Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
File:                     sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json)
Hash identifier:          qmP4sdUC/IG08/5CuHDZkQbnx3vZqk9DHZr07HvrC5w=
Subject key identifier:   4A:DE:05:CD:30:61:DB:DF:F5:50:E7:08:68:7B:9E:53:EF:31:CD:BD
Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
Certificate issuer:       /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Certificate serial:       08EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
Manifest number:          08D9
Signing time:             Wed 22 Jul 2026 20:55:41 +0000
Manifest this update:     Wed 22 Jul 2026 20:55:41 +0000
Manifest next update:     Wed 29 Jul 2026 20:55:41 +0000
Files and hashes:         1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: jh1NlWKIzlBU4x0bwxsLgYImhK+OPsctma/iV4yYYto=)
                          2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: XSSSfE9iJebrluIiHWJs0Zhb1i4/3PM9OkDY26rCm9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl
                          rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
        Validity
            Not Before: Jul 22 20:55:41 2026 GMT
            Not After : Jul 29 20:55:41 2026 GMT
        Subject: CN=6a612e4d-69ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:7f:96:54:9e:76:36:07:38:03:1a:b8:c7:
                    d3:28:f2:1c:64:90:73:7c:08:a5:b9:2a:12:58:07:
                    66:00:ba:27:db:1f:c8:b5:38:61:f8:99:bd:7e:bb:
                    7f:14:05:2e:fb:c0:66:b2:03:a4:1a:d4:88:ec:59:
                    4d:a4:e0:0c:77:9a:cb:4c:c8:a5:d1:ae:8a:0a:f2:
                    4b:e5:db:45:6e:f0:ed:38:fb:d0:30:3b:13:43:92:
                    da:cc:05:ef:68:06:f2:b4:14:79:80:35:2a:a2:68:
                    29:12:da:5b:41:6b:ad:d5:7a:79:c7:ac:c9:f5:87:
                    50:67:c8:02:26:65:b4:e0:dc:44:39:fa:19:ef:7e:
                    27:9b:70:2e:52:86:48:06:a8:a6:62:5d:51:cf:de:
                    c5:c2:71:5b:35:38:e6:fd:f6:f0:54:35:aa:07:b5:
                    a8:ac:c0:f9:5b:9b:a2:4f:04:bd:9a:c3:49:ea:88:
                    2b:03:69:db:32:af:88:c0:fa:f0:b7:d3:81:eb:42:
                    05:6f:25:15:81:8d:35:a5:e6:a1:30:be:7a:5a:f1:
                    29:b8:b6:1e:bb:2e:41:98:ba:06:44:b1:88:19:3a:
                    8d:b6:90:46:bb:ac:96:92:e9:e0:79:8e:ff:28:54:
                    a7:38:4a:8d:c2:a6:0b:f7:4a:1d:47:e6:30:e1:57:
                    59:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DE:05:CD:30:61:DB:DF:F5:50:E7:08:68:7B:9E:53:EF:31:CD:BD
            X509v3 Authority Key Identifier:
                keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2d:11:35:2d:e2:ae:50:f3:6e:9a:a4:e4:36:52:98:67:1c:
         44:d7:7b:cb:3f:8e:1d:28:66:0c:8d:cb:c7:8b:7a:0d:97:1a:
         9f:d7:70:f2:91:e6:c8:6a:ac:ac:df:0f:e5:32:fe:05:1f:51:
         d3:ed:ce:c9:27:2d:a3:da:ab:81:5d:2c:10:f9:80:48:4a:47:
         f5:9a:94:5b:9c:fc:ad:ff:28:ef:fb:d0:58:53:f8:75:34:18:
         5f:d3:ae:6e:3f:a3:d4:ad:09:54:45:4f:e5:07:5c:c5:dd:4e:
         f7:94:94:15:9d:8d:9e:4c:ab:91:df:f7:5c:b0:68:f6:fc:f2:
         48:9f:2d:ec:93:74:e4:9f:17:13:be:2e:45:40:58:29:a6:49:
         a8:20:71:e5:39:28:c2:9d:f2:49:de:f8:8f:51:62:4f:56:0f:
         a0:b5:b5:c3:2f:e2:75:8a:75:ba:6c:1f:e3:9b:f7:27:6f:69:
         05:23:9b:a4:88:fc:eb:da:4e:0f:15:5b:25:ea:93:55:f9:cc:
         4a:ee:d5:3c:ae:2b:42:41:5b:09:2f:07:de:ce:4a:97:bb:e9:
         50:33:9f:ac:c4:92:cd:f7:bc:5d:ab:da:4e:27:fc:33:34:0f:
         dd:ad:f3:f5:43:68:a6:49:ba:9e:85:a4:ed:e0:55:9c:10:6a:
         af:8e:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:51 2026 by rpki-client