Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
File:                     iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json)
Hash identifier:          DhHYUG6XuMrYVz0zqizluz99YabpKoyd6qzI6rFQlic=
Subject key identifier:   A9:3C:98:D0:08:80:00:1A:84:30:F8:34:C7:33:30:E6:AD:69:0E:8D
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Certificate issuer:       /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial:       1756
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
Manifest number:          1739
Signing time:             Sun 26 Jul 2026 16:44:36 +0000
Manifest this update:     Sun 26 Jul 2026 16:44:35 +0000
Manifest next update:     Sun 02 Aug 2026 16:44:35 +0000
Files and hashes:         1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: 7cOPZ9hBEKM/Snl0Uzr/Dm6ghiW7lVlCoyrTbfDRHi8=)
                          2: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=)
                          3: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=)
                          4: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
                          rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 16:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5974 (0x1756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
        Validity
            Not Before: Jul 26 16:44:35 2026 GMT
            Not After : Aug  2 16:44:35 2026 GMT
        Subject: CN=6a663974-c91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:28:4b:2e:bb:da:aa:fd:df:6f:c4:eb:bc:
                    f4:dd:c5:b5:6a:dc:4d:6f:62:49:d7:1a:35:d5:00:
                    54:be:f7:33:2d:2e:a7:49:32:bc:75:e9:5a:ac:ea:
                    89:ca:f2:1b:fa:d0:6f:92:13:47:65:0d:eb:82:a4:
                    5e:54:fc:df:f9:f9:1c:d4:6c:71:75:45:4c:1a:5a:
                    ea:ac:b8:b5:b3:e5:6e:5f:d7:a4:5b:fb:88:e6:04:
                    8b:fa:b3:68:9b:12:8f:b4:8e:c7:ee:0e:fa:11:66:
                    53:19:9f:fd:e1:2f:f8:25:c3:b4:4b:a0:5c:e9:45:
                    ac:ed:07:fb:70:e6:70:e6:71:21:4a:b5:80:9c:41:
                    21:14:ae:d9:b8:5c:8a:dd:29:55:36:7a:80:ff:21:
                    89:2b:97:73:33:61:94:90:f3:da:9a:a9:cc:7e:d2:
                    a6:a2:24:59:6e:67:40:7a:0c:2e:7b:67:c3:be:e1:
                    2a:09:5f:19:ca:b4:76:78:fe:27:c9:f6:cc:87:71:
                    89:16:60:48:29:5e:5b:36:d3:93:b6:b9:47:e6:88:
                    6a:84:8a:b8:08:a4:ce:67:36:e0:7d:cb:ed:3b:f3:
                    49:1e:df:cb:99:0e:b9:92:a1:1f:88:1c:db:fc:e0:
                    90:91:c2:c0:70:dd:76:7f:72:12:bf:e6:33:f7:91:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:98:D0:08:80:00:1A:84:30:F8:34:C7:33:30:E6:AD:69:0E:8D
            X509v3 Authority Key Identifier:
                keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:59:d7:46:5f:45:26:fe:de:ca:cf:bb:21:fb:79:ce:9f:62:
         0c:b6:e5:d9:51:ae:b8:fd:00:19:08:ad:da:b3:ee:17:2b:d3:
         fc:22:00:c1:bc:bb:ae:3c:6a:95:c8:ca:28:8c:db:d6:65:50:
         7e:75:bf:b1:91:40:5b:f4:75:66:7a:06:9f:a2:d3:f9:f9:f6:
         a0:51:46:10:74:03:a9:1a:26:0f:99:3f:6e:1e:00:6a:13:d7:
         0f:cf:0f:d7:91:7f:48:51:17:58:a9:3a:75:75:cc:8c:78:09:
         97:68:37:38:20:e1:21:6f:bf:03:df:f6:6c:8e:e7:2c:1f:85:
         35:8c:66:3c:f7:a6:6f:44:9a:af:ad:0e:f2:f0:07:9a:05:3f:
         a9:0b:db:8c:2d:c7:f8:55:4c:89:08:f3:3c:ad:7e:4d:6d:5d:
         32:f6:1f:d1:84:7b:43:b0:ee:3e:66:ea:7b:80:a8:03:fd:fc:
         75:58:b9:6f:08:dd:b1:fc:e5:1e:b4:3b:f5:e2:b3:ff:58:f6:
         4d:e4:d1:66:a8:5d:f6:7d:b9:ce:e0:68:49:fe:2a:8d:db:d4:
         27:b9:7a:dc:6f:e1:6b:7c:a6:eb:7c:b2:5e:e0:92:15:54:21:
         60:9e:61:fd:ba:f6:fd:fc:ea:d0:fe:56:45:b1:e7:af:ec:d2:
         e3:ff:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:24 2026 by rpki-client