Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File:                     SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier:          SJ4LhhmtexRx2Xp0w1tmoCIVqj1Ba1LxKb4ZpeW5P6Y=
Subject key identifier:   D8:69:9D:FD:6A:33:62:CF:27:65:15:B7:0D:2F:08:17:02:20:14:CF
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer:       /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number:          0272
Signing time:             Thu 23 Jul 2026 03:10:38 +0000
Manifest this update:     Thu 23 Jul 2026 03:10:37 +0000
Manifest next update:     Thu 30 Jul 2026 03:10:37 +0000
Files and hashes:         1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: cP2xnxubp2JobK8YKkp23wX2a5beDMM3L+ISY6N3dt4=)
                          2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
                          rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
        Validity
            Not Before: Jul 23 03:10:37 2026 GMT
            Not After : Jul 30 03:10:37 2026 GMT
        Subject: CN=6a61862e-ff5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:84:be:22:57:59:c5:fc:e2:b5:e3:7b:3f:
                    dd:d0:3a:3f:91:f6:1f:5a:f5:05:03:63:97:2d:bb:
                    86:a3:98:ef:c5:bd:cf:7e:f2:76:a8:37:48:3f:17:
                    e1:fe:4a:34:09:77:87:c8:be:fc:54:e1:20:b1:3a:
                    69:91:30:ec:79:36:da:12:03:d7:b4:45:5d:02:a3:
                    1f:d0:41:26:c2:43:34:48:81:a4:59:0e:d4:72:12:
                    9b:e5:5b:b8:70:3e:ac:79:35:08:63:f8:17:b2:5a:
                    58:bb:ac:43:1a:54:48:72:04:00:7f:49:f9:db:41:
                    10:86:2d:d0:25:35:ff:32:df:6b:6d:4f:d3:7d:23:
                    ac:dc:2a:f1:9c:92:d8:11:70:1d:43:ff:87:da:2f:
                    4e:c4:1c:f1:39:20:ea:7c:8e:b7:cd:06:7c:7a:c2:
                    d8:e3:e3:03:8b:e3:8f:a6:ec:ef:9d:b0:03:b9:c7:
                    95:8a:89:b4:81:ab:cd:26:1b:85:ad:b8:e2:87:ba:
                    63:00:37:43:94:8c:a3:7a:e7:44:84:e0:f7:e2:b7:
                    88:db:a0:85:d9:bc:42:89:92:4c:ac:b5:5c:4b:4d:
                    05:02:44:7b:95:b7:90:41:84:8d:6f:22:56:1a:6f:
                    a9:7b:6f:2c:1d:64:1d:46:d6:f8:da:72:d3:8c:08:
                    bc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:69:9D:FD:6A:33:62:CF:27:65:15:B7:0D:2F:08:17:02:20:14:CF
            X509v3 Authority Key Identifier:
                keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:33:1a:12:ca:9f:20:d1:90:87:7f:7a:de:07:f3:28:09:5f:
         73:61:fa:ca:62:4c:ac:d4:fa:fb:c4:cc:90:93:7b:0f:56:44:
         ef:4a:1b:78:99:2f:86:9c:ff:65:4e:82:36:94:40:72:34:83:
         87:bb:6b:f1:0d:6b:6d:53:f8:a6:d2:6c:84:89:78:48:a7:dc:
         88:5e:c8:c1:7c:f6:37:0c:c7:72:c9:0d:c3:e8:76:dc:b5:76:
         28:77:ad:a1:10:aa:c6:ec:ad:f5:b7:36:e9:12:1c:37:df:39:
         b2:50:44:fb:7b:08:bc:a3:8c:66:e8:83:81:1f:71:03:bb:51:
         58:10:73:95:2a:3a:fd:c2:83:3d:8c:57:7d:35:a7:60:5f:46:
         68:98:7d:07:13:1d:64:28:47:7c:0d:5c:ee:c4:3c:0e:ae:14:
         bc:0e:dc:2b:3f:bd:7c:9f:f1:09:c6:a3:63:0c:f5:90:d8:ce:
         5b:8d:21:e0:37:3a:0a:cc:a9:84:c8:a7:3c:eb:fb:c9:82:34:
         b2:72:37:62:ca:e4:bc:0a:6f:03:03:7b:7b:e0:11:f6:72:44:
         23:a3:05:30:b6:47:6a:0f:14:52:0d:dc:80:58:d7:d1:5b:9a:
         eb:7a:23:af:13:9e:2b:b1:3a:a4:8e:3f:34:f9:5d:b2:38:98:
         fd:81:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:32 2026 by rpki-client