Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          wfghzHX191KkvMOl6Iw6ere/Eqe0fXEet4isJbBQlTo=
Subject key identifier:   0C:77:36:B5:03:EE:CE:20:CE:EE:ED:98:5F:59:A2:D1:C8:A8:02:9D
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          0146
Signing time:             Thu 23 Jul 2026 07:02:24 +0000
Manifest this update:     Thu 23 Jul 2026 07:02:23 +0000
Manifest next update:     Thu 30 Jul 2026 07:02:23 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: tA3Sp865QR/hfQP4aEDCXhTa5N2bsEA7t0N/G/C1aU0=)
                          2: FD380306BD4D11F091CCAA18C4F9AE02.roa (hash: cFkFVqkyH5/Yzi/+1hjNwIGGMl+Q2mo1X7sF0INIyzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Jul 23 07:02:23 2026 GMT
            Not After : Jul 30 07:02:23 2026 GMT
        Subject: CN=6a61bc7f-22e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:f3:04:f6:81:45:74:d8:03:df:ff:b1:3f:
                    6b:25:36:5e:14:e9:4a:ec:ae:d9:fe:01:4d:9c:b9:
                    35:94:ac:2f:72:17:3d:b4:3a:80:7b:a5:00:06:08:
                    36:7b:b6:72:94:02:3e:96:a8:93:f4:15:88:cc:62:
                    cb:df:e1:8d:8d:3c:df:76:61:e5:59:8b:1f:22:48:
                    7e:a1:84:b3:53:dd:20:40:a9:fe:a1:59:f4:54:cb:
                    67:c7:ff:4f:43:c4:11:fc:0c:bd:d8:7c:99:f3:b7:
                    d6:10:8f:b2:48:71:b5:62:87:dd:58:ee:a7:6a:6f:
                    4b:05:7d:6a:3e:54:25:3f:d2:dc:a4:db:77:1d:91:
                    dc:ac:e9:a2:69:6a:72:57:f2:df:e6:62:18:5f:7c:
                    04:38:7f:19:a0:67:9c:95:3f:fa:13:81:e5:d2:48:
                    39:e4:08:6d:c5:60:fc:4b:e7:cc:79:9f:ec:8f:72:
                    01:75:71:19:ce:8b:3e:9e:af:33:a9:a4:02:37:2b:
                    fb:cb:a8:60:55:a2:70:e9:00:b1:70:ef:e9:7c:4e:
                    c6:92:c0:3b:53:bf:c2:1c:2e:70:84:d2:18:e7:31:
                    d3:52:10:c3:aa:9c:ec:d2:59:18:fc:bb:06:1e:23:
                    ec:e9:d5:22:6f:95:07:33:95:42:4d:58:c6:35:c8:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:77:36:B5:03:EE:CE:20:CE:EE:ED:98:5F:59:A2:D1:C8:A8:02:9D
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:38:a4:89:54:1a:77:b8:14:0c:7f:b3:ee:a7:ec:0d:e0:cc:
         3c:18:ea:b3:a0:9b:c7:33:47:39:ee:55:ad:dd:a7:aa:8c:aa:
         23:ad:0e:6d:25:3a:0f:de:a5:d6:09:a7:66:b6:da:b1:ba:37:
         26:d4:ea:ec:36:3c:a1:61:d3:f3:6f:4e:30:0d:43:c7:a3:2c:
         2b:03:b8:2a:ce:db:59:0f:28:0f:4a:a0:27:51:c5:50:26:20:
         36:29:46:25:44:8a:13:68:f8:ca:b2:f2:10:42:bb:02:d0:50:
         77:39:a2:c6:25:9c:c0:10:20:b0:f4:38:93:89:2e:17:99:49:
         78:a0:45:ff:21:12:5d:46:46:e2:3d:11:e5:65:63:e5:e1:7c:
         ff:9e:a3:5e:57:0e:a3:59:e1:e0:a3:87:b6:c3:2e:ee:76:4c:
         c0:c2:39:1c:c7:04:72:77:a0:03:76:98:ab:1d:4c:18:68:fc:
         3a:68:14:b5:3c:aa:07:08:5c:6a:27:4f:d0:47:38:d6:93:e2:
         91:ca:79:6c:2c:3d:71:75:73:87:94:95:1b:2b:63:d4:5f:5e:
         40:d0:61:1e:a2:2c:6e:7d:fb:9c:ef:36:5b:1e:9e:a4:45:bf:
         c4:20:52:a2:71:30:f5:ae:e2:90:ff:b4:2f:d1:f8:3e:b5:89:
         ed:54:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:52 2026 by rpki-client