Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File:                     _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier:          cwNVtVFEyofP26q7QlIETIrZNQ4NllF1mOiRHg0xWNI=
Subject key identifier:   34:AB:B6:81:6D:0B:A7:EB:40:75:37:B5:0A:BE:8F:3F:68:1D:AD:25
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       35E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number:          35A7
Signing time:             Wed 22 Jul 2026 15:01:10 +0000
Manifest this update:     Wed 22 Jul 2026 15:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:09 +0000
Files and hashes:         1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: id72smH0R7yggAilndWBXlM+0c2KhRdHSrFCU7z9k+Q=)
                          2: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: id2mRaIy2h7nVg/sc/ikSWNLePF2FrfpCr04A5Jbft8=)
                          3: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: CRBjNrDay0fKPUZhB/X7qmKie82SAt30Rk3lcvLRM5s=)
                          4: 931C5524175011EB8585CA60C4F9AE02.roa (hash: 5byMek5etqwTehUajH8Mj1zzTDL9e01ueYvXYYpN/aA=)
                          5: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: CtU0kY5KWSLSlfwZkRorGoa4e7JgtnQg/6zuGIRKoKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13794 (0x35e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: Jul 22 15:01:09 2026 GMT
            Not After : Jul 29 15:01:09 2026 GMT
        Subject: CN=6a60db36-1657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:55:63:7e:c6:45:70:2a:81:c9:91:44:a4:
                    dd:ae:a4:fb:e8:a9:70:40:95:6f:86:72:15:ae:44:
                    ab:17:b4:75:a2:a4:29:f3:1d:82:5d:47:84:16:ed:
                    97:0e:2e:46:7c:45:ce:9d:db:cc:89:67:d2:7a:2e:
                    0d:2c:f7:36:40:47:25:c8:24:16:af:e0:6e:2a:16:
                    52:b9:d3:dc:af:9d:69:24:6a:f6:2a:74:0b:78:d5:
                    3e:36:d8:2c:eb:5c:2f:26:d8:44:21:12:0c:62:30:
                    08:39:52:bf:b9:ab:8f:80:9e:9e:f2:50:5b:c3:cd:
                    d3:c9:f5:92:8b:f6:d0:00:7e:d7:04:9e:16:c8:46:
                    6a:bb:f2:34:f7:60:1a:41:55:13:7a:d8:0b:68:29:
                    8b:70:1f:60:bc:32:5f:f2:ef:e5:be:ee:82:e0:48:
                    13:0a:1b:7f:cc:0d:e6:82:3b:6f:66:b8:e5:5b:85:
                    2f:81:6e:24:be:12:00:15:39:40:c2:f0:fc:20:d4:
                    8a:13:1e:9d:74:9c:85:77:ea:9c:cd:83:a4:77:26:
                    b2:ae:2a:26:d5:3b:e2:53:c1:be:82:9b:50:40:f0:
                    07:2f:14:50:82:86:92:ca:85:b0:0e:1a:7f:5f:f4:
                    d0:e7:76:b5:47:5a:8d:a3:ba:6e:08:6f:88:c4:fe:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AB:B6:81:6D:0B:A7:EB:40:75:37:B5:0A:BE:8F:3F:68:1D:AD:25
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:f3:d4:42:16:d0:56:b7:8a:e6:18:ed:ef:be:6b:d4:62:
         bc:6a:e0:da:8c:60:75:75:8b:f3:f3:fd:0b:7d:a2:60:00:de:
         8c:63:20:2e:f4:af:1e:e3:7b:01:b7:ef:cf:15:20:a9:ac:61:
         73:73:97:64:6c:c3:05:b6:14:08:d8:8d:ba:be:14:fe:9a:e9:
         de:ee:48:76:a2:e4:a6:6b:bc:29:0a:18:2e:bc:bf:31:d4:5a:
         73:c4:e7:ca:e5:a8:e1:1b:2a:cf:7e:4a:49:77:5a:4e:ee:e4:
         47:3d:17:ee:80:1d:f4:f6:97:ff:e6:0c:c7:80:68:4a:e6:c8:
         63:08:2c:7a:c2:c5:f3:4f:06:1c:14:64:fa:8e:db:37:63:26:
         26:26:1c:b2:fc:5d:9a:bc:51:dc:8a:5f:c8:75:e3:af:cc:c6:
         53:92:92:f8:76:f6:70:98:a2:8b:4b:65:2a:29:31:d0:26:c5:
         b8:80:7a:5d:4c:36:05:e4:51:4e:0f:fe:81:ea:12:6c:49:97:
         83:91:a6:cf:59:b7:97:b9:bf:e3:1d:d4:c3:fe:b1:47:ca:54:
         66:e2:2a:9a:dd:3c:98:ad:8f:7c:34:77:1c:5d:17:3b:80:0f:
         0f:eb:ab:75:0f:c0:7a:be:43:2f:32:83:e8:e9:9f:0d:af:2c:
         90:e1:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:51 2026 by rpki-client