Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          L8uMkzT9i0y7ueWUmdPa+rrMZl5PzO0sstqi/WH+EJQ=
Subject key identifier:   59:2E:DD:8A:36:2E:9A:EF:EB:11:C6:E9:CC:53:99:C9:F3:19:3C:1A
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       04D2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          04B8
Signing time:             Mon 20 Jul 2026 23:25:17 +0000
Manifest this update:     Mon 20 Jul 2026 23:25:17 +0000
Manifest next update:     Mon 27 Jul 2026 23:25:17 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: SvIK1N/2evTShGFMswTTAyPyqTTmwmtaGOiG/xdv0pw=)
                          2: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: kyIG7ncvbWqzn85Ha8KabsesL4FJLH6bGyp9u+dlsPU=)
                          3: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: j6K9wAlZIY57HmzXFBxZNJ2lkkyDnd6QcdO1rOsgZWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Jul 20 23:25:17 2026 GMT
            Not After : Jul 27 23:25:17 2026 GMT
        Subject: CN=6a5eae5d-3004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:b7:b1:57:a2:6d:dd:53:9f:4a:fe:4e:75:
                    38:b4:3d:6c:83:09:66:13:9c:56:02:01:76:03:c0:
                    72:5e:e1:04:0e:fc:99:64:d1:50:dd:f6:db:a0:c2:
                    28:0f:d7:bc:f7:de:8f:73:e4:bc:7f:9e:b7:81:a9:
                    aa:7a:20:43:84:66:74:91:f1:67:7d:64:26:26:5d:
                    22:01:28:04:5b:f5:ac:24:f3:d8:72:6f:49:d3:68:
                    58:4a:ec:21:9e:ea:11:ff:97:8a:c8:3c:e7:a1:7c:
                    a0:8a:ba:34:d3:3a:01:13:c8:e9:27:f2:14:3d:39:
                    88:6d:51:e6:e7:78:fe:f9:e2:70:6d:d0:de:ff:35:
                    52:86:6e:eb:07:60:88:20:6f:5c:3a:d8:9a:6f:50:
                    ba:3f:ca:ec:6a:30:9e:66:bc:0f:39:08:5a:1a:a9:
                    34:5f:d1:27:37:4d:f1:26:e1:55:b9:e2:ba:2a:40:
                    8d:d7:76:80:c0:91:9a:27:31:79:d2:52:b1:b0:42:
                    5f:0f:9c:65:ba:51:0e:77:2d:23:8b:78:43:46:71:
                    3f:9c:e5:52:9e:a0:5e:15:9a:24:57:70:ee:98:64:
                    fc:ed:20:17:f4:3c:fb:08:1f:61:3e:48:dc:15:33:
                    0f:c3:fc:76:ab:93:8e:89:51:7a:b7:56:a2:80:56:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2E:DD:8A:36:2E:9A:EF:EB:11:C6:E9:CC:53:99:C9:F3:19:3C:1A
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fa:4d:42:ca:db:5e:ad:67:8b:c6:88:f2:95:af:08:2b:4f:
         e8:0e:e5:2e:f9:f1:d8:08:83:d0:ca:63:b7:bc:24:2a:b0:10:
         87:b3:23:0a:ff:dc:7b:82:3e:95:8a:10:d4:95:43:ab:be:56:
         f8:be:bd:fb:84:c5:4d:d5:b8:e9:52:12:81:7d:7e:6e:bb:ea:
         d9:70:e2:5d:82:3d:38:5c:d2:b9:05:22:4d:62:b2:71:59:36:
         c3:4a:23:16:5f:e2:6a:b9:93:a8:8b:51:b2:e3:3f:f4:94:a7:
         7c:a5:c1:e2:95:f5:61:4b:2b:74:a4:2e:94:f1:88:27:13:6f:
         d6:18:4e:46:67:7d:66:2d:85:39:1a:b4:1e:6d:4c:5b:02:3d:
         4f:3e:cd:c7:71:97:ee:f2:e9:19:9c:05:26:6a:3b:8b:0b:67:
         dd:13:1a:be:68:6a:de:8d:a9:ac:4e:bb:db:65:43:36:98:92:
         f9:1f:02:b8:94:c2:f7:14:70:77:45:8d:b7:5e:de:21:05:0a:
         8c:b6:e4:36:42:82:ba:9c:44:fc:31:d2:0c:74:4c:fa:34:a4:
         5b:c6:33:41:05:1f:00:e7:d2:49:c9:bd:55:76:a8:6f:cf:6d:
         10:df:6f:9a:7f:1d:db:5b:ea:2e:14:0d:e6:76:f4:f0:77:d4:
         c2:d2:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:58:44 2026 by rpki-client