Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File:                     sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier:          beJZvRUteuc6fzKUnii9lYBTpY2JiHM6mEqo1M31njk=
Subject key identifier:   DA:2B:34:67:02:71:A9:6F:8D:C2:8A:23:B4:D8:01:8C:12:FA:19:C4
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer:       /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number:          023B
Signing time:             Mon 27 Jul 2026 04:03:18 +0000
Manifest this update:     Mon 27 Jul 2026 04:03:18 +0000
Manifest next update:     Mon 03 Aug 2026 04:03:18 +0000
Files and hashes:         1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: /R7jFSsxfb3SnLPZ6MxdCYkuN7aTus0YuLKeRrA3mTE=)
                          2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=)
                          3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: m2hk6wUAtlL5ptBXdwMclZPFoA2N1StKSEsLHKrorak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
                          rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
        Validity
            Not Before: Jul 27 04:03:18 2026 GMT
            Not After : Aug  3 04:03:18 2026 GMT
        Subject: CN=6a66d886-98f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:d0:26:58:ce:39:c8:95:08:60:a5:9c:29:
                    ba:09:18:7c:d1:9b:38:cd:d4:5d:2b:aa:4c:36:61:
                    07:01:66:6d:52:20:fe:ed:fb:9d:e5:9d:ac:33:94:
                    e3:ea:62:02:4a:2a:da:58:97:ee:c0:8c:a7:6a:2c:
                    eb:28:3f:ae:c9:93:2e:f0:72:79:56:e4:ad:f3:fa:
                    ce:59:ce:da:ac:b0:53:58:df:23:85:79:80:93:42:
                    6b:ce:6b:6c:64:82:31:a5:9c:69:02:7f:61:03:92:
                    b2:ab:1c:08:f0:92:31:47:98:eb:16:d2:24:5a:67:
                    fb:b3:21:7e:26:e6:83:12:02:2d:d5:2f:1e:80:59:
                    22:f0:5a:71:75:21:fa:aa:57:34:c4:53:71:e0:e7:
                    10:9a:95:8e:da:ed:9c:f1:fa:66:25:fb:f0:76:82:
                    6e:ab:8e:b0:0a:7d:9a:1d:2f:92:e2:b4:dc:76:aa:
                    3d:9b:9b:ab:bc:d3:04:ff:bd:e4:04:e9:6a:c3:11:
                    12:3d:ac:65:0a:10:27:bf:b6:1b:8c:f2:5e:27:13:
                    ff:c6:5d:a5:0b:5f:a6:8a:f1:43:53:84:0b:55:f7:
                    dc:83:39:04:a8:5d:52:ef:46:25:64:ba:67:d0:ad:
                    59:61:6c:89:6e:07:a8:aa:6c:69:9b:c7:b0:17:64:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2B:34:67:02:71:A9:6F:8D:C2:8A:23:B4:D8:01:8C:12:FA:19:C4
            X509v3 Authority Key Identifier:
                keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b6:2c:9e:9f:44:ab:81:9c:2a:1a:83:09:a9:4b:cc:86:ad:
         f9:26:55:28:67:1f:25:73:f1:98:2d:77:b2:65:d3:ef:5c:ec:
         db:09:f2:30:36:ff:81:84:97:76:78:40:09:32:67:1c:7e:6d:
         b0:03:86:55:b2:85:eb:7d:a1:94:57:f7:e4:88:91:cb:38:9b:
         e8:23:38:16:7b:44:79:32:02:88:24:2b:d0:3f:b1:1e:29:21:
         17:f0:ff:42:6d:93:7d:7b:40:8c:c0:2b:a1:f7:2d:fb:e9:30:
         fe:7a:11:87:59:24:17:dd:70:ed:76:da:35:bd:bf:5b:72:d4:
         28:22:82:a1:a0:98:ac:ac:8d:31:2f:66:c0:b8:44:71:d9:a5:
         b5:36:d7:dc:66:d0:a6:f2:46:b6:2f:33:8a:e3:6b:34:f3:01:
         40:85:61:55:65:80:0e:6e:f2:44:24:73:a2:3f:c9:2e:0c:8b:
         11:bb:8c:71:1e:78:ad:19:75:6f:65:d8:f8:86:61:07:24:04:
         30:8a:2e:00:b4:b0:3f:8d:db:96:2f:44:17:2f:66:93:2e:99:
         e2:6f:97:0a:6e:15:81:4f:6e:b7:43:fc:ff:37:58:b2:a4:95:
         2a:4c:2e:52:de:4d:cd:fa:f6:e4:c5:fa:d6:ab:41:b4:9a:5c:
         d8:36:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:52:34 2026 by rpki-client