Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File:                     cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier:          JQa9QM7vKKrrPBHMq24KyIZI3oG1vykx3Mii7n66zU0=
Subject key identifier:   6D:D1:78:F7:25:01:BA:5F:DB:00:AF:17:D0:7E:79:32:81:8D:94:DE
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       088B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number:          0864
Signing time:             Wed 22 Jul 2026 21:30:05 +0000
Manifest this update:     Wed 22 Jul 2026 21:30:05 +0000
Manifest next update:     Wed 29 Jul 2026 21:30:05 +0000
Files and hashes:         1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: v7iJgXAdSaAkYR/w8uFLSzBPQeIjGtfYWlcqBrw+4UU=)
                          2: 98657342132E11F0B588DB49C4F9AE02.roa (hash: 0iM/49fCWX66zeiMZs91UhGTC/SM04s/wq22TiEesQc=)
                          3: 99551366132E11F0B588DB49C4F9AE02.roa (hash: 730CsvKwep6Bjskp3sW1RKOSjDMQjfByDvmaL6lb+pQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Jul 22 21:30:05 2026 GMT
            Not After : Jul 29 21:30:05 2026 GMT
        Subject: CN=6a61365d-1071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:a7:63:f9:39:5c:43:3c:6a:7b:29:c7:aa:
                    bf:f1:bc:a2:f2:ba:a0:07:ea:dc:02:46:e0:89:6d:
                    ea:fe:d6:ab:91:3a:3a:f4:f0:11:fb:b4:d0:a9:d3:
                    2b:b2:c2:b0:1a:f0:2c:6d:f7:c6:2e:02:94:85:e0:
                    ec:f3:76:0b:fd:84:22:34:88:9b:d9:e9:f1:4f:13:
                    60:26:34:59:7d:86:89:23:8b:c7:4f:04:0b:6c:89:
                    60:1b:7a:51:6f:b6:b4:50:db:00:f3:d8:f0:0c:e2:
                    40:89:2f:1c:d6:a7:10:8f:76:79:90:7d:2f:58:f5:
                    a9:17:f2:3b:83:4e:be:3d:d3:a9:3a:b4:30:e8:ae:
                    a5:40:57:d5:b9:a2:03:9d:fa:15:64:a6:1e:8c:ba:
                    ba:f0:32:da:ed:b9:f4:e9:fc:7d:9b:b1:42:4c:77:
                    cb:2b:d9:b0:ab:5a:bf:64:70:1e:b2:0a:10:99:32:
                    d6:e9:d5:98:19:65:43:d4:12:11:ab:4b:bb:44:82:
                    02:75:cb:b5:3d:2f:f8:75:4b:b1:0a:fe:38:c6:11:
                    03:c8:71:6f:9c:b5:27:76:83:ff:4a:4b:93:d7:e3:
                    32:4b:92:0e:9c:a2:44:d9:8a:f6:e4:2a:c5:c2:9d:
                    f9:f8:1f:d0:6f:d8:ef:bd:c2:af:93:d6:b4:24:20:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D1:78:F7:25:01:BA:5F:DB:00:AF:17:D0:7E:79:32:81:8D:94:DE
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:79:26:33:21:32:1f:62:44:02:19:12:0d:23:44:64:49:
         97:9d:57:43:e2:87:be:d8:9e:9f:b7:78:65:27:a0:f6:44:ba:
         6d:2d:39:2d:34:45:db:cc:60:a2:4f:1c:16:d1:d2:8a:69:9f:
         ab:d5:21:8c:bf:93:f8:e2:25:76:3f:e2:8e:08:f0:af:f0:e0:
         3b:5d:b1:dc:3b:a8:32:cf:e9:c9:1a:b5:3b:38:48:01:e1:fc:
         ab:9b:ce:7a:18:28:65:c2:c3:14:d3:12:b4:23:8c:dc:5a:01:
         f8:56:55:cf:a8:cd:bf:26:20:5e:e2:76:88:5a:bf:4d:36:10:
         14:39:1c:45:9d:db:f8:d6:2b:7c:2b:9f:c6:84:ee:8e:f8:54:
         0d:56:ae:1c:ad:cc:75:3a:cc:c0:cd:22:7b:c3:df:d6:7e:1e:
         4f:6e:b7:65:9b:b3:c7:34:15:b5:61:ba:c9:6c:59:6d:b1:46:
         38:21:3b:b7:31:61:aa:3a:24:53:0c:ce:e8:83:d9:50:ec:3f:
         f4:ab:06:80:b0:bf:fc:47:27:7d:52:95:da:5b:38:93:30:19:
         bc:fd:dd:f2:eb:c1:96:c6:15:d8:ee:ff:f8:67:c7:a3:bc:91:
         4d:2e:0e:b5:66:00:a2:f9:c9:de:4c:9b:56:f9:13:a8:d9:49:
         49:59:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:52 2026 by rpki-client