Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
File:                     6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json)
Hash identifier:          Dcj8dmwCxnMYBnTAdm2zYAunbTpR4aGh10ALjo1hGy4=
Subject key identifier:   F4:AE:C8:7E:00:26:6D:31:19:4C:78:7F:6A:E7:E3:AF:97:CC:D9:55
Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Certificate issuer:       /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Certificate serial:       1BEC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
Manifest number:          1BE7
Signing time:             Wed 22 Jul 2026 16:20:02 +0000
Manifest this update:     Wed 22 Jul 2026 16:20:01 +0000
Manifest next update:     Wed 29 Jul 2026 16:20:01 +0000
Files and hashes:         1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: pIp3m/MfZsflfOXBMtkY1Romj+IiX0TtKKpzijCdUd8=)
                          2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: t80tcfh1wapFWD/hgCnkYH948NOtpZNQBi/Hg1KijJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7148 (0x1bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
        Validity
            Not Before: Jul 22 16:20:01 2026 GMT
            Not After : Jul 29 16:20:01 2026 GMT
        Subject: CN=6a60edb2-45aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:dd:33:bc:a1:cb:52:29:6c:8a:08:48:ad:
                    e9:34:aa:70:18:ad:47:c0:33:f8:75:27:75:d9:bf:
                    cd:d4:fc:f0:14:7c:f9:96:48:be:b7:e0:08:f9:50:
                    26:7e:f7:a5:17:c1:ab:cf:69:56:63:b0:7f:21:75:
                    20:a6:5f:71:56:6c:12:4d:87:42:49:fc:c1:4e:39:
                    47:ac:54:7a:0f:84:c0:eb:91:27:7e:bf:71:76:b0:
                    0d:85:85:15:b6:b0:ce:e8:1c:94:f3:54:79:4a:0b:
                    b1:9f:06:11:ba:3f:f5:b2:02:9a:9c:d4:1c:08:be:
                    8b:28:d7:1e:3c:9e:79:b8:eb:23:17:81:51:22:74:
                    86:14:8f:90:eb:f3:bf:d5:e9:44:5d:cf:8e:6e:cb:
                    a0:75:04:95:6a:44:21:99:9c:35:c3:ea:c5:6e:8e:
                    72:ad:5c:53:ce:43:cd:c8:12:5c:28:f0:bd:30:88:
                    2f:3f:1d:f8:77:df:67:0b:a6:84:c0:8e:31:fc:e4:
                    dd:48:ad:58:82:49:21:fa:4b:f4:01:35:3d:95:d7:
                    cd:36:be:8d:ae:6f:0f:53:74:15:3b:9b:8f:f2:e3:
                    66:3d:b5:8c:e5:71:39:3f:96:90:c0:ef:c7:38:43:
                    91:6e:df:84:38:8a:dc:4f:de:b9:60:1e:0a:8d:d7:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AE:C8:7E:00:26:6D:31:19:4C:78:7F:6A:E7:E3:AF:97:CC:D9:55
            X509v3 Authority Key Identifier:
                keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:33:ea:c0:d5:9f:48:63:d6:e6:87:a1:9b:b4:82:08:02:ea:
         4a:d1:cc:0f:50:15:d2:52:cb:73:f2:a5:41:f8:6a:07:06:ba:
         ad:33:55:62:e9:30:31:8e:25:65:74:f4:b9:22:3b:c7:1b:55:
         e4:9d:1a:59:7d:1b:2d:39:31:71:45:85:94:5d:cb:4b:4a:0e:
         fe:80:94:79:a8:b6:76:db:69:29:9c:15:10:13:05:1b:1c:1f:
         73:14:ee:99:5f:4e:bd:98:58:a1:cb:00:31:2a:61:f4:c8:ef:
         27:10:9f:78:58:7d:1e:ad:c9:c2:7f:5a:2e:65:84:e1:75:26:
         51:38:8a:90:fa:e6:d8:20:b8:db:a2:7b:97:78:27:28:fa:a5:
         26:4f:c5:c2:01:56:27:84:96:b0:67:48:a3:5e:3f:7a:f1:1c:
         98:27:d2:e0:0a:97:ef:49:db:ea:24:82:42:82:94:df:f3:18:
         10:98:75:e7:60:cc:08:6c:bb:f7:d1:22:17:2f:63:db:ed:7b:
         d6:c6:fd:51:ac:90:28:07:40:1d:8c:74:03:9f:21:55:3a:eb:
         d3:3c:de:87:35:d0:57:56:95:6d:8d:db:25:ba:14:60:6d:13:
         3c:28:4c:79:0d:de:dc:a4:71:c2:df:87:98:05:c8:11:87:87:
         08:1e:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:11 2026 by rpki-client