Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
File:                     ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json)
Hash identifier:          sGziO9RdeI6l9LBCe5/iRIkkbXGl9OMI/ted2NU+L8M=
Subject key identifier:   5C:94:3D:4E:45:34:41:FA:23:7C:9B:EB:AA:3E:E9:27:DD:4B:07:60
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Certificate issuer:       /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
Manifest number:          43
Signing time:             Thu 23 Jul 2026 10:31:22 +0000
Manifest this update:     Thu 23 Jul 2026 10:31:21 +0000
Manifest next update:     Thu 30 Jul 2026 10:31:21 +0000
Files and hashes:         1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: 5pFmj/UoNBMNzM/ySMBU9slwf0avRGMmeN0f0nbT20A=)
                          2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
                          rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
        Validity
            Not Before: Jul 23 10:31:21 2026 GMT
            Not After : Jul 30 10:31:21 2026 GMT
        Subject: CN=6a61ed79-e25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:59:91:43:81:18:2a:06:a3:7c:74:a4:6e:
                    9a:e8:c3:ad:ca:b6:90:95:d5:44:8a:ba:ae:25:37:
                    ae:ec:4a:cd:9d:01:33:35:b6:b0:bf:fe:7e:5e:60:
                    af:b4:0d:6c:33:8a:2d:ad:e2:b5:95:d4:1f:b1:99:
                    98:4f:e3:49:58:fd:33:3d:e9:9a:2a:e9:60:2c:e2:
                    e4:ef:5a:26:0c:18:85:ba:cc:a6:38:e5:12:2a:3d:
                    76:5a:46:2b:43:6a:77:da:7c:1f:da:c7:3f:4d:58:
                    74:d3:9b:75:a4:1c:70:dc:16:75:83:92:f3:82:a4:
                    ce:e4:64:79:82:b5:df:22:91:79:c7:54:c7:9c:28:
                    36:55:ce:5f:94:80:bd:77:93:bc:5f:aa:fb:4e:be:
                    82:e9:c5:93:b4:2a:65:81:05:08:ae:d1:70:b1:9a:
                    f9:17:8a:8c:9e:d8:7a:9e:ec:dc:db:8c:2e:df:5a:
                    0f:c0:c8:12:c0:d0:d9:dd:68:4b:ce:53:ec:08:ef:
                    12:fd:8d:28:ee:ce:01:a4:d1:eb:14:8e:89:fd:b6:
                    b0:78:12:4d:0c:a9:8b:2b:5e:31:f7:73:e1:e5:0f:
                    a8:53:73:c1:6a:51:d8:4a:70:25:32:3a:a9:6a:34:
                    ec:dc:b0:87:ff:81:62:d7:dd:6f:6b:96:4d:65:5f:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:94:3D:4E:45:34:41:FA:23:7C:9B:EB:AA:3E:E9:27:DD:4B:07:60
            X509v3 Authority Key Identifier:
                keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:e5:43:ef:9f:5c:82:d6:f5:64:ac:b0:56:00:3e:a4:d3:
         fe:df:92:ee:ca:bf:7a:15:03:f3:10:40:20:5a:ea:26:c2:74:
         b1:2a:02:7a:83:72:1d:d5:5a:66:01:0a:2c:a3:02:8e:49:32:
         f2:fc:6d:83:4f:2b:ae:62:9e:6d:d1:6a:13:8d:61:77:ad:54:
         7e:a9:e4:d5:08:a6:d0:d7:2d:d3:e9:89:dd:7b:91:d8:30:7a:
         62:25:0d:56:2f:b7:38:c8:a0:ac:f7:b2:42:f2:77:70:ae:e6:
         a0:e5:5f:a9:03:26:cd:d9:ea:5b:25:32:aa:77:ae:b6:f6:54:
         b2:06:b6:0d:18:7e:cf:df:28:68:f3:cb:6d:c5:36:05:01:35:
         8b:69:d1:e2:61:a2:6f:63:df:50:3e:53:d2:89:e6:4b:88:73:
         0d:b0:31:e7:a6:8c:c3:41:3b:83:c8:8e:04:7b:3e:04:99:ce:
         5d:f6:37:93:36:d0:f9:64:b0:08:8c:c5:28:38:4d:4c:a0:6e:
         0a:f7:37:e9:63:5c:96:59:8a:20:9c:b4:ea:9f:9e:27:77:9d:
         4c:10:98:fb:9b:23:0e:13:1c:1f:25:f4:0c:84:87:00:83:ca:
         85:0f:de:ac:e2:d7:4a:2f:08:aa:39:40:43:93:82:ec:3e:24:
         64:da:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:00 2026 by rpki-client