Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
File:                     4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft (raw, json)
Hash identifier:          5yVw7Tu35xvR9Gk1EYfj5XPZmJEMEr/zWFbqeswPiis=
Subject key identifier:   5D:02:07:4E:45:39:46:76:58:13:3B:E0:27:4E:46:2A:17:0C:BB:EF
Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
Certificate issuer:       /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
Manifest number:          0C71
Signing time:             Wed 22 Jul 2026 19:06:44 +0000
Manifest this update:     Wed 22 Jul 2026 19:06:43 +0000
Manifest next update:     Wed 29 Jul 2026 19:06:43 +0000
Files and hashes:         1: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl (hash: iwa3JcMkGVoVVhZLHYo+I4I+U7mVAoLngNXlBKZxCt8=)
                          2: 2872362213AC11F18E65BA7479EE528E.roa (hash: Xw3QSa9Ss4iD8QxehrY8joIWifoDq7UToDva9Bu+pZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
        Validity
            Not Before: Jul 22 19:06:43 2026 GMT
            Not After : Jul 29 19:06:43 2026 GMT
        Subject: CN=6a6114c3-75b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:b4:3c:d9:97:30:ef:5a:7b:c4:2e:97:b2:
                    20:46:04:a8:d4:af:46:06:78:f9:6d:33:7d:51:de:
                    89:35:87:b9:14:c8:1d:c8:48:a0:e2:88:fb:7d:08:
                    0f:28:30:e6:fb:59:47:5c:20:34:79:00:0c:18:ee:
                    bd:57:cd:7e:1d:ca:df:dd:2b:54:d3:d0:26:fe:3d:
                    03:e8:e6:3d:7d:f8:a2:1b:15:c0:e9:f1:bf:a2:78:
                    04:9d:3d:28:af:9a:c3:52:59:c1:22:8d:d5:f9:7b:
                    84:80:40:b0:27:08:c6:d7:32:ee:ee:42:3f:6d:95:
                    6e:17:be:01:76:42:ef:9b:39:88:a3:7e:6b:9c:43:
                    d6:fa:58:e1:06:db:7b:fb:b0:4b:cd:d7:8a:52:0a:
                    de:08:db:63:62:0c:c9:7c:47:2c:b2:87:01:a1:36:
                    01:c8:98:22:ca:d6:75:b9:92:63:34:c3:2f:e4:93:
                    84:e0:8a:09:6e:43:75:02:5e:86:e0:42:2b:8a:61:
                    81:33:3f:0e:9d:fc:2c:c6:4c:9f:29:69:ec:55:f2:
                    ce:15:64:7a:f0:ae:54:ec:fb:f7:63:ec:4e:9e:21:
                    c5:6b:23:c4:44:92:eb:b0:b6:52:ef:b9:b0:93:a4:
                    47:80:de:f9:6e:09:bb:59:52:1b:c4:c0:b2:8f:8b:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:02:07:4E:45:39:46:76:58:13:3B:E0:27:4E:46:2A:17:0C:BB:EF
            X509v3 Authority Key Identifier:
                keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:32:89:b6:77:26:6a:7f:76:8b:5c:05:17:a5:7a:6b:d0:dd:
         03:a2:73:02:be:06:28:6a:d9:2a:54:e4:ed:0d:35:05:e6:e7:
         96:47:b6:a9:25:a3:8b:56:1b:8f:1a:f4:16:f3:10:ef:67:3e:
         09:bd:ed:9e:d3:34:6e:0d:68:31:68:53:83:4e:8c:77:3d:72:
         57:0a:2f:48:8b:11:56:fc:bc:2f:fc:1e:8e:24:e9:3a:4e:6e:
         25:9d:d9:2f:9b:5c:42:b7:c2:fe:7d:57:5d:28:1a:e3:b9:21:
         62:b3:ff:2b:db:7c:14:29:22:f7:08:90:47:b3:b9:21:bc:74:
         29:9a:a8:b2:ff:66:d0:90:22:79:53:f8:2f:c3:58:38:4e:11:
         4f:b2:a9:94:d3:5c:0d:43:87:ac:7d:aa:4b:6e:ef:ac:76:85:
         4c:86:2b:ee:fa:b9:b2:ea:13:7e:8d:02:86:2d:6f:d4:40:20:
         35:1a:46:28:d0:d4:98:9d:fb:20:76:a6:4b:f2:7e:de:08:b5:
         1a:80:17:61:34:b9:e9:72:0c:e9:c1:53:f9:5c:e8:24:35:45:
         de:1d:36:63:50:a2:11:04:c8:86:56:be:1b:95:20:2c:7a:fa:
         be:3f:87:f7:08:ab:1b:57:bc:9a:ee:4b:de:22:7f:0e:a6:70:
         e1:56:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:46:54 2026 by rpki-client