Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File:                     S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier:          ktXbeysM+onBvNLEYeGlsEI/+dfkMVMv9aYncyPQIdA=
Subject key identifier:   D3:88:C2:01:23:BA:11:3B:ED:AC:7B:98:91:DE:90:1B:B7:FB:4A:0D
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer:       /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number:          01E3
Signing time:             Thu 23 Jul 2026 04:54:34 +0000
Manifest this update:     Thu 23 Jul 2026 04:54:34 +0000
Manifest next update:     Thu 30 Jul 2026 04:54:34 +0000
Files and hashes:         1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: W+d+H4YF+zmO521u+SXFZGrJHyZsyrIJ8E+b1pssoZI=)
                          2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: qPfNRqtUl8ZoRHAU3x9Cq02LILBulhmFpAHU6RhUKSg=)
                          3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: T30+4AKrilbZIcAZi9NYz7bIJXkuS5yn1jvtRVqnvBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
        Validity
            Not Before: Jul 23 04:54:34 2026 GMT
            Not After : Jul 30 04:54:34 2026 GMT
        Subject: CN=6a619e8a-ed1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:26:42:f9:38:6a:b3:ca:df:72:ad:f1:60:
                    bc:1b:35:fe:d0:a3:86:d2:36:29:e3:37:0f:5e:8a:
                    25:72:14:1c:94:1e:8e:71:58:5a:65:68:94:7f:a0:
                    24:2d:9d:23:f5:39:31:f1:b8:52:bb:f6:51:24:70:
                    bd:0e:78:b7:02:eb:ce:2e:62:25:54:68:2f:22:a5:
                    85:71:4a:e5:fa:e3:9b:5f:98:3f:bf:49:e8:86:0d:
                    15:38:80:c8:c1:7a:70:f9:12:d5:f3:ea:06:24:71:
                    d7:19:93:b1:25:3e:a0:55:07:2e:ed:d7:12:3a:4b:
                    f5:c6:c5:7c:fd:93:52:14:bd:c3:26:14:82:4d:c3:
                    95:8c:0a:a9:4f:e6:f0:63:bf:a8:d0:a9:c3:a8:aa:
                    03:fa:d5:29:24:91:b7:7c:a2:36:44:d6:ea:c1:3b:
                    28:20:eb:97:34:2e:bc:0d:0f:cf:5c:79:e0:3d:03:
                    72:3d:c7:d7:29:53:42:d1:87:cc:7b:f0:11:03:09:
                    32:36:cf:09:15:04:5f:b5:14:d9:6a:3c:de:fc:cd:
                    5d:9a:37:c2:b1:f7:3b:7d:e1:bb:30:c9:a1:4c:92:
                    56:10:e9:32:a9:d9:14:bc:3b:28:b2:3e:6b:04:30:
                    e3:ae:53:0c:28:6d:16:90:ac:a5:cb:ce:66:cb:5e:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:C2:01:23:BA:11:3B:ED:AC:7B:98:91:DE:90:1B:B7:FB:4A:0D
            X509v3 Authority Key Identifier:
                keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:61:88:8b:e3:44:b5:2f:e6:32:b4:2a:0a:3a:2d:48:96:
         d8:2e:0a:7c:a5:e5:24:9e:df:12:49:0d:b9:59:47:35:88:0e:
         a6:e1:bc:16:1a:95:eb:27:36:98:25:40:3f:02:0c:3e:30:7a:
         c4:ec:57:7b:a2:3c:0b:b1:69:7d:1a:6b:70:db:91:31:d1:f9:
         5b:dd:44:95:ec:c3:a9:db:73:6d:03:6e:61:a0:64:c3:ec:21:
         76:8d:ca:07:fa:d4:04:f8:f6:0e:cb:f0:46:e3:2e:73:e4:f4:
         5c:d4:5b:9f:fe:e2:1d:54:ce:c6:34:14:63:e6:7c:f3:ab:72:
         c7:7d:34:3b:c1:06:e8:0a:68:35:b6:08:9d:32:67:d2:5a:8d:
         69:ff:cd:32:f6:14:af:dd:c0:9e:53:a6:c4:ab:01:4d:f4:20:
         15:f3:d6:bf:5b:19:e9:16:9c:75:34:15:88:d5:73:d9:7b:b1:
         c7:a0:6f:23:db:72:21:22:c1:cb:46:52:5d:04:a5:bc:a7:9c:
         10:84:51:2b:1b:93:ca:4a:4e:54:d6:b1:ca:41:0a:b7:f5:b3:
         be:85:e6:3d:50:b1:0f:b1:fd:97:dc:f6:8c:5b:07:c1:43:c3:
         7b:cd:25:c4:c8:13:d1:b2:35:3a:03:ce:1e:e2:03:75:a1:4c:
         ff:d5:4d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:45 2026 by rpki-client