:          05AA
Signing time:             Thu 16 Jul 2026 23:39:56 +0000
Manifest this update:     Thu 16 Jul 2026 23:39:56 +0000
Manifest next update:     Thu 23 Jul 2026 23:39:56 +0000
Files and hashes:         1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: 12Fi0UO6tuhd+j9ftrB8AuOmka8pYCwW9SLv7GEd4p8=)
                          2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: g3gsNvkXAeD0LqTvPButkL1dsuXDCkq774OmJJkZZZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459 (0x5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
        Validity
            Not Before: Jul 16 23:39:56 2026 GMT
            Not After : Jul 23 23:39:56 2026 GMT
        Subject: CN=6a596bcc-dd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:c4:32:b8:5a:7c:a1:31:c8:f8:47:57:6d:
                    02:43:d2:ea:b3:cc:de:1e:5d:f8:1f:f9:ee:cd:b9:
                    c6:27:10:a2:56:db:0c:42:f5:4c:8d:59:7f:4f:69:
                    ca:6c:c1:61:d6:a5:ee:21:16:bc:4d:d6:15:0e:98:
                    50:25:57:9b:49:45:e8:15:c7:4d:c5:c6:cd:1d:39:
                    95:af:be:2d:bb:72:da:a1:b2:d2:53:31:4e:a9:43:
                    41:ee:05:72:65:44:52:6f:42:1a:dd:0a:cc:92:c3:
                    e0:63:6e:42:25:2c:c8:8a:c6:53:58:02:50:a1:ae:
                    04:bf:95:6d:a0:9b:1a:72:9b:52:80:eb:46:55:00:
                    41:a2:6b:93:1b:81:0d:9b:ab:f6:7e:bf:70:09:2d:
                    35:ae:70:0a:bf:94:fa:fe:67:a9:50:ae:33:a4:50:
                    24:d3:71:84:56:eb:fd:1b:24:99:8c:28:47:e9:65:
                    7d:b2:4b:cc:b0:ea:f6:ea:4e:81:73:c6:65:e8:48:
                    20:f4:9b:96:70:8f:70:71:27:6b:c7:46:29:a5:e3:
                    87:19:87:4b:c1:f5:1f:7a:e3:76:ab:51:fe:82:d5:
                    a7:e0:87:88:fa:5a:2a:15:da:fe:76:37:92:75:64:
                    fe:b6:a9:3e:23:22:2a:5f:dd:2b:1b:82:b9:bc:23:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B5:2F:3B:5A:C0:C3:B6:49:F3:B3:C7:27:D8:C3:09:63:50:6D:E3
            X509v3 Authority Key Identifier:
                keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:66:d9:7f:5b:ce:2d:c3:7c:ed:86:5c:7b:86:11:7d:f5:
         b6:d7:24:85:9d:ed:cd:03:28:f3:c9:20:f0:2a:04:fe:af:bb:
         65:88:ce:af:57:cb:22:28:e7:b3:a3:c2:d0:cb:ea:8f:d0:34:
         63:95:61:6e:4f:27:00:0a:cd:cb:2f:dd:25:3d:04:52:0a:71:
         a0:52:82:a5:67:52:b3:ec:e4:df:5f:7b:4a:87:e8:fb:78:03:
         e1:07:37:e4:1e:2b:33:bd:dc:72:65:72:f3:db:a3:f6:33:3f:
         73:6f:b5:49:1a:e6:fe:98:b3:2f:cb:17:6e:09:d4:c3:dd:ab:
         05:ed:94:e4:2f:57:de:f9:30:07:04:de:16:cc:0c:b2:ae:45:
         20:09:b3:8d:f3:73:21:18:93:11:60:94:90:57:2c:76:e4:c6:
         e9:0d:80:5e:78:f7:3d:b8:c7:41:fd:09:2d:87:6a:f6:84:4a:
         7b:02:90:e3:4c:54:c8:b5:89:2b:93:b8:41:78:58:00:ca:79:
         0b:89:60:67:ae:0f:0d:ec:11:cd:1b:3c:b1:42:31:73:ea:7a:
         90:26:50:98:12:d7:92:aa:62:b9:36:16:e9:a9:b6:8e:0d:0b:
         92:03:82:59:8f:18:bc:c8:1e:36:2b:ff:bf:9d:b1:5d:bf:48:
         5c:7a:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:42:14 2026 by rpki-client