Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
File:                     8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json)
Hash identifier:          L7Bz7RFUvC5dG5tdHaoQ1WFWPanE2sv1dbOWATfg3+o=
Subject key identifier:   73:AF:92:44:3A:CE:EF:65:EE:88:3A:07:49:F8:91:B8:6C:D4:64:26
Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
Certificate issuer:       /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
Manifest number:          BC
Signing time:             Thu 23 Jul 2026 08:53:44 +0000
Manifest this update:     Thu 23 Jul 2026 08:53:43 +0000
Manifest next update:     Thu 30 Jul 2026 08:53:43 +0000
Files and hashes:         1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: KghlI18FrESpN3rP1HByeE3sechu1UFzI9nUuIBbekU=)
                          2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: fSYltpxk2u14lPvWhCXB9QKuMuDj8l4c6pcDEmZNiXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
                          rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
        Validity
            Not Before: Jul 23 08:53:43 2026 GMT
            Not After : Jul 30 08:53:43 2026 GMT
        Subject: CN=6a61d698-d943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:39:32:0d:bf:82:c3:38:59:ad:bc:b3:92:
                    8f:33:25:95:4b:7b:44:8b:5a:73:e5:42:c8:f1:3f:
                    86:5b:2e:11:56:c3:5c:f8:9f:85:e4:b4:9b:69:b8:
                    31:3e:a0:b8:47:73:37:f0:04:88:7d:1f:aa:67:d5:
                    65:b7:68:82:d5:93:7c:d3:5c:93:92:71:19:99:7a:
                    db:2c:f8:0f:b9:92:a1:25:fe:7d:ed:1d:0f:d0:30:
                    6e:58:55:99:83:fb:ce:c8:17:86:04:07:7d:c1:49:
                    dd:be:85:4a:71:51:ba:f4:a6:80:e2:2a:de:75:55:
                    1d:58:35:59:73:76:04:50:db:17:21:47:8b:2a:b2:
                    08:62:be:05:37:e8:fa:56:9c:ff:5e:2c:ff:53:17:
                    cb:d0:27:82:38:84:8c:d2:48:37:73:f1:ff:96:52:
                    6d:cc:47:39:2d:ad:5e:bb:0b:d1:70:e5:9e:6f:a3:
                    0f:89:b0:21:5f:5c:4b:a2:e7:55:bf:aa:08:4f:ff:
                    0c:0a:bc:38:cf:16:f9:34:65:6d:bf:64:71:65:93:
                    42:43:9c:ee:a3:e1:fa:2d:5f:9d:26:0a:bc:da:bc:
                    5f:56:28:25:c7:24:ee:50:d8:38:07:78:86:3a:e5:
                    1c:af:9d:38:7f:aa:e5:a2:d3:80:10:04:a8:73:c1:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AF:92:44:3A:CE:EF:65:EE:88:3A:07:49:F8:91:B8:6C:D4:64:26
            X509v3 Authority Key Identifier:
                keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:77:4f:12:17:69:f7:a0:ba:0d:6e:25:de:a1:69:01:e7:f7:
         93:76:6f:9c:6b:6b:9e:2c:f5:c4:16:03:73:2d:41:00:21:7c:
         fc:dc:47:9b:25:70:37:a7:b1:64:a5:96:dd:40:ee:76:80:ea:
         66:a4:1b:5f:c4:ab:cb:b0:54:89:ca:31:3c:4b:da:7d:a5:a0:
         29:2a:aa:46:3f:83:2d:58:2c:81:bf:7a:9e:47:db:05:ad:50:
         ce:9c:0c:9f:28:d8:47:35:39:50:5f:f0:6d:19:c7:5b:ec:c0:
         46:40:21:f8:31:d7:88:4c:72:a8:0c:87:d1:17:4a:7e:5a:fc:
         20:00:b0:95:3d:15:1c:f8:02:91:da:9b:42:04:05:4d:b1:91:
         cf:90:5d:3d:54:d5:e3:4e:dd:9a:8f:c9:61:1e:58:ba:6e:e9:
         fd:58:43:45:06:24:ac:d4:a6:c5:b3:fb:11:d6:fd:9a:61:0b:
         2c:c9:18:32:89:1e:7c:01:76:e2:a1:11:88:de:a9:8d:03:b8:
         38:27:fc:be:df:cf:15:79:fb:b9:29:3e:19:b9:29:41:2f:09:
         5a:0a:20:3e:23:2a:ff:12:05:d1:af:e7:63:5f:6c:6e:b0:96:
         2b:f7:93:fc:b1:39:da:15:77:5f:4f:5a:5a:ed:e6:2a:9a:b5:
         fd:68:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:55 2026 by rpki-client