Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
File:                     sgBZBkA-medoWaqrsdy92uRCBvY.mft (raw, json)
Hash identifier:          91Y4b9YzTbUawcMIp1W3HJrEbZIrM1v5wWkF/zyVNeA=
Subject key identifier:   B6:A5:10:65:56:46:BF:F6:5F:76:2C:39:2E:B9:D0:E9:9E:75:AA:28
Authority key identifier: B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6
Certificate issuer:       /CN=A913A748/serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
Manifest number:          017A
Signing time:             Thu 23 Jul 2026 06:06:56 +0000
Manifest this update:     Thu 23 Jul 2026 06:06:56 +0000
Manifest next update:     Thu 30 Jul 2026 06:06:56 +0000
Files and hashes:         1: sgBZBkA-medoWaqrsdy92uRCBvY.crl (hash: OwFv6OJmF+01neKnuuaf4krn0Ba7/OR+tdvxb3mYoJA=)
                          2: 0B7CF64642B211EF82734679C4F9AE02.roa (hash: T+tFwZ72UNIrl9WKmwRdVjWlTQRqs/Ap4+Ll+pZb1ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
        Validity
            Not Before: Jul 23 06:06:56 2026 GMT
            Not After : Jul 30 06:06:56 2026 GMT
        Subject: CN=6a61af80-e8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bd:25:1a:1e:2a:74:dc:ca:fa:8f:bd:45:2c:
                    d6:3c:7e:16:93:91:18:bf:21:a7:21:2e:eb:05:b4:
                    79:92:b2:68:67:8a:78:56:b1:4c:18:bf:04:86:bf:
                    18:90:77:76:d8:4e:a9:4f:85:f5:9e:ff:74:b7:ca:
                    4d:28:2e:bc:29:d4:44:27:10:f0:ca:30:5f:bd:16:
                    a5:83:1e:7f:14:5c:48:ce:58:f5:d2:4b:78:e0:43:
                    e0:d7:e6:fb:a4:c5:4a:ee:f5:f6:ca:3a:23:be:9f:
                    fb:1f:20:6a:5f:3a:97:fc:2c:99:b2:24:50:c5:f9:
                    e3:3e:b6:ac:ed:51:1f:e2:31:b8:93:18:18:7c:73:
                    8b:9b:4f:46:93:8e:a2:42:2e:04:e4:44:e5:ff:15:
                    61:63:75:bb:67:b7:9e:13:9a:64:da:93:0f:33:2d:
                    00:17:6b:c1:72:61:45:73:9d:af:8b:d0:2a:39:5d:
                    c1:6e:96:0d:78:d0:78:bf:99:da:b2:33:ca:ec:01:
                    9f:c7:b6:e3:00:43:f7:e0:f3:36:74:e4:63:51:51:
                    03:a2:8a:b8:1c:cc:fc:b9:b8:59:36:e8:60:fc:33:
                    22:e0:4e:af:4b:c6:d7:37:66:7b:5f:94:af:16:f0:
                    2a:d1:fa:99:f7:d5:11:6b:f0:41:96:2a:ce:21:03:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A5:10:65:56:46:BF:F6:5F:76:2C:39:2E:B9:D0:E9:9E:75:AA:28
            X509v3 Authority Key Identifier:
                keyid:B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:5e:81:03:1d:09:ed:da:ac:27:c8:a9:a5:99:4a:02:e4:
         68:9f:d9:ee:68:2e:05:85:49:54:f2:c3:09:df:2e:ab:46:2e:
         96:a5:0f:ac:bf:75:d5:5f:42:74:22:84:06:d8:49:e3:b7:cd:
         96:9a:5c:f3:3a:4a:d3:12:5d:d2:6d:33:c0:5f:3e:9f:04:c0:
         ba:32:52:ee:fe:b7:a8:83:20:9c:25:b8:8b:37:f7:86:ac:d0:
         cf:46:76:fa:8c:fe:74:3c:ce:ac:3d:74:3e:61:e8:b7:81:1c:
         6d:e5:4a:33:f4:65:f1:21:7f:ae:e1:36:73:1f:11:b5:b4:9f:
         e0:d7:e8:fa:a8:4e:7a:00:66:55:96:3e:81:25:c2:ac:4a:2d:
         ab:ef:28:7e:d9:87:28:b6:98:f6:87:03:56:8c:0a:45:39:d0:
         9f:85:77:03:ea:0a:b0:fd:54:3c:b1:a4:66:de:9c:37:d9:bf:
         94:63:84:0d:0b:65:31:25:8a:c1:ef:8c:af:cd:b9:4f:8c:b9:
         68:5d:ab:b3:25:c8:52:11:1e:af:1f:2c:50:8b:60:1b:80:b9:
         d7:39:dc:41:72:75:f0:db:53:4c:7d:f3:22:34:04:84:c5:44:
         ef:63:e7:2d:f0:6a:3e:c9:9d:a6:64:f3:7b:b8:d1:99:38:69:
         85:78:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:10 2026 by rpki-client