Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
File:                     Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json)
Hash identifier:          64iAs6p7DajqbIouahLL/zlKMqfxafxk2hp5nyU9kAk=
Subject key identifier:   0F:E2:68:53:35:42:38:43:82:EA:8B:67:2F:74:21:7E:9F:C7:1E:DC
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Certificate issuer:       /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial:       038C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
Manifest number:          0374
Signing time:             Thu 23 Jul 2026 01:50:21 +0000
Manifest this update:     Thu 23 Jul 2026 01:50:20 +0000
Manifest next update:     Thu 30 Jul 2026 01:50:20 +0000
Files and hashes:         1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: x+DujUx226O3GGWxjZt2jfhGIw9TEE/PX9/wCQXwjsI=)
                          2: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: HnjYrtY3E3y66u9OYYw0jwmzfB6TsIIFqCKD/rlx8vE=)
                          3: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: jTIvbVyfBLzCwFhD7kHQgV+cFcm0Ml95zgedo0LbL/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
        Validity
            Not Before: Jul 23 01:50:20 2026 GMT
            Not After : Jul 30 01:50:20 2026 GMT
        Subject: CN=6a61735d-d48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:7a:2b:02:77:57:f8:84:8a:fd:c6:c8:20:
                    34:db:35:17:d5:54:6f:b2:16:19:93:c0:08:d5:40:
                    85:3f:02:e2:25:57:b5:a2:74:7e:52:d6:0c:be:e2:
                    98:83:b0:e9:c4:72:1e:7c:b2:43:58:a6:6d:07:e3:
                    b3:e6:bf:e1:e4:5f:1a:63:7c:f9:07:7d:45:d2:52:
                    69:27:50:d0:f8:c2:46:3e:c4:15:4f:47:be:2c:37:
                    09:49:a2:b6:c3:6a:47:e5:87:72:d3:ab:29:0f:b3:
                    ae:9b:ac:34:a6:7a:51:b6:e7:f5:3c:22:66:28:7e:
                    a9:28:fa:6a:2a:90:6a:48:d5:16:26:2c:a6:b9:f9:
                    50:71:28:ff:dc:48:96:83:4b:d0:7f:e3:84:bd:f1:
                    94:69:2d:0b:83:3f:50:c8:0b:43:07:82:78:0d:74:
                    a7:77:bf:8d:52:57:95:6f:de:5d:ad:f0:a2:ea:00:
                    51:16:9c:aa:ff:29:75:6f:fa:f7:72:d7:ee:c2:2d:
                    79:f8:10:2e:39:2f:7c:2e:86:3b:e5:38:2b:7c:b0:
                    dc:39:c5:25:f2:52:f4:2e:20:77:22:b3:3c:63:06:
                    52:83:a6:36:4c:cf:48:87:90:26:db:12:3c:23:b2:
                    89:9f:6b:db:b2:5b:18:61:e0:1a:21:98:d8:f1:7f:
                    6f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E2:68:53:35:42:38:43:82:EA:8B:67:2F:74:21:7E:9F:C7:1E:DC
            X509v3 Authority Key Identifier:
                keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:48:4e:d2:86:b6:1a:2e:bd:70:b8:4f:ce:b6:9a:a1:e6:
         30:43:23:a1:42:66:48:77:12:d2:09:a5:a1:ad:4a:a1:95:aa:
         1d:4d:6a:06:b3:a2:ff:da:c8:f7:b2:9a:e5:69:55:01:2f:ba:
         75:f0:31:2e:b6:85:bb:c1:c4:bf:b8:11:8a:92:d5:09:17:97:
         52:a2:48:bc:14:ef:b0:01:58:2b:72:01:cc:07:9a:0b:0e:b5:
         25:9a:92:fb:06:1c:7a:4f:31:5f:fd:ed:13:51:8e:7b:f5:10:
         d8:23:66:2c:fe:23:a9:04:ea:63:c7:6e:2f:b1:12:af:ad:ea:
         89:99:2b:c9:9d:1a:10:81:83:dd:b0:a2:9c:d8:47:01:ed:23:
         c2:5a:b2:63:78:e6:97:e9:3a:35:f6:df:ce:09:ad:a0:6a:2b:
         7c:70:f4:c3:71:9a:97:33:65:83:dc:3f:5b:7c:4c:b0:17:55:
         66:c0:bf:61:a3:74:23:a3:1d:0d:ab:44:d6:0b:81:73:9f:f0:
         45:68:6c:59:6d:54:f5:70:c2:d7:b1:d1:83:37:be:45:66:96:
         d4:6c:fb:6a:0d:46:0d:cb:7a:ba:60:c8:c3:b2:92:38:c7:96:
         51:b4:c3:d2:96:c2:d6:2c:c6:f5:30:24:4c:46:c5:7a:41:cc:
         4f:2e:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:15 2026 by rpki-client