Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
File:                     p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json)
Hash identifier:          HyTWtWJq7bhHFfDQ4yQLTCkZhsW1dpgBfjXoDih6M64=
Subject key identifier:   B0:C8:3E:C4:E5:0D:DB:92:97:78:3B:4D:4F:C7:05:5F:5D:2C:0D:2B
Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
Certificate issuer:       /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
Manifest number:          027E
Signing time:             Thu 23 Jul 2026 03:00:03 +0000
Manifest this update:     Thu 23 Jul 2026 03:00:03 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:03 +0000
Files and hashes:         1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: EBpVC+YXcRHfuElHIKI6rbtJp1q0Xh2Tjaw3506vFk8=)
                          2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: WGorStRkbLwrigBvf/nQZHMe+/jic6JfhsJdmCHSYZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl
                          rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
        Validity
            Not Before: Jul 23 03:00:03 2026 GMT
            Not After : Jul 30 03:00:03 2026 GMT
        Subject: CN=6a6183b3-3bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:da:53:e3:a9:bc:99:1d:fa:ca:5b:70:9e:
                    cc:46:00:51:34:73:7e:a4:a1:ca:de:f0:2e:89:b6:
                    ca:5b:ec:e0:06:a8:65:1e:e0:5d:27:3e:32:f5:50:
                    06:e0:c9:c3:78:f2:1a:5c:5d:c9:5b:0e:36:9b:59:
                    2d:7f:b3:0e:66:63:14:05:27:44:2a:9e:14:c1:3d:
                    fe:19:ff:4a:52:c4:78:7e:64:ab:bc:2b:0d:b2:98:
                    81:a8:9e:50:61:61:9c:29:0f:9a:1c:f0:31:b2:4a:
                    9e:d4:7b:7c:cc:48:bd:2b:a2:a0:79:34:18:95:7a:
                    a0:7a:64:67:a6:26:51:74:13:3e:80:23:dd:b2:0d:
                    72:df:f9:82:dc:23:4f:25:49:46:a3:7f:75:9c:e3:
                    37:1b:fa:52:d0:63:4a:fd:20:ec:bc:8f:ee:d2:33:
                    fb:91:57:a5:7c:88:06:cf:f1:0e:aa:b4:9d:47:0a:
                    f1:2d:e6:61:07:ad:35:97:a1:aa:1d:6c:38:3d:8b:
                    81:2b:5e:56:5f:cf:e8:c8:db:d4:18:36:c4:71:c0:
                    47:f7:58:6e:45:c3:53:c8:00:98:a3:25:10:be:7a:
                    67:47:bc:a4:9b:fb:f0:d9:4e:12:7b:3a:10:4c:46:
                    cb:f1:c4:22:5a:62:19:7c:40:23:c3:6f:bd:d4:9d:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:3E:C4:E5:0D:DB:92:97:78:3B:4D:4F:C7:05:5F:5D:2C:0D:2B
            X509v3 Authority Key Identifier:
                keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:d5:52:72:bf:fb:4c:2d:17:49:eb:cf:fc:b9:11:1f:dc:
         c5:2b:58:3f:c2:0d:3c:04:ea:d8:79:02:d0:c4:53:5d:b4:08:
         4b:96:89:6e:6d:a0:5c:1b:c7:db:69:47:0c:18:45:69:65:1c:
         db:6a:5c:1c:20:7a:8d:ee:08:7b:3b:d6:bc:be:d5:a6:bc:31:
         1b:10:00:72:00:88:bf:0d:1a:f0:d2:52:32:9e:8d:a4:8d:80:
         ca:e7:09:b9:b7:20:b4:31:09:a7:04:07:46:6c:f3:78:9f:8f:
         06:1b:34:f7:d5:73:8c:bc:94:a9:ad:24:1e:1a:86:98:0e:c7:
         41:66:83:33:7b:68:bb:c4:63:38:31:b3:e2:0c:c5:98:c3:cc:
         31:c7:c9:25:cb:21:94:08:1c:b7:6c:01:de:e8:97:89:72:c4:
         77:4f:e0:d1:f1:5b:5d:c8:4e:76:1d:f0:28:5f:d7:29:0c:48:
         32:a8:a9:02:20:8c:dc:54:d2:1f:db:f3:db:5b:82:39:08:56:
         7e:db:14:14:78:f2:70:e2:fd:51:95:40:a8:f5:0f:bc:5f:e2:
         02:38:d8:41:ff:3e:8e:4a:44:29:36:c4:60:b9:d7:81:59:82:
         4b:7b:a1:12:39:66:24:af:6f:28:c2:e4:0b:84:1b:38:07:99:
         1c:c4:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:28 2026 by rpki-client