Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
File:                     SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json)
Hash identifier:          Pf/okVDt1928SFEbPGEacWwTnudH+h8jbLUbGhmIMIc=
Subject key identifier:   98:5F:5C:9C:68:86:40:53:23:45:A5:7B:12:91:54:65:F8:A3:93:AA
Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44
Certificate issuer:       /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
Certificate serial:       0751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
Manifest number:          0741
Signing time:             Wed 22 Jul 2026 22:25:14 +0000
Manifest this update:     Wed 22 Jul 2026 22:25:13 +0000
Manifest next update:     Wed 29 Jul 2026 22:25:13 +0000
Files and hashes:         1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: OY0SGA1lhA2GaBEuTBi/NkTg8MtPOQ7Cs8nQzRae6xY=)
                          2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: XchKL5ppJdIsik49dTNke5KNQEJIg/c7B1xcdOcfVn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
        Validity
            Not Before: Jul 22 22:25:13 2026 GMT
            Not After : Jul 29 22:25:13 2026 GMT
        Subject: CN=6a61434a-af1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:42:f5:37:31:9b:ae:60:a6:17:d7:33:02:08:
                    9f:0a:0b:04:4b:07:b6:70:8d:db:98:06:5a:96:ac:
                    34:cc:c7:13:86:f6:77:56:a0:4b:e8:f5:d5:22:92:
                    c7:77:db:d9:1c:63:40:86:c3:ac:f6:e7:da:38:0b:
                    a7:62:8c:0d:18:fb:fb:00:5c:96:a0:ea:1b:de:80:
                    8d:ef:3d:83:3e:b0:64:bc:08:05:f3:20:70:fe:cc:
                    cd:54:99:1b:ad:de:dd:97:ea:29:90:bb:a8:45:ff:
                    a4:f6:60:3f:35:b6:2d:3f:83:7b:75:25:8b:98:3f:
                    b5:46:c0:db:00:cd:dd:e1:3d:91:78:fa:c3:b1:47:
                    67:8b:24:d5:89:e6:c6:90:b7:34:c8:32:59:cf:a2:
                    2a:c4:7a:0f:94:c7:32:41:b2:52:a0:5b:ae:48:f8:
                    5b:8d:e7:9a:c5:72:ae:c3:80:13:88:8e:78:d4:6f:
                    a9:58:53:23:2d:a1:48:00:43:e1:5d:bd:ff:93:e8:
                    37:e5:00:57:aa:85:05:48:53:e8:7a:cd:cb:88:52:
                    94:1b:6d:9f:30:55:5e:b8:1c:ce:75:a9:1f:9d:9d:
                    07:5d:10:1f:19:c8:ff:f4:af:0b:53:33:dc:80:11:
                    97:e4:80:36:7c:c1:55:90:a3:56:3d:d5:ac:9e:a0:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:5C:9C:68:86:40:53:23:45:A5:7B:12:91:54:65:F8:A3:93:AA
            X509v3 Authority Key Identifier:
                keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:95:89:f6:e4:61:e2:e3:7d:19:19:85:ec:37:29:c6:03:af:
         13:80:a0:e7:4c:b3:7e:d0:e3:b7:c1:9c:1a:7f:f9:bc:eb:bd:
         ed:fa:e7:a3:77:e9:9f:74:bd:97:3a:fc:fc:cf:d2:8e:82:57:
         f2:e1:7b:f4:04:cf:2c:e2:2d:ac:2c:db:f6:7e:d7:05:91:9c:
         76:ae:e2:70:82:71:67:19:1b:42:3b:7d:71:77:b9:ff:cd:a7:
         17:1c:e2:d2:a8:cd:75:4a:6a:e3:0a:1d:31:63:e9:03:76:d6:
         a4:0d:b4:f7:42:a3:8c:1c:63:2e:47:fa:de:02:65:24:1e:bc:
         5c:3f:f9:32:13:c8:c1:3e:71:e1:6f:08:ba:85:e0:3b:82:09:
         ec:5f:92:19:86:c5:18:c7:12:1a:69:70:6d:75:4b:48:6b:f4:
         8a:bb:6a:7b:bd:33:62:6c:38:32:5a:fc:cf:b7:a4:41:1e:52:
         d0:b3:c9:6f:b8:7c:3f:d9:96:23:11:e7:07:9b:b8:85:0d:95:
         c1:a7:45:bb:e4:53:b5:e5:f6:d5:87:18:7d:47:93:0a:bf:f5:
         ec:65:c6:3d:d0:e9:d1:52:d4:0b:36:0f:62:30:0e:da:3d:fb:
         8f:27:f7:c9:7c:1e:ee:b5:88:8b:3f:64:8b:65:55:1f:14:1d:
         1c:2a:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:31 2026 by rpki-client