Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File:                     SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier:          Eui7v+g6cvcV0fb1XhcGqVSDPi9r+t7vQ56rZUeKM10=
Subject key identifier:   BB:05:B3:A1:C4:1C:34:2A:FB:03:75:EC:15:D9:AA:8C:D2:49:6C:CE
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer:       /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number:          F7
Signing time:             Thu 23 Jul 2026 08:04:11 +0000
Manifest this update:     Thu 23 Jul 2026 08:04:10 +0000
Manifest next update:     Thu 30 Jul 2026 08:04:10 +0000
Files and hashes:         1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: GsFDBB+71BkqJwd2jbl6bY/L9cYbyI6XiWLDyU3S0zo=)
                          2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: WQx0gB4vaejrR/+XkuLctOwdLPN5sGooZHjE/arViIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
                          rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
        Validity
            Not Before: Jul 23 08:04:10 2026 GMT
            Not After : Jul 30 08:04:10 2026 GMT
        Subject: CN=6a61cafb-bd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:09:b7:b3:df:66:b2:76:ab:bc:39:bf:36:
                    17:32:44:e9:10:ee:78:db:91:79:0d:76:3f:d2:f4:
                    52:57:68:e8:a0:f9:0b:63:c5:fb:09:8e:34:ee:bd:
                    0d:ee:a7:03:c5:b5:5a:54:24:6d:20:74:66:ba:93:
                    d4:04:cc:ef:52:7b:bc:37:9f:55:87:21:e2:33:59:
                    2b:84:b1:1b:40:1e:ba:62:5e:aa:18:38:6d:63:47:
                    22:fb:c6:7f:bf:33:0d:a0:cf:57:18:15:23:33:89:
                    41:9a:79:b8:8f:02:9a:2f:55:9b:ff:d1:13:d3:89:
                    e0:03:ac:7c:c5:f0:85:ba:6a:ae:bc:2e:a0:cf:76:
                    fa:23:da:03:d9:34:1a:7a:60:82:c3:3f:63:57:b2:
                    c4:e6:43:e8:c0:8b:a3:2f:4d:85:a0:39:c0:8e:03:
                    d3:9a:99:0b:8d:11:05:f7:ed:9e:ca:e6:64:8c:74:
                    96:88:1a:b5:1a:4a:8a:b2:39:ab:1c:0f:f4:0a:5c:
                    af:5d:26:4a:5c:a3:f8:35:67:0d:ad:98:a8:7a:5d:
                    ca:b7:d3:79:eb:24:16:ad:6a:26:72:d2:42:91:71:
                    c8:87:f2:d9:ee:13:9a:01:03:51:9f:32:f7:50:e4:
                    58:1a:ac:b5:ad:26:54:67:1c:ec:3e:5a:56:8e:6e:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:05:B3:A1:C4:1C:34:2A:FB:03:75:EC:15:D9:AA:8C:D2:49:6C:CE
            X509v3 Authority Key Identifier:
                keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:78:51:a7:22:c6:7a:81:54:aa:e4:66:0d:7b:ff:46:9b:56:
         15:e1:94:82:eb:22:24:3a:16:f9:61:75:49:c2:be:c1:76:84:
         b9:d2:a8:84:60:a3:76:7c:3e:89:57:92:82:5d:f8:76:eb:05:
         d5:d4:95:98:d5:cb:da:2f:66:2e:0d:ca:37:52:1e:51:a7:71:
         10:aa:44:c6:5f:73:03:5d:81:1f:ea:e4:1c:1f:33:a4:63:8c:
         d8:cc:7e:bb:5f:ea:d9:65:d4:86:d1:92:66:01:2c:d9:7b:8f:
         e5:83:0b:76:f8:2a:b4:34:a2:65:26:41:e8:d1:a3:33:69:2f:
         c8:99:88:06:4c:0f:7b:d8:1b:e2:15:00:28:22:b7:66:37:ab:
         e8:e2:6d:58:ac:67:29:83:4e:f1:0d:8c:99:69:d1:f1:4c:58:
         a5:bd:ed:0a:03:0c:2b:1f:6a:cb:d1:a7:a4:10:cc:c8:ea:1b:
         ff:d6:32:c6:86:54:13:46:6e:33:cb:b0:d9:f8:80:5d:9d:d5:
         5f:f7:e4:c3:34:f1:16:2b:99:07:66:f6:59:b5:23:3d:1a:0f:
         eb:a7:36:d0:bf:e9:9a:0b:b6:c9:3d:08:04:c9:4e:0a:2c:be:
         f0:97:37:4e:72:94:4c:1a:de:f5:b7:df:ca:5e:53:73:5a:26:
         84:9b:77:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:58:09 2026 by rpki-client