Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
File:                     -tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft (raw, json)
Hash identifier:          RJGyJ4SVsd02PkZoHQS9TwB7kAZGFbymF0toD/TY4T0=
Subject key identifier:   4B:ED:0E:E3:BE:89:07:4C:DD:CA:F0:9E:43:B0:2F:16:1B:52:D1:4F
Authority key identifier: FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
Certificate issuer:       /CN=A915E061/serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
Manifest number:          4B
Signing time:             Thu 23 Jul 2026 10:20:13 +0000
Manifest this update:     Thu 23 Jul 2026 10:20:12 +0000
Manifest next update:     Thu 30 Jul 2026 10:20:12 +0000
Files and hashes:         1: -tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl (hash: Tuf35U1SWU4qUgIPGUTL0kF0D7/ruKzGzkjaAtJh25E=)
                          2: CE992CA0138D11F198EDAC703A3D8C67.roa (hash: hnj4b5BrR1oDY8K6unPrq2mmpWra5ZUyWl2C0okWTrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E061, serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
        Validity
            Not Before: Jul 23 10:20:12 2026 GMT
            Not After : Jul 30 10:20:12 2026 GMT
        Subject: CN=6a61eadd-e5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:2f:13:af:89:3b:ca:ee:11:ab:66:f6:c0:
                    c1:cd:f7:18:85:02:41:0f:9a:d9:aa:62:99:b2:66:
                    66:71:e5:1f:8d:d1:b0:22:67:e5:30:0f:de:00:83:
                    23:c4:4c:fd:7e:28:e9:6f:93:91:7a:f2:0c:6b:2f:
                    eb:19:89:a5:63:10:d7:e6:e5:6d:fe:1e:e0:97:fd:
                    a5:57:a9:26:23:3b:81:38:8a:59:85:bf:68:52:88:
                    8b:ad:f4:94:96:09:27:dd:72:9f:ae:08:c7:11:8e:
                    6a:be:01:0b:45:35:d2:4e:a5:53:b9:f9:b6:9d:0a:
                    c8:85:87:b7:7f:fc:10:af:fd:ec:3b:97:f7:d1:74:
                    13:6f:a6:86:08:15:85:15:3a:a3:c0:a0:c7:ca:7b:
                    03:91:7e:5f:0e:6c:bc:fa:f4:6e:77:8e:18:ff:7f:
                    74:75:3d:3d:12:d2:81:ae:1a:84:7e:da:04:10:89:
                    ef:97:d0:42:f9:f8:e4:86:ff:76:08:52:60:5a:5c:
                    f2:21:7d:8a:8b:be:8a:3f:ed:5c:30:e3:4b:b6:34:
                    ae:06:39:a8:15:db:f0:44:17:ce:1f:90:53:1c:5e:
                    aa:0f:92:a0:da:42:37:ef:d3:99:23:f2:28:82:8f:
                    19:55:fd:19:ac:7d:f5:d8:cd:d4:30:1d:cc:e1:cf:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:0E:E3:BE:89:07:4C:DD:CA:F0:9E:43:B0:2F:16:1B:52:D1:4F
            X509v3 Authority Key Identifier:
                keyid:FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:19:c4:14:b7:af:55:88:09:64:f6:7d:42:59:a0:82:fb:50:
         c8:13:b1:f4:ef:42:31:af:5b:5b:ea:f7:69:ac:16:bf:1f:18:
         0c:4b:75:6c:5c:43:53:c1:08:98:5c:bc:93:40:06:0e:6b:c1:
         b7:09:45:c4:db:73:8d:8f:95:b1:e3:2a:17:41:24:a9:93:c5:
         a6:76:a1:b9:87:a9:cd:fb:7a:7d:70:4d:74:05:05:70:83:0a:
         e5:36:86:3a:75:96:ca:f5:b4:ea:32:e7:7b:0e:bb:d0:1b:64:
         15:a0:43:78:26:2b:ab:b7:f0:db:7d:71:ac:bf:88:15:2f:c9:
         98:0e:7f:ab:4b:36:8f:0a:ad:fa:97:62:f9:d1:68:0f:66:5f:
         de:9a:03:45:4d:4e:aa:c6:e1:58:23:3a:ae:8c:fa:49:48:20:
         81:78:b1:1e:ef:e4:73:94:62:1e:97:f5:af:ee:85:53:b1:63:
         4e:b6:df:d3:61:c4:df:3f:2d:c1:96:a1:3f:10:9f:9c:00:0d:
         d5:56:75:a7:c9:72:21:31:1a:be:51:2c:de:eb:5c:fd:ce:ac:
         3a:ca:da:b1:07:a5:20:ee:4f:3f:75:f2:a0:7c:53:2c:65:ea:
         40:68:af:b8:dd:8e:ea:42:93:c9:8d:f6:26:ef:2f:35:ce:2f:
         23:8a:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:39:25 2026 by rpki-client