Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
File:                     AI8syGQkHehjXpOldED5wusli7M.mft (raw, json)
Hash identifier:          mj1tldoFFYDU59nfqamyEGZ5S262jJuf5pBeJqvc378=
Subject key identifier:   0C:85:64:96:14:CD:BF:1B:D3:B3:59:0B:8C:22:68:D3:C9:25:DF:0F
Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
Certificate issuer:       /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
Manifest number:          01CC
Signing time:             Mon 03 Aug 2026 04:54:10 +0000
Manifest this update:     Mon 03 Aug 2026 04:54:09 +0000
Manifest next update:     Mon 10 Aug 2026 04:54:09 +0000
Files and hashes:         1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: Rablx6oOmkXCI8DIzU9EFnhulg9ED8xjRaReZMOAn58=)
                          2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: /7z7IB560Zyid1gAT+cg8GKzeif1WiKdRUALH0UbtFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
                          rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 04:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
        Validity
            Not Before: Aug  3 04:54:09 2026 GMT
            Not After : Aug 10 04:54:09 2026 GMT
        Subject: CN=6a701ef1-cb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:01:27:24:3d:eb:a9:bf:39:3b:b2:58:04:
                    64:d2:da:04:d9:51:cf:9e:7b:68:08:25:01:a9:e5:
                    e7:2a:40:a8:41:78:7c:bc:bd:79:aa:cc:80:f6:ff:
                    b3:16:e8:3d:71:7f:8b:32:bc:f9:47:25:8b:03:a1:
                    61:67:49:4c:8e:cd:2d:16:a5:36:b9:75:55:12:de:
                    fe:89:b7:79:d8:b2:dd:70:39:36:56:2e:ab:54:fa:
                    01:29:62:53:e1:f9:f7:97:4d:ab:e4:82:14:d7:08:
                    4d:52:89:08:81:aa:0e:ae:39:12:8c:be:d0:3c:75:
                    e9:fc:c5:49:6b:12:46:04:dc:43:41:fd:b9:95:37:
                    5d:56:88:e9:67:2f:71:08:3b:c9:ad:17:99:d2:77:
                    04:8c:29:d3:11:e2:90:1f:37:2b:ba:ef:8b:72:70:
                    76:26:94:64:31:65:bf:a9:6c:62:95:39:9c:38:17:
                    40:97:62:ef:a5:0c:77:17:0f:2a:bc:23:90:ca:6b:
                    1c:76:7b:a8:23:20:0b:b5:c8:58:d0:19:6f:f1:fe:
                    ae:d8:e4:13:c3:cc:61:c9:fe:99:13:45:f8:03:73:
                    8a:c5:d7:4f:02:d5:bf:8c:48:b2:25:99:0a:06:72:
                    ee:57:e5:f0:19:da:bd:4d:b4:4b:8c:6f:ff:65:fb:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:85:64:96:14:CD:BF:1B:D3:B3:59:0B:8C:22:68:D3:C9:25:DF:0F
            X509v3 Authority Key Identifier:
                keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:12:ad:8f:c0:da:7d:03:f5:d6:bd:ff:98:4e:02:a4:28:
         79:da:be:42:68:7c:ff:1a:2b:f2:41:2f:ca:98:72:ba:ef:0a:
         ad:7b:4c:59:d4:e1:0f:b1:40:2b:97:35:89:ce:86:78:b4:31:
         4b:cd:9f:2f:6e:32:b7:c0:09:32:1a:44:7a:99:b8:4c:ef:79:
         49:2d:1d:a5:a5:68:47:7a:dd:3e:9b:a8:97:6c:ed:e1:27:97:
         92:0d:bc:c6:60:b6:26:7e:67:8e:ca:bd:b6:dc:c5:8a:82:a7:
         b8:bb:97:e5:54:9b:71:6b:4a:47:07:cd:62:84:06:44:5d:53:
         ad:9e:b7:23:11:1d:13:15:7c:c5:57:12:50:b4:83:06:e3:82:
         73:66:df:e2:b6:76:86:a1:9f:53:70:6e:e6:21:04:f3:61:60:
         7c:2c:b4:96:cb:84:49:ef:86:d8:b7:8d:94:32:3a:5b:93:c2:
         c5:ac:db:32:c1:4a:09:8e:31:1e:65:aa:8a:93:b7:7b:5d:8f:
         97:11:51:27:ad:d6:6f:fe:3b:69:e9:f4:f5:78:a6:f7:5a:4d:
         07:60:64:40:34:c7:c0:38:0b:f5:d6:17:7a:f1:fd:64:9a:b9:
         c8:07:c6:2e:aa:9c:d7:1b:7f:3c:ad:4f:96:ae:af:9f:34:31:
         e8:2b:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:08:57 2026 by rpki-client