Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
File:                     r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json)
Hash identifier:          HHlCCMgYsqnTsCnTyZadzfjPG2yuy3MzDVkrcF1WAMo=
Subject key identifier:   83:23:0B:09:EE:4A:F5:E4:37:5C:C7:2F:DC:05:CE:7E:22:EB:A4:A3
Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0
Certificate issuer:       /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0
Certificate serial:       059F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
Manifest number:          058B
Signing time:             Thu 23 Jul 2026 00:01:45 +0000
Manifest this update:     Thu 23 Jul 2026 00:01:44 +0000
Manifest next update:     Thu 30 Jul 2026 00:01:44 +0000
Files and hashes:         1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: hyI793P0nZDKZLS7zxD6G4W7XVp8ETkdDP10ejVd30Q=)
                          2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: xZK353K857X3pyBMuTDvCs3K6j+a0kZMwNk0Xb/yi9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl
                          rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439 (0x59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0
        Validity
            Not Before: Jul 23 00:01:44 2026 GMT
            Not After : Jul 30 00:01:44 2026 GMT
        Subject: CN=6a6159e9-07e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:82:16:9d:7a:c7:43:7b:c8:a3:ea:5a:38:
                    8b:e9:fc:85:77:16:dc:d0:ad:ce:44:3a:03:07:da:
                    ab:99:fb:3e:7c:31:66:f2:d0:6b:80:3b:7a:e8:d4:
                    67:4e:16:e0:b5:32:cc:dd:b4:d9:37:eb:52:07:85:
                    7f:47:05:1e:7c:c6:33:7f:ef:7e:e4:4b:74:20:ba:
                    ab:e6:a0:68:ae:f1:bb:f6:b9:d8:b3:df:fd:38:db:
                    c1:4c:97:a5:2b:ac:51:bd:98:db:a5:e7:21:89:2c:
                    1e:9b:94:e7:16:44:c0:16:10:20:9b:37:cf:69:e8:
                    10:da:2f:32:69:59:67:64:79:8c:8a:c2:67:c9:a3:
                    90:4d:2e:36:12:45:72:d1:04:fb:ff:b2:12:6f:e2:
                    bf:e2:54:9f:76:bf:8b:0e:ab:46:89:c1:04:c4:53:
                    4e:8d:08:80:f5:11:68:6d:ed:62:3c:fa:9e:8a:90:
                    d9:16:77:8c:5d:51:17:65:26:fa:1b:45:7e:28:3d:
                    80:cb:8c:2a:e7:e2:d5:86:a2:b9:8d:93:d6:f8:24:
                    9b:4b:21:3f:5d:cd:64:7c:3b:31:8a:a7:78:b7:6d:
                    05:b0:21:2e:87:4f:9c:5b:15:94:a9:ad:df:a4:9d:
                    31:26:33:34:3b:2d:f6:c0:84:b7:6a:70:f0:83:42:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:0B:09:EE:4A:F5:E4:37:5C:C7:2F:DC:05:CE:7E:22:EB:A4:A3
            X509v3 Authority Key Identifier:
                keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b6:f9:47:d7:23:63:4d:06:9e:db:d2:85:f1:eb:46:32:f2:
         5a:2c:5a:b9:b1:b0:37:1a:a6:4f:b1:ce:6f:04:67:25:1e:db:
         1e:10:59:99:7e:4f:6d:a2:73:79:8c:86:b1:40:87:65:fd:98:
         f8:f0:1b:18:07:58:5e:b8:09:64:b0:d3:d1:6a:ca:14:4a:9f:
         b4:9d:33:52:db:83:80:ad:e9:3d:3b:46:c3:15:25:03:22:a4:
         ed:0e:9f:59:61:d8:ed:c7:de:73:2c:14:2b:39:ab:18:96:96:
         0e:1f:a0:24:07:aa:a2:eb:39:17:08:4c:d3:17:d4:23:79:7a:
         f4:c1:3e:71:33:cf:0e:f6:7c:ef:f6:6a:81:a8:b3:02:c8:fe:
         3e:f1:d8:ee:2d:76:f6:46:b3:eb:18:87:fb:26:0e:b5:78:19:
         f7:56:48:10:82:c9:ed:1e:0b:40:55:67:7a:3e:76:0f:bc:c6:
         f6:08:7f:ea:bb:fc:c1:04:61:dc:d5:d7:4d:e0:13:ee:e0:9e:
         52:23:79:ed:d6:9c:41:7d:19:a0:23:7a:88:6f:47:90:e1:98:
         bc:01:36:20:24:c4:6b:ce:be:72:aa:9b:d9:43:00:1a:5b:b9:
         e8:1a:05:dc:6f:01:b6:5c:3d:6b:a8:3e:9a:52:48:89:75:a5:
         8e:2b:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:17 2026 by rpki-client