Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
File:                     aUOJgRsj_1S9M9BrFKb99PL02eQ.mft (raw, json)
Hash identifier:          tePgzwm7cDBmffKjhga96dX/jjHtngn0H7iJ48oZ2hU=
Subject key identifier:   4A:35:34:95:28:77:F8:7A:D9:20:FC:2B:C3:6C:0E:11:DB:90:37:BD
Authority key identifier: 69:43:89:81:1B:23:FF:54:BD:33:D0:6B:14:A6:FD:F4:F2:F4:D9:E4
Certificate issuer:       /CN=A9114B3B/serialNumber=694389811B23FF54BD33D06B14A6FDF4F2F4D9E4
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
Manifest number:          31
Signing time:             Thu 23 Jul 2026 11:35:32 +0000
Manifest this update:     Thu 23 Jul 2026 11:35:32 +0000
Manifest next update:     Thu 30 Jul 2026 11:35:32 +0000
Files and hashes:         1: aUOJgRsj_1S9M9BrFKb99PL02eQ.crl (hash: R0Xuexz+sjEa+awG9KwA+f3pDQq2fRSH2x4QdLBZwWI=)
                          2: F010CE063E2B11F18BB5C12CB7833773.roa (hash: H6xoO5MzMJ9JTbPOAdEJk9JhNfRvcgtay7QA301J/BM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.crl
                          rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114B3B, serialNumber=694389811B23FF54BD33D06B14A6FDF4F2F4D9E4
        Validity
            Not Before: Jul 23 11:35:32 2026 GMT
            Not After : Jul 30 11:35:32 2026 GMT
        Subject: CN=6a61fc84-e3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fc:14:ce:03:0c:2c:c3:42:93:48:67:04:e0:
                    66:c8:f1:3d:38:a7:c9:35:fb:07:db:ca:d3:e2:97:
                    53:7d:5d:dd:98:ff:f4:42:ad:bb:d7:6e:66:68:b2:
                    87:00:21:71:ab:88:cc:36:e5:c2:c3:7c:e0:a1:7a:
                    7b:13:c1:ec:6b:e0:96:d9:03:4b:e5:37:01:fb:d3:
                    a7:e0:f9:de:70:d1:bc:1c:73:6f:b9:0a:a5:15:f5:
                    9e:c7:84:0e:a9:37:cc:85:15:cb:94:01:06:5e:e7:
                    2f:0e:47:9d:6f:ff:8a:34:ea:29:71:8c:4c:66:11:
                    db:92:15:fc:4c:3e:bb:ad:42:56:df:0d:d0:fb:7b:
                    b4:b2:bf:bd:5f:1c:a2:08:87:0a:9f:2b:ec:6f:33:
                    9e:10:0a:b0:2d:a8:a6:74:af:fb:6e:02:20:0a:85:
                    95:1b:af:c6:40:e8:c8:b5:24:7a:35:d7:7a:40:c7:
                    9f:39:76:da:18:e2:04:cb:47:73:1a:dc:4c:ff:27:
                    77:0a:63:48:aa:ce:0b:b2:71:3c:e5:4e:46:9d:e2:
                    46:3a:d3:88:4b:89:1d:35:5d:08:a4:f2:ac:bd:a3:
                    7f:48:2d:5d:b5:65:11:b2:da:c9:94:57:83:ea:c2:
                    4f:e6:44:25:20:07:72:87:ea:f8:cf:9b:15:aa:9e:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:35:34:95:28:77:F8:7A:D9:20:FC:2B:C3:6C:0E:11:DB:90:37:BD
            X509v3 Authority Key Identifier:
                keyid:69:43:89:81:1B:23:FF:54:BD:33:D0:6B:14:A6:FD:F4:F2:F4:D9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:33:6d:7b:5c:dc:95:bc:62:35:dc:34:ec:d8:5a:f6:61:f5:
         02:18:3e:3b:34:0c:61:26:98:14:35:7c:3a:0b:79:64:79:e5:
         e1:b8:ba:48:0c:9d:6e:09:0e:9b:4b:a7:8c:b5:f7:b2:fd:27:
         17:9f:2e:85:ea:a9:b1:c6:7d:af:f1:5c:c8:bd:df:db:71:cf:
         21:1a:33:8b:14:b3:c9:85:fa:1c:0f:9b:ed:bf:38:63:14:fc:
         f4:a0:df:7e:b2:0b:be:2e:44:66:35:af:82:bb:03:24:a0:c3:
         97:8c:36:78:bb:64:a8:b3:10:fb:82:62:ea:76:b6:6b:ad:b0:
         d9:ab:c7:14:93:4b:45:58:d4:64:3e:de:01:ce:a4:92:cb:86:
         db:f0:84:14:6a:c4:b5:3f:32:dd:35:ec:50:16:b2:ff:c6:9e:
         79:2a:f3:ad:5f:b7:cd:74:34:54:a8:e7:97:aa:51:fb:1a:ad:
         b7:9a:80:03:5f:5f:b0:c9:df:c9:9f:78:bf:74:cf:91:b9:5c:
         61:3b:92:29:bf:61:55:01:c8:f6:9a:7d:e2:e4:0f:5c:67:74:
         64:2e:ab:67:eb:c9:95:10:87:20:0e:cf:44:bb:23:6a:39:ea:
         4b:8d:a6:48:1d:27:d7:f6:95:58:7c:55:e4:9a:45:d3:45:d7:
         c1:a9:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:16 2026 by rpki-client