Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File:                     8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier:          /y26f9I+q2+Hq6CEROpCSWsQ5kPM9SVMoIUOApe3SlM=
Subject key identifier:   66:E6:FC:FB:81:9A:03:43:8A:19:4D:0A:C9:46:8F:22:F7:9F:02:59
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer:       /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number:          01CA
Signing time:             Thu 23 Jul 2026 05:06:44 +0000
Manifest this update:     Thu 23 Jul 2026 05:06:44 +0000
Manifest next update:     Thu 30 Jul 2026 05:06:44 +0000
Files and hashes:         1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: p1wVgsS79VS6lhfIZcAmuruo18tWj01HvaHL71Gv5F8=)
                          2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
                          rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
        Validity
            Not Before: Jul 23 05:06:44 2026 GMT
            Not After : Jul 30 05:06:44 2026 GMT
        Subject: CN=6a61a164-06db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:9c:6a:9c:85:ad:68:46:c8:4e:9d:81:cf:
                    1d:1a:41:57:58:77:c0:88:19:72:67:20:b5:dd:f7:
                    c1:20:8e:ed:ee:9f:fe:6d:72:fc:d3:0a:6e:42:40:
                    ee:f5:e2:aa:a2:e2:22:d0:b9:36:ea:8b:a2:ba:a2:
                    cc:d5:ae:3c:a5:44:7b:b8:d0:23:f7:5e:9e:86:43:
                    80:50:00:ba:81:b3:f9:a0:29:fd:ca:27:54:27:15:
                    e8:58:01:40:16:b9:30:ca:f1:34:a4:db:3e:dc:7c:
                    74:d2:02:f2:e7:e5:2a:ce:ed:2e:b4:43:32:a1:6d:
                    a9:25:f5:8f:3a:e3:e7:40:44:26:d6:b3:29:ee:97:
                    66:00:02:06:0b:28:16:d0:73:1b:18:dc:c6:17:7c:
                    28:f5:94:ce:ee:ba:ee:32:fa:52:6f:ec:62:f8:92:
                    eb:18:ea:ce:ca:67:40:23:06:90:f9:c1:24:ac:55:
                    12:64:ee:9b:24:06:35:f5:31:f2:dc:be:33:41:7a:
                    ae:c5:91:ae:11:7b:52:6f:f3:49:c0:90:4d:78:e8:
                    0e:8c:01:4c:61:21:57:f6:3e:66:13:78:b9:7c:13:
                    a2:16:11:b7:97:c2:a6:5c:47:a2:8e:58:42:13:6a:
                    97:cf:55:75:83:c6:fb:d9:e0:8c:f9:fc:49:40:ea:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E6:FC:FB:81:9A:03:43:8A:19:4D:0A:C9:46:8F:22:F7:9F:02:59
            X509v3 Authority Key Identifier:
                keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f4:c0:c8:61:0f:ad:a5:8d:57:af:92:54:f1:a0:89:6b:58:
         55:cc:61:ed:5b:04:2d:49:fc:ed:b8:f2:f4:d1:fb:60:49:cd:
         9e:ce:47:04:c1:cd:a3:4c:85:ed:5c:0c:58:81:4a:6e:7a:4d:
         b7:64:a6:b9:3c:6a:2b:f3:2c:0b:80:d9:7e:75:20:ad:e9:69:
         73:36:a2:02:88:3f:57:55:09:bb:95:01:39:99:ad:07:24:72:
         4b:2e:a1:4f:fe:27:8f:de:dd:54:d3:2b:1c:73:77:0e:c8:a9:
         b0:b2:26:9c:ab:cc:df:41:d6:31:92:22:e4:dc:2e:0a:d5:76:
         8f:28:1e:ee:07:35:f9:50:f6:12:92:93:46:a6:9b:cd:e8:45:
         86:87:d0:87:9f:f6:0e:3d:eb:84:36:85:e3:b2:7a:5f:5e:32:
         74:05:a2:f6:55:ff:48:ec:77:01:92:04:81:db:d7:1c:81:3c:
         53:4d:f0:a1:7c:4d:71:d8:24:b0:9b:22:05:bb:b5:87:bd:67:
         19:68:e3:3a:89:6b:38:d1:dd:6a:fc:2f:ac:bd:f8:d4:92:d1:
         11:3d:00:98:57:8d:83:58:6d:18:f2:36:48:46:3f:e4:d4:02:
         36:68:95:46:10:53:33:da:04:ad:7d:61:2f:ff:7f:d6:01:ea:
         b1:ec:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:58 2026 by rpki-client