Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
File:                     A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json)
Hash identifier:          wbzVdL0QlLrRMk9R0lBohfq9WuRjynk5nTgmcGUL4i4=
Subject key identifier:   AF:76:4D:66:C9:57:58:A9:21:BF:EE:DE:53:6A:50:59:BC:4B:80:57
Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
Certificate issuer:       /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Certificate serial:       1709
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
Manifest number:          16F1
Signing time:             Wed 22 Jul 2026 16:46:39 +0000
Manifest this update:     Wed 22 Jul 2026 16:46:39 +0000
Manifest next update:     Wed 29 Jul 2026 16:46:39 +0000
Files and hashes:         1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: eFKKbHxFV2HSk8f1ebpmS7I3vgakaYw+IEhB8YldVbg=)
                          2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: vxWTeDCOHWuEhOaJAF4VGFM0DqtGWr26nr5q8brIPcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
                          rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5897 (0x1709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
        Validity
            Not Before: Jul 22 16:46:39 2026 GMT
            Not After : Jul 29 16:46:39 2026 GMT
        Subject: CN=6a60f3ef-5771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:93:cf:24:d0:92:e0:94:b5:d1:f0:4c:a4:
                    9f:c2:8b:2f:bf:34:96:50:8d:54:b8:dc:f0:a3:82:
                    7c:60:e9:43:ef:ce:70:4c:b7:d2:68:68:bc:68:ae:
                    f7:6a:0d:54:90:0e:ad:67:41:3e:2d:eb:7e:a1:c8:
                    5c:b3:f3:f4:b5:98:88:7b:1a:03:fa:aa:17:bc:11:
                    44:e7:24:d7:2c:a0:52:70:b0:90:40:d0:5c:d4:81:
                    69:96:33:a7:dd:a3:0e:a3:c8:9e:80:fe:45:d3:0e:
                    ef:df:db:bf:43:1e:a6:9a:40:cc:61:72:74:14:65:
                    45:9d:67:76:63:56:7d:f6:7c:7a:02:b2:61:b4:98:
                    04:a7:eb:76:be:fb:13:06:37:dc:72:60:83:d3:c7:
                    d2:bf:35:27:de:0b:74:22:85:f5:74:a7:ad:02:ec:
                    97:04:b1:db:62:cf:77:f2:10:0c:a3:d1:2c:a3:f9:
                    e3:42:12:e6:f6:6b:26:01:60:14:a1:e0:b5:64:68:
                    6e:ba:01:ad:f1:a3:12:2e:ee:da:b0:db:a8:c6:c7:
                    3b:1d:68:bd:a1:72:fb:44:e5:16:0f:8f:5a:5d:f8:
                    3a:77:08:e3:cc:12:53:05:2f:67:0c:75:cf:5c:4a:
                    4c:af:8d:06:d1:65:6d:5f:e2:19:96:ee:fc:2e:05:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:76:4D:66:C9:57:58:A9:21:BF:EE:DE:53:6A:50:59:BC:4B:80:57
            X509v3 Authority Key Identifier:
                keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:6c:21:ab:07:bd:dc:ad:9d:0e:aa:5a:c3:4e:86:ac:a2:
         e7:90:80:8c:2c:fc:24:13:dd:c2:f3:db:81:df:0e:5c:66:e5:
         36:ff:70:2e:0a:74:c1:96:71:4c:a8:42:1f:d8:04:15:8b:87:
         cf:b7:aa:25:f9:67:34:1b:af:43:8b:25:11:d8:09:74:34:aa:
         33:60:35:ca:ac:be:6a:c7:69:1b:db:cf:6e:a3:ec:7f:74:26:
         7a:a7:dc:1c:e7:fc:18:41:de:29:d5:65:37:b2:2b:f4:98:db:
         b7:f4:2f:c5:b9:a9:bd:e1:59:af:c2:50:39:94:62:55:6f:9a:
         22:f4:d5:dc:b3:64:9b:f2:34:27:da:08:b8:af:b5:21:51:55:
         53:32:74:e6:cd:7e:f4:05:37:52:2f:fc:38:fb:59:0a:0f:f9:
         ca:66:49:11:64:4c:11:9c:8e:37:18:a1:2d:73:c4:70:3f:e3:
         b2:58:44:0d:77:6d:4c:c3:43:8d:aa:65:83:fe:12:1b:93:7c:
         1e:44:55:52:c3:15:dc:95:a3:c8:b7:c3:e2:77:b2:49:be:4b:
         98:31:2e:ad:45:00:39:7c:fb:f7:04:33:4c:ee:f1:1c:6d:96:
         8c:80:c7:51:13:bc:1c:b1:77:19:e8:b1:ac:f6:0f:f8:ee:a3:
         97:21:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:46 2026 by rpki-client