Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File:                     4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier:          XMWCc1J1L37S8dwuTMB2smAgJvfU12NnOIkcPzQAQBk=
Subject key identifier:   39:21:E8:AA:05:5E:32:2A:66:07:7C:B4:54:C0:4E:B0:20:88:FD:6D
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer:       /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number:          012B
Signing time:             Sun 09 Aug 2026 05:11:30 +0000
Manifest this update:     Sun 09 Aug 2026 05:11:29 +0000
Manifest next update:     Sun 16 Aug 2026 05:11:29 +0000
Files and hashes:         1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: mlZVDhB/eS2BAfruEGg/ZjPMaaaIOLLkonb981uwANg=)
                          2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
                          rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 05:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
        Validity
            Not Before: Aug  9 05:11:29 2026 GMT
            Not After : Aug 16 05:11:29 2026 GMT
        Subject: CN=6a780c02-7dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:3c:3d:60:70:b5:e5:05:85:1c:76:4a:5a:
                    ba:f9:fb:2c:6b:95:ec:51:50:e7:a8:6d:34:ff:ef:
                    80:9c:dc:26:90:cd:d8:1b:48:e1:0d:63:de:4d:7a:
                    16:32:b9:6a:a5:5b:bc:7a:a0:05:a6:c4:5a:f2:10:
                    85:43:ab:7c:76:e4:fa:42:12:2b:c9:69:d5:53:9a:
                    e6:86:ed:da:58:18:e6:f7:34:1f:77:58:bd:3c:40:
                    d1:5c:b5:6a:ab:d5:c4:ab:78:99:5f:cc:ab:10:22:
                    3b:50:b7:5c:fc:af:ca:ca:a7:b1:e2:81:46:37:04:
                    b2:37:0f:b9:02:39:bd:a7:f4:4b:89:d9:fd:8b:09:
                    64:9c:b8:40:1b:e2:c5:35:8b:90:b6:2a:12:c3:9e:
                    f9:25:cb:c3:06:f9:1f:b8:41:c8:a5:73:c0:df:d7:
                    d7:12:3b:1e:02:ef:f0:89:b0:99:32:85:0a:33:26:
                    bb:f1:33:7f:53:28:b0:6f:f7:cd:9d:48:74:4d:0a:
                    1b:f7:89:ea:1c:6c:19:ce:51:55:4c:cf:67:e0:4d:
                    51:92:6b:f0:2f:b7:ad:0b:d1:da:a6:d1:00:fc:0e:
                    28:e2:30:1c:29:29:b5:e0:2f:9a:92:6b:3a:79:14:
                    61:20:12:65:72:a1:7d:3b:6e:bf:a2:dc:14:c7:43:
                    9d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:E8:AA:05:5E:32:2A:66:07:7C:B4:54:C0:4E:B0:20:88:FD:6D
            X509v3 Authority Key Identifier:
                keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:59:76:50:a8:e3:6e:02:ea:53:d3:26:2e:96:6f:da:36:
         dd:3c:96:5f:02:ba:b8:8d:d5:7f:b0:5b:9c:81:66:fe:fa:c7:
         38:8e:6b:f3:9d:51:ce:08:5c:d1:c8:f9:13:e9:58:74:de:b7:
         56:4b:b9:10:47:4b:8d:62:f5:a8:da:5b:07:64:90:68:69:37:
         e9:a0:d5:bc:e1:65:7c:44:41:62:45:13:86:96:18:e2:a4:63:
         32:db:3d:5f:cb:d4:25:85:5d:55:fc:06:54:0d:cd:d4:1b:41:
         e9:72:aa:8e:78:2f:20:f3:ce:a3:35:87:8b:cc:7a:b7:4f:fb:
         90:11:07:9f:b8:81:b2:fa:5d:75:13:e6:db:1f:fb:00:d7:25:
         ae:b9:2d:42:5d:af:4a:f9:2d:e1:9f:72:c5:10:ba:84:9a:12:
         56:7c:43:d5:55:8e:d3:77:ca:b2:37:33:3e:36:fa:df:91:34:
         dd:4e:50:06:33:2a:9b:25:d3:e8:10:fc:27:34:5c:84:ce:19:
         24:99:8a:6c:57:ea:19:5b:cb:61:54:60:02:2e:1d:07:b9:93:
         f3:7a:64:2a:07:d3:d6:f5:13:8e:9d:a4:b7:40:33:19:96:e4:
         77:02:b1:50:35:a4:60:b8:80:07:bb:1f:1e:49:8c:64:dd:7f:
         c4:d7:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 13:01:01 2026 by rpki-client