Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
File:                     B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft (raw, json)
Hash identifier:          NZXKPcgtSOyyK9/3mTiDKRR7PQRuO028LWxIybrbudc=
Subject key identifier:   81:66:54:2E:48:9A:68:E1:53:0C:00:24:48:37:6B:A9:41:30:59:22
Authority key identifier: 07:92:28:FD:FA:2E:D5:30:0A:3F:69:18:96:A8:2B:E5:B2:16:EB:E6
Certificate issuer:       /CN=A9150064/serialNumber=079228FDFA2ED5300A3F691896A82BE5B216EBE6
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
Manifest number:          1C
Signing time:             Thu 23 Jul 2026 11:02:44 +0000
Manifest this update:     Thu 23 Jul 2026 11:02:44 +0000
Manifest next update:     Thu 30 Jul 2026 11:02:44 +0000
Files and hashes:         1: B5Io_fou1TAKP2kYlqgr5bIW6-Y.crl (hash: 9/k37/4IrA6cH4/oBH5EZMYhkioovrx3gyuJvaNoagk=)
                          2: 606B4F366BAA11F1B898E4FE7347A888.roa (hash: mCkDe+LQ4xS6iJMKnCjHdo+T5H+lGEomCZURvH9FzsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.crl
                          rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150064, serialNumber=079228FDFA2ED5300A3F691896A82BE5B216EBE6
        Validity
            Not Before: Jul 23 11:02:44 2026 GMT
            Not After : Jul 30 11:02:44 2026 GMT
        Subject: CN=6a61f4d4-bf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:40:bb:65:7c:6b:98:7d:df:1a:f6:51:09:
                    b2:d6:f2:f4:09:c7:2f:e3:ab:b8:17:18:1e:26:22:
                    b8:39:f5:54:5c:3f:3e:d0:1d:91:1f:50:20:c0:60:
                    ba:0c:35:7e:9d:24:7b:81:b4:cd:5f:b0:60:39:a3:
                    ca:78:5a:0d:e3:13:9a:7b:37:24:6c:10:7e:15:0a:
                    3b:be:fd:d5:e6:d2:96:80:22:83:9d:b1:03:38:fd:
                    33:72:7e:d2:8f:8c:62:5a:bd:36:50:1f:3d:94:1b:
                    db:ab:30:8f:94:cd:d4:a8:c1:17:57:95:cc:4a:77:
                    30:de:b5:08:9d:7a:60:cf:e2:9b:6d:c7:2a:91:e8:
                    51:ab:de:bf:bc:4c:6a:73:05:25:f5:65:6c:ff:25:
                    12:47:6e:08:62:fe:29:77:9a:33:ad:3b:55:4d:7d:
                    a6:86:0c:09:3a:9b:d1:4b:0d:8d:59:89:b1:31:33:
                    77:af:12:fd:34:37:d5:6c:92:89:27:7b:dc:c2:d0:
                    d2:a3:69:40:51:91:05:04:73:8b:63:85:1d:c6:f0:
                    45:0d:4c:12:b2:0e:f5:80:33:46:20:0b:29:bc:f2:
                    0d:11:dc:61:c9:64:a3:90:ba:aa:01:08:96:a0:0c:
                    41:d6:63:91:6d:f6:03:58:d8:ed:da:d4:b9:c9:34:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:66:54:2E:48:9A:68:E1:53:0C:00:24:48:37:6B:A9:41:30:59:22
            X509v3 Authority Key Identifier:
                keyid:07:92:28:FD:FA:2E:D5:30:0A:3F:69:18:96:A8:2B:E5:B2:16:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:c4:8d:f1:07:6f:97:62:9e:21:a8:5d:7c:a1:08:b3:8c:
         9a:7c:bc:5f:42:45:85:af:68:3e:7e:a8:09:06:e7:f3:6e:59:
         fa:3a:ca:87:28:0d:56:15:3e:02:af:ce:c9:b2:4e:09:08:33:
         1b:a8:a0:f0:dc:5a:0b:b3:44:b2:76:37:6a:9e:29:f7:39:85:
         ce:db:67:36:68:a5:a0:4b:b2:14:1a:60:58:38:bd:51:1a:eb:
         02:32:28:40:2e:57:79:43:60:94:87:33:e1:d4:c7:3a:62:0e:
         a9:5a:25:2e:ff:03:12:3f:29:64:6d:81:de:0a:da:b4:88:f3:
         05:c3:71:21:f3:ed:07:76:e3:1a:cb:4d:d1:df:bb:37:eb:83:
         5b:80:fa:c5:60:52:a1:5d:ee:76:2f:58:29:f8:8f:0e:89:82:
         a0:68:3f:df:ec:8c:ae:ad:e5:0e:ff:58:91:3a:6d:d8:f9:f0:
         ed:17:f4:b7:dd:14:9c:91:49:82:93:f4:b1:e9:b4:6c:df:e2:
         a9:de:89:3e:5c:cf:1e:e2:06:40:5e:ad:52:79:eb:72:8b:67:
         4a:24:f6:17:91:88:0a:a1:ee:15:4f:6f:b6:a2:0a:20:82:90:
         a1:8e:83:be:50:6e:fa:9e:c8:a3:0d:05:52:75:4a:e3:3e:86:
         1b:d2:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:32 2026 by rpki-client