Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File:                     eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier:          eYgWJz8COB9J7HSI+Jh36YW/VrcwcuY6fe7zfaEZY9E=
Subject key identifier:   C8:86:E4:5D:AE:A4:E6:80:AA:33:D5:70:19:C7:9D:D9:E7:26:FF:47
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number:          0856
Signing time:             Wed 22 Jul 2026 21:33:40 +0000
Manifest this update:     Wed 22 Jul 2026 21:33:39 +0000
Manifest next update:     Wed 29 Jul 2026 21:33:39 +0000
Files and hashes:         1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: ofkR1AToz+njtlHbhH26dDx/ef0VKZRAZxjEFW/RNRE=)
                          2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: U6Px3+2UpSkVxzu/Qr8RX6ggWXcyYRot1wBwG96ExR8=)
                          3: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: OEyVTkl1WhphFhFfhyBKXGd5r6CJfOuj4maOaVwdIhk=)
                          4: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: /7IYWI/di3kJsTIoYEmQknNBsesmz2VOwgqLTQpmC0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
                          rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Jul 22 21:33:39 2026 GMT
            Not After : Jul 29 21:33:39 2026 GMT
        Subject: CN=6a613734-2f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:71:54:a9:ad:00:a6:8c:02:70:82:1a:86:
                    0f:e1:68:af:34:b0:6e:6c:47:04:95:37:bc:a4:6c:
                    bb:f3:ce:b2:16:05:95:b3:79:ac:e7:b3:24:20:59:
                    e7:62:9a:09:a2:37:34:21:8a:fc:ec:8b:66:93:85:
                    4a:7a:90:f4:0f:18:e0:fc:ec:75:70:5f:76:a1:1e:
                    90:1b:cf:26:47:d1:a6:2e:31:4f:61:ae:9d:0a:8e:
                    b6:79:e4:9a:7c:23:9d:be:74:09:19:ec:ba:fa:11:
                    b2:30:81:49:1e:77:7b:ed:51:f3:26:b8:20:12:2f:
                    2b:be:e1:4f:0f:27:f7:de:59:21:fd:db:52:06:fc:
                    36:46:ea:74:3b:8a:ac:c6:88:61:38:1b:e8:80:d5:
                    1e:ee:e0:b1:6b:b9:8c:9e:9a:3c:61:f2:08:86:0f:
                    38:4a:1d:71:97:09:02:f2:90:64:25:a6:6e:0a:59:
                    af:8c:ad:16:2e:4c:d0:9f:be:e0:53:57:0e:00:47:
                    8e:3e:28:45:dc:45:da:86:33:68:5a:86:85:ba:8a:
                    ee:7d:d2:44:f0:97:08:0a:3c:5d:03:99:ff:d0:b2:
                    39:1c:87:83:de:fd:b0:98:56:d7:91:8c:3d:85:86:
                    3c:8c:43:d2:a8:7f:31:4d:31:e6:8a:ee:3d:7d:c5:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:E4:5D:AE:A4:E6:80:AA:33:D5:70:19:C7:9D:D9:E7:26:FF:47
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:75:1b:f4:83:15:b0:76:dd:58:5e:40:2f:ff:c8:e8:fa:45:
         64:c1:32:b0:46:0c:24:90:25:cb:b8:6c:12:67:e9:2c:08:6b:
         d6:ff:d9:f8:02:b9:17:11:94:0c:b8:d4:fd:06:ef:04:e9:68:
         42:3c:ad:9f:1a:d0:30:2b:c4:a3:50:24:a0:a7:f7:15:cb:d6:
         a4:1e:66:4f:9a:09:97:81:2b:46:76:99:f2:0c:a4:34:9c:07:
         17:3a:89:1b:9c:fc:90:a8:7d:54:e6:7d:d2:89:b8:ca:1b:25:
         d5:85:2a:09:f1:2f:c3:d5:50:04:c5:90:d6:d5:c4:d4:79:ad:
         8a:4a:bc:7e:b2:95:10:a8:74:07:59:d4:d3:4a:2b:40:66:c1:
         c2:f7:9c:6c:fa:88:05:f2:d3:13:c6:09:a7:59:23:d6:7e:db:
         7d:d2:67:12:96:42:a0:93:56:cb:08:2f:a1:4b:47:6c:d3:5d:
         74:d1:93:46:42:98:3a:8b:8c:5b:18:a3:e6:32:24:e5:3e:f0:
         e9:bf:30:a2:97:4e:13:f2:f7:f7:d9:37:14:b6:5e:81:af:1f:
         e6:4d:c5:0f:66:6c:85:7c:38:68:1e:e1:ac:8e:16:dc:49:6a:
         d5:27:57:ac:99:01:5f:cc:bb:eb:b4:39:94:fe:ac:86:1c:0d:
         9f:b8:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:48 2026 by rpki-client