Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
File:                     bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json)
Hash identifier:          vCYMYX+ihu4TpJS1ScWJI8Qlf2wpnHaliR3Z1dxCAog=
Subject key identifier:   A2:1A:82:33:14:85:6B:2D:E9:37:FD:47:B8:45:51:0F:ED:FF:8C:85
Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
Certificate issuer:       /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
Manifest number:          C0
Signing time:             Thu 23 Jul 2026 08:45:13 +0000
Manifest this update:     Thu 23 Jul 2026 08:45:12 +0000
Manifest next update:     Thu 30 Jul 2026 08:45:12 +0000
Files and hashes:         1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: lPTq9hceHz0/CD5miOfBwViFiOmpKFphXJk/fdgl9E0=)
                          2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: f1UUKk9+4mpBrjo6aq4pvsFyFPqGlKiCEdavWTpQG0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
                          rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
        Validity
            Not Before: Jul 23 08:45:12 2026 GMT
            Not After : Jul 30 08:45:12 2026 GMT
        Subject: CN=6a61d499-9f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6b:5d:52:2d:45:96:76:e5:68:28:a4:d7:9e:
                    25:ef:b0:6b:22:c8:ac:13:0c:b2:c9:d1:c5:0c:3c:
                    66:d0:b2:82:bb:89:c4:0b:87:d5:0f:f5:12:5a:e0:
                    0e:1a:b5:f4:dc:a8:77:0b:44:d7:b6:ac:21:34:82:
                    a4:f1:dc:42:f6:b1:5d:87:ff:0e:a0:cb:45:25:66:
                    c7:ca:b6:2d:a4:e5:4f:92:0d:6e:a4:8e:86:0f:c6:
                    c4:40:bd:bb:44:02:1a:ec:d0:e8:d8:f8:aa:a7:b4:
                    6f:ea:68:a9:f6:76:58:9a:63:55:70:54:40:0f:e6:
                    d6:51:f0:0f:63:44:99:d1:61:9c:2c:35:f1:05:46:
                    a7:1e:30:82:49:b4:b1:ca:c5:8b:61:0a:66:07:95:
                    51:b1:63:56:06:07:06:8b:30:bd:92:57:a5:2e:9d:
                    c9:93:8b:7e:3e:8e:42:7b:52:ba:fc:79:c1:ee:7a:
                    69:75:0a:d2:61:6d:3f:ff:21:ef:bd:22:b7:d7:8d:
                    58:ae:d8:a5:a7:6c:6b:61:b8:fe:14:df:b3:e9:da:
                    d2:66:4b:7d:2d:79:61:56:d0:17:ea:cf:7e:52:f4:
                    0b:57:be:dc:4c:5b:9c:36:8f:d9:2f:8e:3f:4d:d8:
                    2c:73:7e:2f:03:a2:2a:bb:eb:25:a6:5e:47:16:44:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1A:82:33:14:85:6B:2D:E9:37:FD:47:B8:45:51:0F:ED:FF:8C:85
            X509v3 Authority Key Identifier:
                keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:76:64:f7:02:e4:c2:f3:0b:99:0a:57:0d:17:33:7f:c1:9c:
         f1:9b:c2:43:e0:5d:7c:59:8b:c0:88:ca:3e:e2:cc:9f:a2:8c:
         ce:5f:a3:89:4d:8b:85:12:d7:a8:ae:eb:ee:76:54:c2:78:aa:
         d9:f0:f1:16:9c:99:83:f9:e8:dc:6c:e1:06:4d:3b:c6:ac:cd:
         60:2c:96:72:38:4b:e9:72:45:8f:9d:4c:ed:39:7b:ed:87:f5:
         75:68:bd:c9:f6:86:78:ca:f3:5e:ac:06:b3:4f:03:e6:5b:62:
         f4:63:b1:9c:ca:38:c8:ea:93:cb:77:3e:0c:2f:aa:fa:a5:28:
         01:b1:bd:cc:65:68:5e:47:9d:5c:3f:29:f4:29:79:cf:21:6e:
         cd:25:fb:85:88:9c:c5:e4:e8:c3:39:09:a9:8a:74:1e:94:e4:
         c1:f9:f2:e5:2b:75:e0:18:26:ae:38:b0:15:f7:ed:7a:7a:ff:
         4f:e7:c8:03:aa:64:5d:dc:db:bf:54:3f:1c:b0:d9:38:91:f8:
         ed:3f:d8:93:d4:97:f1:15:0d:c3:95:33:15:9e:7d:56:d0:b0:
         b0:8b:3d:62:fc:28:39:bd:54:b2:eb:e9:11:31:5a:73:81:58:
         77:61:bb:d2:9d:c8:b2:70:2d:c9:14:67:0c:2b:03:4b:09:ca:
         1a:7f:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:17 2026 by rpki-client