Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
File:                     AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json)
Hash identifier:          CZJ66Cvksv341r+rb7jW9V73HXROWczVJFoCsJ8KCqA=
Subject key identifier:   EB:36:4E:2C:D0:F8:89:7A:10:B6:55:9F:5C:18:2F:76:CC:F4:EA:08
Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
Certificate issuer:       /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
Manifest number:          01AA
Signing time:             Thu 23 Jul 2026 05:30:05 +0000
Manifest this update:     Thu 23 Jul 2026 05:30:05 +0000
Manifest next update:     Thu 30 Jul 2026 05:30:05 +0000
Files and hashes:         1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: uOXSExBl0iJyjzRpqMSIPh0ok6z+NWZQMCPt3y0vxM0=)
                          2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: gRN+gspECqlTI6rrjpufXp2pLa9m/o4m0OMYkN6xBgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl
                          rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0D8, serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
        Validity
            Not Before: Jul 23 05:30:05 2026 GMT
            Not After : Jul 30 05:30:05 2026 GMT
        Subject: CN=6a61a6dd-3333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ae:81:8b:d4:1c:df:62:6e:71:c7:2f:c9:b9:
                    e9:42:36:1f:12:e0:f0:db:7a:78:3d:33:c4:a4:b7:
                    64:20:c7:e6:46:a4:80:09:30:b4:46:39:24:22:dd:
                    fe:d0:e4:4f:bd:53:d3:07:7f:8e:78:67:a3:c9:9e:
                    67:1b:e9:a8:77:fe:00:c7:87:84:c8:9a:be:80:8c:
                    94:a3:32:8b:ba:9f:dd:2c:60:a2:17:78:45:5d:24:
                    3b:74:fe:f6:ee:b3:35:19:37:02:31:bc:36:89:a5:
                    b5:03:39:96:c1:4a:64:f4:a2:25:46:e4:ad:6c:02:
                    b3:a1:93:8d:d8:9a:de:d2:0c:a4:6b:ab:ed:38:12:
                    e9:e2:aa:e2:47:85:c8:c6:a1:d6:d7:9f:11:8d:f7:
                    64:b9:0e:4a:8e:0f:75:15:47:a0:1b:1e:80:5a:7d:
                    9a:9a:ff:54:6b:2f:3b:91:f9:3a:d7:01:7b:b6:f4:
                    7e:c6:73:5b:6d:44:e9:f5:15:8c:68:85:6f:20:67:
                    62:d9:2d:0b:1a:97:16:03:29:77:65:a5:6c:f7:37:
                    42:c8:ba:93:5c:07:b4:49:8d:28:30:0c:47:6e:2b:
                    d2:ce:74:b0:6e:e0:d9:15:0d:40:05:ab:c7:25:89:
                    9e:57:2e:af:fd:12:17:bb:c4:8f:82:f7:3f:ab:de:
                    de:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:4E:2C:D0:F8:89:7A:10:B6:55:9F:5C:18:2F:76:CC:F4:EA:08
            X509v3 Authority Key Identifier:
                keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:40:b6:f7:60:d8:5c:51:a1:ad:8c:65:c0:8f:9b:24:46:
         0d:ba:f8:7d:1a:87:2b:52:44:de:c2:11:f4:02:76:f5:bd:32:
         61:5f:e0:7c:ff:3d:9e:f7:47:13:b5:f3:96:28:3a:17:bc:63:
         4c:3c:44:66:a5:7e:1f:78:87:f4:1d:9b:e6:46:e0:ff:32:51:
         d6:aa:de:ee:7b:8f:e8:5b:ae:36:52:fd:21:e6:d1:23:29:95:
         08:a7:13:90:34:1f:4f:3d:c3:29:5c:af:31:db:d6:d1:f5:56:
         05:ad:20:ac:03:fc:a7:ae:d6:da:87:2d:ee:71:d8:ea:8f:2a:
         8b:bd:6f:40:03:2d:7f:6d:d1:8e:17:6f:b7:79:d7:6e:3d:5e:
         e2:03:cd:a6:7f:43:27:9f:43:96:42:bb:96:b9:4d:dd:98:50:
         5a:05:71:c5:e1:da:ca:28:20:1c:0f:ca:3e:90:76:47:91:19:
         11:61:e2:4f:a3:2d:45:96:4b:8e:d9:cc:f8:d4:d4:8a:af:2f:
         5e:e9:a9:6c:ba:63:bf:8e:1a:25:ca:05:d9:51:e3:d0:e2:bb:
         52:90:4d:62:dd:d7:d6:d9:a1:c6:ea:21:c3:2c:cf:31:4d:3d:
         cd:3e:92:6d:d4:70:78:b9:ab:47:aa:49:39:e9:92:f3:13:5b:
         92:58:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:41 2026 by rpki-client