Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
File:                     RFYGB9mXqksKc6pXxvY1ND3QGNY.mft (raw, json)
Hash identifier:          ubYCHxxJyzhiox/krN3BhVPExUDg1j98E2J+GLagjLM=
Subject key identifier:   A7:D0:5E:FF:D3:40:D7:22:62:C4:31:06:DB:00:F2:E9:1E:D2:E0:7D
Authority key identifier: 44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6
Certificate issuer:       /CN=A917047F/serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
Manifest number:          0F5D
Signing time:             Wed 22 Jul 2026 17:47:24 +0000
Manifest this update:     Wed 22 Jul 2026 17:47:24 +0000
Manifest next update:     Wed 29 Jul 2026 17:47:24 +0000
Files and hashes:         1: RFYGB9mXqksKc6pXxvY1ND3QGNY.crl (hash: a8PoZWtDfyx8fOD7MEfwq8ILnBnyv++iNBTlex7kPmk=)
                          2: 58A1565020E711F19CC84E688AEE528E.roa (hash: is3dWN0Su2mbaSEiG0w1bwbtnKZ0EJhAU5pPfLOo5P8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl
                          rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917047F, serialNumber=44560607D997AA4B0A73AA57C6F635343DD018D6
        Validity
            Not Before: Jul 22 17:47:24 2026 GMT
            Not After : Jul 29 17:47:24 2026 GMT
        Subject: CN=6a61022c-d3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:e5:c4:f6:cd:56:90:bf:c7:f3:f6:f2:6c:
                    8c:97:43:5c:ab:87:f4:cb:f2:a7:04:67:3f:fb:4c:
                    54:f3:98:24:cb:fe:fe:0f:38:3d:21:4e:1b:f5:00:
                    41:ee:49:4d:92:67:13:3f:a5:73:6e:9e:5e:8c:7c:
                    5a:32:6c:db:11:ea:70:c6:9c:e3:c0:ff:2e:d3:ca:
                    a4:c0:2d:e2:bb:d5:fb:eb:5e:a3:1d:8e:5e:95:dd:
                    6d:10:9a:0b:92:40:e5:ab:c5:cd:42:39:02:32:8e:
                    df:58:46:47:8c:50:e5:a9:09:9b:b5:b4:b4:5c:75:
                    34:40:86:75:39:5b:7e:a1:c8:5a:02:97:a4:3a:ae:
                    94:ca:6d:40:6e:12:e0:d2:a2:f8:2a:f5:87:72:ce:
                    a0:34:1e:87:4e:c6:0d:c7:22:c8:f6:99:69:1c:49:
                    f0:7e:ff:84:33:1e:8a:c7:38:b0:d2:da:a9:a4:d5:
                    0d:e7:a7:08:c4:6f:46:23:a2:08:e5:6f:30:4a:4b:
                    12:32:04:21:a3:62:0a:e5:50:c9:59:d6:e8:f8:b0:
                    98:a9:11:4b:b7:95:63:04:87:09:be:6d:e5:69:96:
                    99:57:89:2f:f6:73:2c:be:b0:1c:76:47:ba:aa:3a:
                    7f:59:b4:1d:69:aa:d8:e8:c9:83:38:fb:29:17:cd:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D0:5E:FF:D3:40:D7:22:62:C4:31:06:DB:00:F2:E9:1E:D2:E0:7D
            X509v3 Authority Key Identifier:
                keyid:44:56:06:07:D9:97:AA:4B:0A:73:AA:57:C6:F6:35:34:3D:D0:18:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RFYGB9mXqksKc6pXxvY1ND3QGNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/RFYGB9mXqksKc6pXxvY1ND3QGNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1f:fb:3c:49:2c:9d:fe:ba:70:3c:e4:0b:0f:2b:12:01:81:
         03:67:df:75:4f:44:ec:d4:b9:85:3e:d6:7f:54:cc:52:04:ab:
         87:27:9d:67:c8:3d:25:ff:d3:bc:de:f1:c4:8d:fc:fb:b6:6d:
         2e:e1:83:22:99:59:c5:40:a9:e0:03:0f:f1:73:36:fd:89:b8:
         b5:88:f4:cc:3b:49:ef:f7:f6:c0:ea:35:b2:ef:fd:8c:c3:5e:
         3e:e7:d7:ca:8e:42:c9:68:1c:98:74:f6:a5:78:70:e8:db:17:
         e8:71:a6:88:24:c4:bc:f2:6e:8c:e9:b9:6c:dd:7e:cc:63:57:
         94:15:39:73:24:b1:5b:b8:ea:aa:cf:ce:4c:f8:a8:54:5d:b3:
         23:c9:26:6c:33:22:35:09:e2:10:f0:8c:3d:41:ad:90:ff:7a:
         30:2d:3e:da:7f:0e:74:32:ca:2c:cc:a3:d0:35:05:35:f6:54:
         83:b1:12:f8:cb:b4:9f:52:62:dc:89:4f:f4:bd:92:92:d5:6a:
         47:0e:85:7d:b0:df:b7:cb:f3:4a:1f:21:db:72:7a:73:f9:ed:
         5f:6e:5d:78:88:c4:15:10:1b:fa:dd:92:c7:58:4a:12:4a:76:
         31:48:30:12:7f:81:c1:0a:57:cf:95:a3:10:4f:e4:26:5f:25:
         10:1e:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:19 2026 by rpki-client