Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
File:                     znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json)
Hash identifier:          KhFVcfPQx9nNbSVrK5k6vIlAAzIe6rOIM1lcyIXnf1E=
Subject key identifier:   8B:26:EB:B9:D9:B2:6F:D4:40:E3:DF:BA:DF:83:24:13:70:BF:F1:0E
Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
Certificate issuer:       /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
Manifest number:          A4
Signing time:             Thu 23 Jul 2026 09:05:48 +0000
Manifest this update:     Thu 23 Jul 2026 09:05:47 +0000
Manifest next update:     Thu 30 Jul 2026 09:05:47 +0000
Files and hashes:         1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: JNHdlOdQzjZtJ5nk9JSYrXtg0i/JWKPBlbNZop96p/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
                          rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
        Validity
            Not Before: Jul 23 09:05:47 2026 GMT
            Not After : Jul 30 09:05:47 2026 GMT
        Subject: CN=6a61d96b-7fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:a8:77:a6:60:1d:69:b4:5e:b1:10:34:da:
                    81:05:00:49:ed:62:3d:06:2b:81:27:2a:f5:bf:62:
                    a2:a7:2d:2d:2b:10:f3:d0:f1:c0:1b:d7:28:1e:bc:
                    be:11:1b:85:f7:35:d1:c6:41:dc:f6:ed:d3:2d:fa:
                    a5:27:cd:c6:49:f0:a1:25:18:5d:e0:c7:1c:4a:6d:
                    78:da:d3:52:63:f0:e2:35:de:01:6a:3e:8c:ea:76:
                    c0:4d:0f:65:ce:10:78:00:d2:e4:c4:ee:99:59:bc:
                    23:0e:60:b7:a6:5f:c9:d9:50:38:ba:07:0a:4d:07:
                    1f:be:fb:33:75:ef:c1:98:9b:ec:3b:13:dd:d7:a7:
                    69:15:f3:9e:de:67:a9:bd:12:29:2b:28:f9:63:13:
                    dd:ea:74:a3:7d:53:36:7a:73:51:93:6a:c6:e2:45:
                    9f:c2:d1:8e:e5:7a:19:76:b9:d9:ed:ae:3e:a2:46:
                    b5:91:90:2b:2e:df:f1:c0:48:93:bb:75:e2:21:1d:
                    c4:c7:5a:f2:bc:5b:6a:6e:48:e1:12:fc:7c:cb:23:
                    c3:c9:26:c4:e9:e4:91:21:c3:fd:96:ee:66:08:b0:
                    a8:54:c7:11:83:83:a5:6c:b7:c1:b8:03:78:8a:d7:
                    f3:3d:a5:a6:c8:79:84:28:2f:5f:18:22:38:07:4f:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:26:EB:B9:D9:B2:6F:D4:40:E3:DF:BA:DF:83:24:13:70:BF:F1:0E
            X509v3 Authority Key Identifier:
                keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:ee:d1:61:e5:8d:49:c2:25:5e:44:14:ae:e5:06:48:2c:
         bb:95:0c:fd:2d:16:98:87:49:aa:2d:8b:2c:41:b3:e7:cd:ce:
         a1:2a:81:7e:d8:55:3b:d2:e5:1f:92:cf:ea:69:99:de:d4:d3:
         71:af:31:cf:19:15:61:1c:ae:70:d0:69:35:f1:b5:c6:4f:22:
         14:5e:e9:03:cb:8e:94:e9:37:3d:e7:0d:de:c4:1e:c4:b1:1b:
         d8:df:74:71:50:b6:35:2d:db:d4:01:e7:74:c1:3f:eb:89:ba:
         b7:bf:80:23:4e:96:5d:99:fc:fb:94:1a:ed:ec:ac:46:db:f2:
         b0:c1:d7:7b:ac:42:21:62:ba:2f:d7:80:1a:16:f3:3d:b0:ac:
         00:7d:88:a1:8a:e1:29:63:77:df:42:e2:7c:ab:1d:bd:67:c8:
         dc:e9:8a:d4:f7:4a:62:c4:d0:77:37:e2:e4:cd:9a:8d:67:81:
         f2:5b:e6:0b:6f:17:33:af:3a:3b:af:f8:c5:47:67:4b:c6:4a:
         3a:f4:2c:8d:05:2c:97:44:6c:1f:d1:c0:c9:d1:19:16:83:65:
         e7:d4:96:db:28:a1:84:6c:7d:c6:f3:f1:1e:c1:2d:ca:45:3c:
         4d:68:b6:ec:85:15:a2:91:7c:38:d6:50:c7:52:df:2c:b3:a3:
         12:38:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:43 2026 by rpki-client