Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
File:                     S18cktxo2UEqrDB3GD-jbdA9zRU.mft (raw, json)
Hash identifier:          iA6Jt45DgRhsMP3coxc11nAoHqQ/L4IOtmwGoaKLj1A=
Subject key identifier:   9A:FA:83:94:E2:66:39:21:98:C0:C8:CE:C1:4D:FE:B1:5A:E8:22:85
Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Certificate issuer:       /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
Manifest number:          27
Signing time:             Thu 23 Jul 2026 10:57:49 +0000
Manifest this update:     Thu 23 Jul 2026 10:57:49 +0000
Manifest next update:     Thu 30 Jul 2026 10:57:49 +0000
Files and hashes:         1: S18cktxo2UEqrDB3GD-jbdA9zRU.crl (hash: nxJF84x7IdiZSi1P4m4yxafd6B+PZ0+Qjfn/UA3eU8Q=)
                          2: 1CA9AC0E55E111F18B979D53AF833773.roa (hash: Dbwt6nm5VyyCTjwVUdPIQGcNeUg1GDeIUpEjZ2v1gJ8=)
                          3: 5525C30C7C5011F1B4BAB03D68A30FBC.roa (hash: z8FOKVvYXByRhy5QCFuuv5pOXxsDGdJf5ZmT4swtT0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
                          rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
        Validity
            Not Before: Jul 23 10:57:49 2026 GMT
            Not After : Jul 30 10:57:49 2026 GMT
        Subject: CN=6a61f3ad-2b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7e:0e:35:12:db:a3:f6:4b:3a:11:ce:ab:4b:
                    d2:d4:80:60:67:fc:40:c8:7d:2b:fc:ce:5d:6e:df:
                    43:e9:6d:74:2e:42:6c:fb:9b:d1:73:94:95:8a:45:
                    63:dc:25:f8:96:f2:ad:d7:d8:65:cc:17:2f:01:f1:
                    00:24:06:92:8a:4b:b9:2e:87:25:a1:b0:22:8d:f2:
                    a3:39:58:cb:25:77:43:98:55:59:b3:63:aa:77:ee:
                    77:7a:1c:c1:39:5a:29:86:0a:94:af:3f:64:c1:97:
                    d8:56:7a:4d:e1:9f:99:55:15:0b:96:5c:9d:ad:a5:
                    fe:7a:a6:11:74:6a:d5:b5:89:e7:2b:2d:a9:ca:f0:
                    d3:89:12:79:9e:33:10:dd:18:32:c1:0b:37:8d:17:
                    a1:b2:91:b6:de:f7:4c:ac:6e:3e:1e:1d:db:39:10:
                    ca:42:89:6f:23:7b:f3:6f:11:52:5d:75:bf:70:7c:
                    37:99:9f:5e:b1:b9:bf:63:8c:03:ea:32:3c:cd:14:
                    f3:9c:c6:9b:ad:f0:4c:1a:41:a7:a0:bb:de:33:56:
                    04:2b:13:cf:3b:98:0d:7c:20:31:c4:2d:07:ac:39:
                    00:a7:f3:70:d2:1b:f2:0f:9d:f2:28:ea:6e:43:4f:
                    bd:1a:ff:d7:90:f3:51:80:8f:e7:06:92:da:29:dd:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FA:83:94:E2:66:39:21:98:C0:C8:CE:C1:4D:FE:B1:5A:E8:22:85
            X509v3 Authority Key Identifier:
                keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:31:9f:d2:76:31:c3:03:3a:4f:aa:e1:8f:ee:25:55:58:b7:
         16:c8:3b:32:36:f6:cb:2e:ca:71:7b:60:cb:52:cb:ff:a6:b4:
         fc:dc:e3:58:ce:5e:3c:05:01:46:d2:d4:be:a1:91:d8:0e:51:
         40:2a:77:56:2f:8e:29:d1:c1:04:71:6b:7c:df:0a:ee:2a:df:
         7a:d5:06:d6:2a:2b:fc:e1:9e:d1:36:21:67:67:43:41:bd:14:
         c4:8a:4e:0e:9f:b8:fd:f1:88:69:09:d2:a2:2d:d0:28:8d:89:
         d0:eb:14:0f:33:b4:df:c6:3d:ce:58:bf:88:72:91:52:5b:64:
         17:2e:2f:f4:4f:9f:db:b4:61:52:ff:d0:eb:c4:3f:56:45:dc:
         b1:84:7e:fa:7d:b4:4d:f2:0c:23:96:a3:18:70:bf:40:3a:21:
         8d:e0:c0:fb:95:16:e2:05:f6:d5:c3:ba:b7:cc:a4:1b:8f:73:
         76:29:7a:c1:2f:8a:2f:18:b6:76:61:3f:ed:e9:99:8f:16:9f:
         f6:3a:20:44:39:bf:75:79:cb:4f:bf:20:8e:3f:ea:b0:64:79:
         06:7e:bd:3d:00:2d:01:30:9d:f1:b1:f0:5c:08:b9:5c:78:2b:
         41:8c:81:03:a9:c8:49:1d:ef:5f:47:63:7a:b5:9e:ef:3a:ca:
         f2:83:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:31 2026 by rpki-client