Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File:                     u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier:          rNDMoDTkIp6pLGWJp5r/E+Qjb7C+Tq5tiwNnY2I0JSk=
Subject key identifier:   BC:85:77:8D:6D:6E:96:9D:4E:C4:10:85:81:26:8D:A0:72:9E:68:00
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer:       /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial:       0CF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number:          0CE6
Signing time:             Wed 22 Jul 2026 18:39:26 +0000
Manifest this update:     Wed 22 Jul 2026 18:39:26 +0000
Manifest next update:     Wed 29 Jul 2026 18:39:26 +0000
Files and hashes:         1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: eX+nIx4DTFj0wZ7vDNTLhZ10WuBiIz5PVEpAEX81ens=)
                          2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: 1c7oqXTwOjBxpWnURCwd9ROwsARCXBKMI1YgV6KP1z4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3314 (0xcf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
        Validity
            Not Before: Jul 22 18:39:26 2026 GMT
            Not After : Jul 29 18:39:26 2026 GMT
        Subject: CN=6a610e5e-2dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:3b:ef:ef:33:ff:f9:a2:2c:16:e0:ae:5e:
                    8a:42:e3:9c:b8:eb:3e:f6:d1:ac:48:5b:79:1c:2b:
                    33:d7:b1:83:dc:22:d8:93:c9:a8:61:4a:0e:81:ba:
                    00:4f:19:ea:e9:8d:5c:31:2d:1d:c4:08:ed:ab:cc:
                    15:77:d6:11:31:30:84:7f:b2:78:1f:ef:f1:67:7b:
                    b6:36:0d:77:36:32:c9:ca:88:9d:dd:9b:a9:bd:7e:
                    81:42:10:12:ac:8b:91:53:d7:84:46:2e:ec:78:cb:
                    ca:85:a7:3f:18:28:ae:b5:b8:49:eb:65:2c:d9:a0:
                    04:7b:0d:2e:9d:97:e4:06:f4:1b:13:88:00:07:43:
                    e3:89:97:63:72:a2:e7:5b:44:66:25:d9:e1:80:31:
                    a0:ae:c3:27:0e:b6:ad:da:0b:23:26:7d:1b:77:72:
                    51:18:b5:76:74:34:df:0f:1a:f1:7d:59:25:30:58:
                    21:aa:01:4f:d9:84:17:f1:5f:a9:59:30:41:f7:09:
                    b1:80:e1:f9:21:5d:57:0c:00:e0:fc:66:ff:4d:c3:
                    4b:e8:af:ef:cf:56:19:88:f8:27:c1:fb:12:07:ac:
                    c9:3a:fc:67:61:c8:a3:16:f9:18:56:e4:a9:c9:f7:
                    c9:85:ff:69:1e:47:95:97:19:b4:61:80:6e:ea:fc:
                    bb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:85:77:8D:6D:6E:96:9D:4E:C4:10:85:81:26:8D:A0:72:9E:68:00
            X509v3 Authority Key Identifier:
                keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4e:01:39:76:a5:5d:b9:3f:35:1a:5e:01:12:b3:ec:63:a4:
         57:c5:df:71:e2:f5:28:01:11:fd:34:43:ec:79:37:0b:3b:bb:
         78:16:29:d6:97:05:f8:77:95:5b:29:18:1b:59:b4:58:aa:97:
         7b:a9:5e:2f:c0:47:4a:05:59:7c:6d:e9:ab:be:74:17:8e:05:
         b7:64:e7:ed:11:3b:7c:97:8a:80:87:c0:33:8b:d4:5c:a8:29:
         ed:6d:d2:e3:f8:6f:f3:48:c3:78:05:9b:33:1d:a7:c1:6e:d2:
         b5:18:d1:85:97:db:d3:a1:fa:bd:ec:34:50:ed:ab:b0:3d:37:
         8a:75:26:e7:4d:c2:74:aa:78:77:71:2b:d9:b4:a6:51:33:8c:
         4f:72:01:b3:8e:60:36:47:24:12:44:6c:50:55:50:42:20:e9:
         42:46:23:5a:39:00:68:61:31:06:2c:8d:32:e4:e2:82:30:7c:
         fc:3a:eb:c6:df:e9:a4:1b:55:9e:d1:c6:9e:21:63:6a:d4:a6:
         5d:51:51:42:93:64:38:2d:53:39:4e:4b:5e:0e:f9:7a:b7:fd:
         74:47:aa:c1:c2:d1:51:db:44:29:93:9c:f6:58:4d:5c:a2:d1:
         35:59:98:d7:52:77:48:c8:c4:fd:73:bc:dd:96:3a:0f:87:8a:
         a5:77:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:05 2026 by rpki-client