Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File:                     sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier:          7AV0y1GhM2/6aqd4SY7zIjicaev0hJDsruTzc1K8ICc=
Subject key identifier:   9C:35:AF:6C:E6:38:BF:2A:0F:C7:C8:14:F9:B0:10:57:90:8C:EB:8C
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer:       /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial:       0D50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number:          0D38
Signing time:             Wed 22 Jul 2026 18:22:41 +0000
Manifest this update:     Wed 22 Jul 2026 18:22:40 +0000
Manifest next update:     Wed 29 Jul 2026 18:22:40 +0000
Files and hashes:         1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: g/UtfeMYvKmx49tJrRNgKSht3NverU3EAFkamOSJBPE=)
                          2: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=)
                          3: 5952728A100E11F18DCC78E3113D8C67.roa (hash: 4DhZatB6LL4lAu55O0tTy0XQ+dQbCozW4+CmbLY+jDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
                          rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3408 (0xd50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
        Validity
            Not Before: Jul 22 18:22:40 2026 GMT
            Not After : Jul 29 18:22:40 2026 GMT
        Subject: CN=6a610a70-ae9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3d:f3:95:c1:ea:1e:be:47:6d:6c:a1:47:c8:
                    a0:1e:f4:0f:8e:32:e4:dd:89:b2:2b:0f:23:e9:ea:
                    a1:dc:35:8e:08:3e:bb:76:12:12:ae:5e:da:36:07:
                    33:59:08:69:08:ef:72:c2:18:10:1a:21:ca:b9:7a:
                    fa:5f:72:06:fb:7f:f1:77:3e:8f:48:ad:04:5a:b4:
                    bf:3f:c6:3f:95:47:58:98:3b:43:88:11:46:0b:24:
                    dd:a3:41:07:12:7b:29:a8:2d:81:00:d2:c3:22:34:
                    82:b3:e7:64:31:1e:71:2d:28:d9:45:29:77:76:1d:
                    1e:b2:14:5b:7e:12:81:40:06:2f:d9:0f:37:5d:d0:
                    b5:f9:ab:d9:3a:4f:01:e5:e0:4a:7a:56:e8:8e:e7:
                    21:3e:d5:ee:39:c1:ef:62:e3:81:5d:dd:6f:94:3f:
                    6d:41:62:52:bc:89:c0:8e:ed:05:31:d4:a2:b4:bf:
                    5e:73:57:3a:1e:69:ec:01:ab:a6:ae:b9:6f:7d:5f:
                    ef:eb:e2:6a:7e:ed:8d:1f:ae:68:91:56:61:8e:02:
                    ae:38:6f:ed:d4:6b:46:27:65:b2:d7:02:8f:cc:97:
                    1c:dd:44:24:2b:6c:2e:3e:19:0e:b7:96:a4:47:59:
                    cd:23:fb:7b:ef:03:3b:f1:25:6e:cf:c8:04:31:66:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:AF:6C:E6:38:BF:2A:0F:C7:C8:14:F9:B0:10:57:90:8C:EB:8C
            X509v3 Authority Key Identifier:
                keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:14:57:c3:33:e7:37:60:2e:67:d1:de:5f:1a:fb:b5:76:
         9c:f2:0f:47:eb:92:37:f5:6b:f1:ab:fd:a6:4a:8c:0e:cc:2b:
         47:fe:08:5a:37:bd:49:a1:4c:e2:b3:97:e2:d2:91:a0:d9:d9:
         33:b0:61:c1:e4:07:ea:d0:2e:b9:b6:12:50:a5:ca:0b:0b:e2:
         da:37:6c:89:49:47:45:55:1b:bf:e8:87:6e:bc:4f:4e:8f:ac:
         5f:17:e8:d0:61:0a:6a:3a:54:be:ef:0c:ea:22:2f:92:3b:ef:
         cc:c3:96:2d:2b:21:0f:fa:90:bf:c6:e2:77:22:b9:44:86:8a:
         73:11:3a:d6:e2:42:94:bb:34:a7:89:88:1a:46:76:b8:94:9d:
         1d:57:47:b9:67:94:f2:c0:de:77:f7:55:12:d0:30:8e:71:a1:
         ec:19:4e:17:df:f1:62:6e:13:9b:e1:44:c4:bd:af:03:19:3a:
         4a:2f:7e:8c:d9:50:41:4a:09:3e:dc:fd:73:c4:14:33:59:2f:
         6f:1c:1f:3e:f0:75:22:bf:ec:09:b2:82:ec:aa:fb:f6:58:cf:
         a7:1a:c4:c6:4f:d9:1f:7e:04:37:60:59:d9:75:83:3f:8e:d0:
         82:72:da:4b:bc:15:50:8b:c6:67:dd:c3:f6:1a:47:84:ad:57:
         7b:e8:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:17 2026 by rpki-client