Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File:                     1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier:          2hKMIABGHLtfxytt4KWA3Dtnc6PnqHUqkdRp1bEiXvg=
Subject key identifier:   D3:B8:1F:A5:1E:25:3E:EE:08:E0:AB:4A:FE:E3:83:B0:E3:12:78:BF
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer:       /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number:          016F
Signing time:             Thu 23 Jul 2026 06:25:47 +0000
Manifest this update:     Thu 23 Jul 2026 06:25:46 +0000
Manifest next update:     Thu 30 Jul 2026 06:25:46 +0000
Files and hashes:         1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: QjkJ12dPC/+wsAK6+IIV/fv/bqOKm9gAL4zFooBD/YA=)
                          2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: XYcxvXsIZf8Fuuj3PCiap/sXv4cR9z5b00T5aM5YJhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
                          rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
        Validity
            Not Before: Jul 23 06:25:46 2026 GMT
            Not After : Jul 30 06:25:46 2026 GMT
        Subject: CN=6a61b3ea-45fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:50:26:6a:78:1e:28:1e:87:8d:b0:03:f0:
                    5b:c5:b0:90:15:5e:20:be:ec:d5:e8:dc:8c:7e:d5:
                    c3:ae:55:35:ec:b1:f7:6b:7f:2c:b1:31:21:59:cd:
                    ed:97:f3:54:d4:c1:76:d4:f4:2e:c8:67:5e:b5:25:
                    df:16:5f:8e:32:92:4f:21:11:44:b5:70:89:7a:0a:
                    61:68:47:1c:21:d0:78:9f:2a:3a:69:03:43:54:cc:
                    ed:2d:f7:90:bd:97:b6:f9:f7:9a:c5:da:d0:5f:a8:
                    6b:15:9f:0d:f9:c5:b5:bd:a3:69:47:c6:d8:22:bf:
                    9c:5e:0e:46:0d:bc:a6:b7:dd:13:b4:59:8e:48:b7:
                    37:94:1a:7d:9b:d2:be:be:6c:e0:bf:0a:92:da:30:
                    75:5b:70:3e:76:15:8a:7e:90:8e:e4:ab:7e:06:b6:
                    05:ee:94:0f:c9:0a:88:e7:0a:15:bb:bb:ea:77:e0:
                    fa:b6:95:2a:ef:96:e7:3e:cc:bf:83:e1:69:80:3f:
                    22:b8:26:dc:62:e1:b3:81:38:f8:bc:9c:0c:8c:ac:
                    31:da:8d:77:ec:b8:35:4f:45:41:1b:00:cd:64:63:
                    76:75:2d:53:19:a6:12:1c:3e:10:0b:4f:26:f2:b6:
                    b0:c3:36:81:4e:ac:40:6f:9f:7a:8d:1a:24:6f:83:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B8:1F:A5:1E:25:3E:EE:08:E0:AB:4A:FE:E3:83:B0:E3:12:78:BF
            X509v3 Authority Key Identifier:
                keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:26:55:65:64:0f:bc:ea:28:cd:65:a5:19:92:1b:e3:b0:
         bf:35:c2:55:f9:f3:9a:27:3f:88:e3:c0:5d:e1:6d:96:91:4b:
         28:40:62:e9:0c:13:1e:97:95:57:39:c7:21:12:4b:dd:1f:81:
         ee:01:87:3d:e3:e9:f0:8d:5b:33:a7:1e:e9:62:7d:2a:64:82:
         35:94:d0:c6:6b:28:86:79:82:70:7e:96:3d:ab:29:d0:96:d0:
         ff:aa:b7:8d:c5:49:32:36:bd:ab:5d:3e:7f:ff:17:a1:02:ce:
         21:02:8a:68:9d:af:31:e2:82:52:97:30:c7:00:03:6a:c4:6a:
         69:b8:bc:5a:6b:cf:43:30:9a:0d:4d:b9:b5:35:84:1f:2b:31:
         1f:64:e1:12:3c:1c:9a:77:53:e7:1e:e2:00:8b:bd:9c:5e:60:
         1c:f5:1c:a5:cc:38:81:93:a2:f8:7e:48:bc:01:f5:c4:15:da:
         3c:5a:61:79:44:52:48:1d:18:3a:73:e8:5f:17:58:43:34:d1:
         c9:42:1a:14:86:d4:8e:25:81:32:55:bd:6a:f3:9f:b5:e7:74:
         71:ee:00:10:bb:fb:18:40:6d:11:d5:ee:43:42:44:4a:ef:f3:
         9b:9a:50:f8:de:34:ea:14:f5:97:d2:cd:aa:cc:3d:7f:3a:46:
         4e:3c:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:36 2026 by rpki-client