Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File:                     43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier:          f01uIvgdv9tMbdzXsye3Mp/0pzscbm5/IJGGVnUw5pk=
Subject key identifier:   35:00:E5:21:AA:65:87:CF:02:A9:78:36:95:67:34:A2:97:93:31:98
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer:       /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number:          59
Signing time:             Thu 23 Jul 2026 10:11:16 +0000
Manifest this update:     Thu 23 Jul 2026 10:11:16 +0000
Manifest next update:     Thu 30 Jul 2026 10:11:16 +0000
Files and hashes:         1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: DKSz1KcpaF2+K7vJ7XoyyFp/VPW1JRL4pN+WwSB5oVc=)
                          2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
                          rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
        Validity
            Not Before: Jul 23 10:11:16 2026 GMT
            Not After : Jul 30 10:11:16 2026 GMT
        Subject: CN=6a61e8c4-6255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:58:1b:d7:42:ea:1a:cf:68:1a:48:bc:e3:
                    30:15:f1:93:42:dc:1a:09:64:8d:f4:e6:dc:13:68:
                    eb:0f:c4:06:29:22:58:13:24:b9:e7:10:45:81:58:
                    73:aa:36:87:b9:ef:cd:08:49:99:92:cd:f5:c5:63:
                    99:b3:ce:5a:e2:89:95:6e:a3:6b:a8:c0:ed:90:9b:
                    25:d3:e1:48:cd:9f:aa:57:1e:e7:ac:01:d8:31:af:
                    c5:af:85:73:48:94:cd:cf:60:79:b1:4c:b7:a1:b6:
                    d5:7e:7b:00:98:c5:67:2f:8a:8d:78:93:fd:3d:41:
                    23:8d:57:35:5d:39:9f:76:62:b1:8a:84:11:48:c9:
                    d5:7d:1e:a1:6a:5c:37:15:dd:34:4a:e1:9d:ce:c6:
                    f6:10:fd:e2:13:cb:64:ef:d1:f4:0b:84:8c:8b:40:
                    4e:65:f5:e8:d6:aa:94:d6:31:88:a1:f7:25:2b:af:
                    f8:7e:6f:49:44:81:7f:6b:d4:b7:99:3d:f2:5d:10:
                    7d:37:fc:d2:bf:b7:a5:ca:91:ca:dc:b3:ca:a9:c5:
                    2b:9d:f8:84:51:af:9a:8b:d5:ad:b5:af:a3:71:76:
                    4a:74:0f:71:bd:31:00:20:5e:e1:50:05:d5:bf:c3:
                    91:aa:67:08:43:b1:d6:a6:69:0d:2d:0d:61:14:49:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:00:E5:21:AA:65:87:CF:02:A9:78:36:95:67:34:A2:97:93:31:98
            X509v3 Authority Key Identifier:
                keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:99:a1:54:41:50:0c:d6:ab:1e:16:05:38:75:a9:71:1f:
         55:d4:a0:47:dc:9d:72:0f:eb:04:2d:df:00:d2:a5:89:82:3b:
         05:8b:8f:62:ba:39:6b:0d:76:fb:22:19:ef:5a:e6:35:70:6d:
         c8:65:c0:ac:b0:4c:a7:14:fb:ec:67:09:b8:18:01:a1:d4:e5:
         a7:e2:ee:a4:19:33:09:08:08:04:c9:58:87:5b:4c:bd:08:1b:
         dd:f3:fb:6c:1c:36:9c:c8:cd:65:2b:2f:9d:71:44:f9:ef:04:
         9f:af:cf:85:dd:dd:01:a1:bd:71:fc:31:91:54:a8:34:6a:12:
         76:28:fc:d8:6f:f1:91:26:c7:8c:16:0a:8a:37:27:63:0b:47:
         be:0d:eb:15:e9:3c:c4:e5:f6:3f:2f:eb:2a:9e:53:6d:74:e2:
         2b:b9:b3:38:5f:7c:6e:6f:0a:5f:f2:ea:95:03:e3:ba:5c:0d:
         b7:cf:f4:25:ba:db:cc:b6:1f:6d:4e:70:49:12:a1:70:f3:e6:
         c9:77:6e:62:ac:57:f3:56:76:b6:6e:e3:cf:90:78:95:f2:50:
         f6:36:af:c0:43:7d:42:cd:81:2f:b2:9d:20:f8:bc:9e:3b:79:
         72:cf:40:81:ea:82:17:61:ea:3a:2c:5b:02:cf:2e:96:92:7f:
         8d:50:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:58:50 2026 by rpki-client