Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
File:                     -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json)
Hash identifier:          +4KeawG6kKP1G6QlK8IvO6bnYTh4FNrzezZScxxt2WU=
Subject key identifier:   7A:72:0F:80:35:B4:01:AE:A4:02:B6:6F:B7:63:8F:59:1D:C9:FB:8F
Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54
Certificate issuer:       /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
Manifest number:          C1
Signing time:             Thu 23 Jul 2026 08:44:05 +0000
Manifest this update:     Thu 23 Jul 2026 08:44:04 +0000
Manifest next update:     Thu 30 Jul 2026 08:44:04 +0000
Files and hashes:         1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: yxN4exYDVJ86ojQXN+8j2sMippVWgxMcnv4vJiCKxsE=)
                          2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: U9tyCvMDlceVXMLQfDjCprercZZxtbmQBQkbmthwKe4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl
                          rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554
        Validity
            Not Before: Jul 23 08:44:04 2026 GMT
            Not After : Jul 30 08:44:04 2026 GMT
        Subject: CN=6a61d455-c541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:ec:e6:78:90:f3:cd:6d:cf:26:7d:be:84:
                    df:01:e4:f4:96:51:2a:19:3e:ee:75:00:b7:24:27:
                    78:04:bf:9c:55:72:09:24:a1:68:41:a2:ee:53:47:
                    f1:fe:40:54:0e:bf:1d:81:8a:38:c4:d6:56:4f:ed:
                    53:15:ef:4d:a2:19:c9:22:45:4b:9b:29:15:f0:36:
                    81:71:3d:23:d2:d6:16:47:b0:50:c5:c5:b9:20:22:
                    19:e7:8d:4e:0e:a3:26:eb:5b:03:16:41:f5:9c:79:
                    1e:fe:3c:fc:59:16:9c:9a:e6:96:37:19:cd:d1:69:
                    b9:90:99:b9:48:73:58:d4:b3:0b:de:e6:2e:6c:3b:
                    dd:5f:54:52:88:7f:2d:8a:a1:7e:8f:c5:7d:7c:53:
                    ac:94:b8:38:f3:0c:f7:a2:6e:c7:44:d1:fb:3b:71:
                    8b:eb:ce:e6:e4:e1:ad:94:0d:12:31:8b:f4:be:d5:
                    c7:ac:a8:7c:ad:57:0a:15:61:4e:71:7f:dd:29:15:
                    95:ce:35:5b:f1:bd:5c:9d:00:44:d0:54:ff:db:a9:
                    aa:a5:85:4e:a2:69:6e:bf:23:85:71:5c:66:7c:98:
                    c1:af:22:da:59:05:a8:50:b3:39:51:f5:92:96:29:
                    46:26:87:39:71:70:40:d8:86:20:6a:03:f7:50:74:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:72:0F:80:35:B4:01:AE:A4:02:B6:6F:B7:63:8F:59:1D:C9:FB:8F
            X509v3 Authority Key Identifier:
                keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:df:a1:d6:71:2e:6c:5c:ba:bd:1e:22:55:0d:8e:e1:4a:42:
         27:8a:71:f0:49:62:1c:52:d5:08:38:51:54:79:c1:ec:16:e0:
         e8:5e:05:cb:46:bb:89:09:52:e6:fd:a7:89:78:da:39:d2:69:
         fa:bd:1e:b6:b8:1b:09:cd:8f:3e:a5:08:8b:fd:b8:3e:ce:df:
         dd:7a:fb:d8:ec:98:65:cd:51:d7:da:23:94:2e:34:1c:74:ad:
         fe:f2:4f:13:77:a8:88:fa:03:27:3f:36:be:30:57:78:10:44:
         26:32:aa:a7:2a:92:f1:ea:32:04:23:dd:36:9b:47:1e:5a:e3:
         64:d3:6b:31:8f:82:94:17:04:5a:99:84:f2:3f:75:34:95:00:
         66:87:24:4e:e3:56:92:18:ac:3d:55:3e:b8:05:19:8e:ce:f6:
         9e:32:a7:c6:27:d1:9f:58:9e:17:93:ec:f8:7c:eb:3f:f4:5c:
         60:7e:d8:35:51:a2:2b:f1:97:71:8c:30:f3:be:91:6b:be:df:
         2b:77:c0:60:23:96:ee:ff:f5:54:1b:93:3a:e0:d1:ba:c0:0c:
         31:3a:75:8a:94:bb:d4:9b:eb:98:d1:23:5a:51:70:4b:1f:c2:
         aa:d2:9c:f5:8a:54:ae:f2:1e:37:54:51:7e:e7:1f:f1:1b:7f:
         51:35:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:15 2026 by rpki-client