Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
File:                     4bzIEhAO1GAiFweJMk8cw6-_aq0.mft (raw, json)
Hash identifier:          i3nJvos8aC/TlgfIMHlpuEh0xyEqB9qn5SWSBrfsnX0=
Subject key identifier:   2E:0E:52:29:CE:79:E5:89:63:7D:7C:07:4A:D4:15:25:AE:98:A5:44
Authority key identifier: E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
Certificate issuer:       /CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
Manifest number:          01E1
Signing time:             Thu 23 Jul 2026 04:59:27 +0000
Manifest this update:     Thu 23 Jul 2026 04:59:26 +0000
Manifest next update:     Thu 30 Jul 2026 04:59:26 +0000
Files and hashes:         1: 4bzIEhAO1GAiFweJMk8cw6-_aq0.crl (hash: kDbt+5jH49CQ0Bn1GWe8T5wzmtfK+CtfEH0yyj7+cfY=)
                          2: DB4BDEF8686911F1BDD5F198A147A888.roa (hash: iqgrkmCxNLB1Vu6irNonHXhWmrxbWNO5kKg/rLYZZq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
                          rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AAFF, serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
        Validity
            Not Before: Jul 23 04:59:26 2026 GMT
            Not After : Jul 30 04:59:26 2026 GMT
        Subject: CN=6a619faf-e329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:a6:02:5c:d9:48:69:59:98:04:94:ba:09:
                    b0:0d:36:fb:46:42:bd:3f:b3:cb:fd:56:87:40:2f:
                    44:2c:0d:c9:32:24:06:1b:95:12:71:04:aa:13:b6:
                    55:6e:63:51:bd:7c:40:6e:65:7d:35:b3:26:cd:1a:
                    aa:bb:61:7c:c6:79:7b:a5:70:6a:55:7f:70:b4:e6:
                    9d:e7:0c:f6:54:19:f8:20:e6:84:95:3e:a2:9d:0c:
                    af:c6:52:41:bc:3d:75:7c:06:58:96:00:e9:90:a2:
                    85:e3:cd:73:98:73:dc:cb:7d:8c:2b:1e:45:59:fc:
                    7f:f1:ee:6f:47:a4:37:79:6f:d1:0d:f9:f8:76:13:
                    f1:73:bf:cb:ad:3f:7f:d5:30:ce:ec:2e:04:0d:81:
                    17:36:60:df:ee:ac:76:63:a6:2b:14:84:66:fe:fe:
                    41:e1:cd:3a:5a:8e:12:5c:94:c9:22:e0:cc:21:11:
                    96:8b:b3:e1:e7:11:0a:a1:ed:f1:a1:96:40:06:ae:
                    ad:4f:69:87:fa:b7:de:d9:ea:52:15:1f:4d:5d:c4:
                    c0:7b:52:ec:3e:17:3f:90:e6:dc:01:14:2a:b6:29:
                    c2:b3:82:2d:36:9c:ab:16:35:11:66:aa:cb:ae:54:
                    fd:8f:81:21:da:99:81:2b:ad:b5:2d:61:16:87:71:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0E:52:29:CE:79:E5:89:63:7D:7C:07:4A:D4:15:25:AE:98:A5:44
            X509v3 Authority Key Identifier:
                keyid:E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b2:37:33:da:25:b0:f4:d1:a3:8b:2e:02:27:a9:07:76:c8:
         fb:73:07:40:ee:4f:6a:17:50:13:1d:17:3e:4a:b9:a5:06:ed:
         fd:c5:1e:7e:39:55:93:81:ae:20:3e:ee:57:d0:4c:51:9e:e4:
         eb:91:8f:9c:43:da:72:5e:0d:1e:6b:31:7c:66:5a:d7:07:5c:
         aa:02:e9:82:e0:ce:4e:66:19:68:81:c9:cc:0d:b6:d6:95:d6:
         cd:6a:50:2e:7c:f2:5b:df:d8:bb:ae:ea:34:24:db:99:c7:67:
         f5:df:db:7b:be:b0:11:57:c9:f3:cf:9c:53:5e:83:36:25:48:
         f7:55:40:cd:75:cb:c9:86:3e:7d:73:fd:19:aa:6e:0e:7c:db:
         86:6d:af:91:a5:94:93:4b:21:f9:bb:4c:41:9f:11:43:35:c5:
         98:29:c4:fe:fd:d5:ad:b3:2e:03:6b:10:c6:0f:2a:2a:86:c7:
         ee:9a:65:85:79:d0:00:50:54:cc:89:a8:88:ea:86:a2:ce:a7:
         de:0e:6e:75:50:21:dd:43:76:f6:e6:3a:97:00:e7:45:31:9a:
         18:f8:a0:42:b6:10:f6:26:07:8d:d5:a3:d8:4a:40:41:ca:b2:
         ac:93:3f:17:8f:52:6e:d3:0b:76:b5:cd:40:6d:b5:bd:ff:8d:
         35:73:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:34 2026 by rpki-client