Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File:                     39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier:          SdUKQfoihnoJrE56lqzjg3WI8YVhKOkaeaqJqz7lk2Q=
Subject key identifier:   77:91:DB:C2:4B:F1:3B:15:76:0A:35:0C:1E:09:B5:3A:DD:47:47:17
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0438
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number:          0407
Signing time:             Thu 23 Jul 2026 01:26:26 +0000
Manifest this update:     Thu 23 Jul 2026 01:26:25 +0000
Manifest next update:     Thu 30 Jul 2026 01:26:25 +0000
Files and hashes:         1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: Wgz7+JRvyjw7H/gteaGVuDbr4ljKGIdXcwYjFSocDVI=)
                          2: A07DBC62B03911F083346261C4F9AE02.roa (hash: uzzVjU0vlLViUYzZlwO7ZWK54M/pUBuzu8meQ5zLjAM=)
                          3: 3CDB97F6B03911F09A54BE60C4F9AE02.roa (hash: ub1/IpzR6a2eFu+k1eQE363sBtNpdMipe2SlnT7hz+w=)
                          4: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: GNz5xk64wnfx/4OAoVC+qjb47jUMVl6izW1qjc9nwnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Jul 23 01:26:25 2026 GMT
            Not After : Jul 30 01:26:25 2026 GMT
        Subject: CN=6a616dc1-df55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:d9:ea:8e:19:67:92:12:00:53:c0:ad:b7:
                    9d:9d:f0:b5:bb:99:34:aa:8b:9d:bb:9e:0c:75:90:
                    d1:40:d9:af:cf:0a:55:42:54:24:d7:d6:77:cf:fb:
                    f1:27:d0:5c:9e:71:eb:a5:03:00:57:d6:24:9f:74:
                    86:98:c7:92:97:62:fa:e8:c0:42:31:4a:dc:1b:cd:
                    5d:ec:50:3b:3b:1b:30:81:70:3b:db:a8:c1:93:69:
                    c8:c3:db:a6:ff:9e:87:60:a1:19:0f:42:1d:34:7c:
                    ea:1e:0c:4d:99:a6:6b:9e:6a:5b:43:9b:a4:47:9c:
                    ee:bd:2e:13:55:9c:84:0c:29:24:2a:ea:bb:0e:d4:
                    9a:a0:9a:15:bf:9b:e2:34:4e:ff:19:e0:93:19:c7:
                    79:95:db:39:1a:9d:6f:32:6a:36:a0:7a:9d:2c:13:
                    a9:56:5e:f2:68:7c:36:76:f2:b2:25:52:e8:28:7b:
                    38:08:12:b2:17:8a:c2:a9:98:89:5d:c8:16:4c:5a:
                    66:21:aa:2b:59:18:bc:3d:27:50:b5:17:70:0e:e0:
                    2e:2e:3b:98:83:b9:8e:27:b0:6d:e0:0e:02:86:79:
                    a0:5e:d6:8d:a8:09:e6:a2:2b:b6:76:8c:cc:d7:cd:
                    46:7d:0c:02:aa:92:25:94:28:7f:10:f5:47:42:3e:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:91:DB:C2:4B:F1:3B:15:76:0A:35:0C:1E:09:B5:3A:DD:47:47:17
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:9d:af:39:e7:29:47:57:ef:63:7f:46:c2:e7:1f:50:77:
         11:00:06:1b:37:73:cd:15:4d:f4:08:4f:61:81:cf:37:cc:c3:
         de:de:bd:c8:16:b4:84:c6:78:c4:bc:eb:6b:1c:37:08:bc:d2:
         d8:fc:fa:d0:cb:ed:aa:02:22:db:52:19:03:a5:84:fc:9c:86:
         9f:85:0e:9d:8b:e9:6c:c5:18:40:aa:cf:14:55:90:a2:1f:08:
         c7:29:6b:ed:a2:66:ba:5a:e8:08:e4:7c:36:7b:5a:13:29:bc:
         5d:c7:e4:9b:ee:0e:b8:b6:fc:59:f4:35:b1:6b:8d:bd:63:b2:
         5f:1d:3e:0a:2c:b0:21:5b:22:c5:aa:9c:69:61:3f:21:da:b6:
         4e:47:87:a2:ef:61:85:2a:a8:3c:50:35:97:99:0e:67:47:85:
         03:6d:7d:4b:be:ec:ef:f6:54:77:6b:50:90:38:37:fa:c0:a2:
         06:82:c5:b8:46:f9:7d:d3:71:9b:45:30:53:be:c1:d1:10:df:
         7a:36:07:90:37:fa:4b:84:59:95:f7:c7:3a:80:a1:36:1a:3c:
         92:bf:ae:64:f6:44:32:43:3a:dc:a0:9a:92:71:67:a7:82:ab:
         ea:67:62:c4:e2:8a:4b:e2:f2:82:c9:4d:83:39:96:01:bd:07:
         e5:c4:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:08 2026 by rpki-client