Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File:                     aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier:          JnqrSkocIxRGOhNKCvi5mSK7DoT+IMCDyJoPqEPXSU8=
Subject key identifier:   BF:CC:FB:53:3E:19:19:70:71:B3:41:3C:05:04:0A:A0:4C:54:57:9A
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer:       /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial:       0877
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number:          086E
Signing time:             Thu 16 Jul 2026 21:06:27 +0000
Manifest this update:     Thu 16 Jul 2026 21:06:27 +0000
Manifest next update:     Thu 23 Jul 2026 21:06:27 +0000
Files and hashes:         1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: 6RMP3Zk0fgnmiGWTWWiDUfB3JkgMIGh1ThDKmsdNnu8=)
                          2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: 0tPpCFmY2RtQMNi50P1oO91h+coSEhJnlpMk0tERKfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
                          rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 21:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
        Validity
            Not Before: Jul 16 21:06:27 2026 GMT
            Not After : Jul 23 21:06:27 2026 GMT
        Subject: CN=6a5947d3-7cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:dd:2e:de:99:15:a4:13:4d:75:55:c3:a0:
                    fd:8e:c0:3c:05:7b:53:48:f7:94:ec:58:4c:46:35:
                    63:33:7a:21:a0:e9:c5:05:aa:6d:b9:75:60:ea:b1:
                    73:b1:b0:f0:07:36:73:bf:16:25:31:3f:41:23:b6:
                    1f:17:3a:54:55:c0:e0:10:fc:b4:8e:ef:13:52:13:
                    5f:b5:bd:88:cb:73:4e:3a:da:6e:15:d2:64:75:27:
                    c2:71:91:5e:7d:93:1c:96:ec:5a:62:5b:9a:ab:8e:
                    2b:bf:bd:7b:14:56:a1:7d:08:e3:b0:39:78:1c:0a:
                    68:95:3a:ee:3b:8b:59:6f:de:8d:7d:31:9b:57:52:
                    b2:48:3e:7f:01:3f:ff:44:63:5c:5f:fc:26:44:cb:
                    3b:a1:b0:c5:f3:de:d2:23:ab:68:30:49:a5:9a:4f:
                    77:cf:b9:ad:cb:4f:8f:66:d2:f6:c9:73:5d:a6:ac:
                    2c:18:39:8c:51:ba:a0:7a:db:e3:18:60:ed:0c:71:
                    29:71:0f:ff:87:8c:0f:98:f7:02:bd:cd:90:45:44:
                    a8:59:8a:dc:62:5e:05:d4:c9:5a:05:a5:33:21:48:
                    42:45:d0:62:b6:21:a1:60:c5:8c:34:a7:a1:2a:4e:
                    c4:58:08:04:8a:a5:e6:43:5f:a5:c8:54:39:91:7a:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CC:FB:53:3E:19:19:70:71:B3:41:3C:05:04:0A:A0:4C:54:57:9A
            X509v3 Authority Key Identifier:
                keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:56:43:4a:ce:82:aa:61:32:fa:c1:45:8b:72:38:3b:74:2d:
         db:a7:57:1b:28:47:b2:cc:13:3c:ac:8d:de:ed:86:b6:93:62:
         9a:f8:6d:d5:a5:13:e5:34:ae:fd:2e:34:e0:87:a4:4e:fb:34:
         08:b3:0c:ed:74:23:76:95:d9:a5:91:97:c3:90:73:47:49:f7:
         02:93:17:5f:5b:10:71:8e:16:fa:6d:08:3b:eb:4b:f7:bd:c2:
         c2:7f:78:a9:94:a7:61:b9:3c:f5:cf:2c:0d:25:f6:d6:9e:8a:
         11:11:f3:de:30:3c:da:5b:87:a6:bc:1f:d2:12:67:f6:af:dd:
         05:53:63:e7:3d:9f:be:9b:e9:79:9f:12:f4:20:87:d5:05:cb:
         94:a2:89:29:3a:1d:8f:7b:5e:4f:0c:2b:61:89:a4:84:2e:f3:
         94:a3:1f:5b:d9:bd:9d:22:f0:18:f7:bb:53:27:8b:26:d2:fb:
         db:b8:20:b9:20:5e:9f:64:c9:44:59:2c:0d:66:89:08:73:ef:
         8e:7e:3d:64:02:37:7a:91:46:70:4e:6f:6e:de:91:81:63:07:
         8f:86:03:c2:36:30:9e:7d:b9:0c:6d:91:c2:91:b9:25:8f:ec:
         80:ae:fa:81:9f:c2:42:35:dd:7b:3c:bb:1a:4d:59:aa:dc:1f:
         89:16:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:18:07 2026 by rpki-client