Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
File:                     _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json)
Hash identifier:          V0hyjct7gJc/e0DxGX3aIHaDo4vOWVo1VCr7ykfUNj0=
Subject key identifier:   B3:C4:40:05:F4:1F:CA:8B:8E:91:42:D6:CA:5D:F4:30:77:54:5D:ED
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Certificate issuer:       /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial:       1C03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
Manifest number:          1BE8
Signing time:             Thu 23 Jul 2026 23:40:57 +0000
Manifest this update:     Thu 23 Jul 2026 23:40:56 +0000
Manifest next update:     Thu 30 Jul 2026 23:40:56 +0000
Files and hashes:         1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: mcQ3JvtElrNuJKqfJCPZkGC32KYrbBQc3bpgav2HFHk=)
                          2: F0B38A8A86EF11F19E006003A7EE528E.roa (hash: G3VxTx/jbbPR89QIwxZ1667QlQMt/4ZUfbWGMqQ8W9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
                          rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 23:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7171 (0x1c03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
        Validity
            Not Before: Jul 23 23:40:56 2026 GMT
            Not After : Jul 30 23:40:56 2026 GMT
        Subject: CN=6a62a688-bbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:13:6d:a1:78:3a:79:82:61:f2:62:18:f9:bd:
                    32:fc:66:c5:7a:3d:d0:1b:a3:5e:2c:3b:5e:05:a0:
                    70:a7:7c:1a:f7:5e:c9:e2:ad:4c:00:97:cd:2d:9e:
                    8e:8c:bb:51:5f:d6:4a:80:50:8c:e2:11:a2:cc:dd:
                    53:03:eb:7f:da:7d:4b:c9:34:43:87:50:12:47:c1:
                    9f:76:78:da:52:f3:fb:ee:d6:af:e8:cc:6a:4a:f1:
                    b7:86:4e:36:7e:e4:d0:8c:8f:60:e0:d7:1d:72:1e:
                    68:61:3b:90:83:37:f0:21:f5:7a:fc:76:0a:07:ae:
                    b4:7e:ec:7b:ed:d4:dc:37:60:6d:06:33:41:8e:31:
                    cd:cd:43:bc:c1:f2:d6:27:7e:7d:03:88:a8:ee:19:
                    fc:60:21:38:66:2d:dd:4b:5b:9c:be:ab:89:f4:60:
                    01:38:d4:71:5d:c5:79:26:60:57:bc:08:78:f7:25:
                    0f:04:ed:d4:2a:e6:9a:5c:d4:e0:09:04:bd:ee:8c:
                    50:59:82:d1:c5:1d:f5:b2:d2:92:51:18:16:ca:ef:
                    6d:e9:37:07:b5:cc:92:9a:f5:e0:be:bd:08:86:c7:
                    90:d2:63:42:57:2f:30:72:cb:8e:ff:20:ac:a5:35:
                    4c:62:08:6b:79:71:c2:6a:82:09:7d:19:fc:ea:be:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:40:05:F4:1F:CA:8B:8E:91:42:D6:CA:5D:F4:30:77:54:5D:ED
            X509v3 Authority Key Identifier:
                keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:b4:28:42:06:a1:d0:b2:39:a9:bf:ba:00:05:58:ae:68:
         98:1e:6d:ae:aa:76:5c:48:93:3e:70:12:e4:c3:89:f5:75:ad:
         1e:3f:fb:b2:e3:70:15:39:98:83:69:b3:96:7d:a1:dc:c1:45:
         b3:70:e5:08:1a:68:48:1c:b9:3f:0a:38:c3:00:28:e1:65:2a:
         01:8f:8c:0c:f2:1d:55:ad:7f:78:6f:b3:43:7e:48:a7:a1:8d:
         84:2d:5b:61:4f:27:d7:26:b0:22:8a:85:b0:0a:15:a1:ad:89:
         c3:0b:cf:a1:d9:3a:3c:9f:7f:d4:98:a9:0a:6a:08:d7:a9:1b:
         bc:a3:9b:98:aa:95:2a:08:cc:a4:fd:8c:d6:9e:22:53:f4:2c:
         90:62:29:23:02:a7:dd:d1:b3:4c:59:69:b9:83:78:94:bb:0f:
         2e:d1:15:83:55:90:e1:fb:26:67:b7:f7:7c:2c:50:88:7e:e2:
         18:b8:27:ed:5f:a6:1e:04:2c:35:e2:52:32:17:0c:c4:1d:8e:
         39:59:b3:fd:aa:47:6e:0b:9f:45:4b:dc:2a:e3:19:eb:4d:f1:
         b1:c2:5c:3a:bb:19:11:56:8c:fe:d6:e9:61:54:2e:c9:58:e4:
         23:01:c2:fd:2c:0a:24:0e:38:3e:92:44:31:1e:70:5b:34:a0:
         4d:a4:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:56 2026 by rpki-client