Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
File:                     aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json)
Hash identifier:          469RsUXyhyOxZpEX5wbKXXJ9xra7Rsf3CljdpGivL5c=
Subject key identifier:   0C:1F:11:E2:6A:DB:6A:6F:C6:D5:54:9D:19:1D:F2:62:E3:F6:7F:42
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Certificate issuer:       /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial:       047F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
Manifest number:          0472
Signing time:             Thu 23 Jul 2026 00:56:38 +0000
Manifest this update:     Thu 23 Jul 2026 00:56:38 +0000
Manifest next update:     Thu 30 Jul 2026 00:56:38 +0000
Files and hashes:         1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: AhIkWOEUTUta0XSKOcJb41T3k7VPzigOycySZGvsv+k=)
                          2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: FAyF1EHDkfSrZaB9JsF96pk4KSSTdNSXhRevgQNdj7Q=)
                          3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: EU7Pv67dHPUPsN4Pf/6t9QQbrokUpqyuX1Cdd8unPqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
                          rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
        Validity
            Not Before: Jul 23 00:56:38 2026 GMT
            Not After : Jul 30 00:56:38 2026 GMT
        Subject: CN=6a6166c6-37dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:80:ff:1f:bd:9f:ea:0b:be:71:7e:73:51:e3:
                    d4:41:f5:b0:ca:bf:a6:57:56:16:10:0f:8e:e3:76:
                    26:2f:f9:71:4f:20:13:54:da:29:11:2a:85:3e:b2:
                    89:fc:4e:7e:dc:e6:d0:e3:8c:04:56:3e:c7:97:34:
                    7e:d7:63:5e:ca:0f:fc:9c:82:eb:86:4e:35:c8:1d:
                    be:d3:7a:6d:e5:f6:1f:ea:db:a1:f5:17:d5:35:7e:
                    c3:41:8d:73:92:7b:08:24:42:e6:0f:4e:d8:45:d8:
                    93:85:35:81:9f:0f:1e:39:3c:96:e9:55:48:ec:80:
                    cf:ab:55:d5:2b:33:2f:9e:58:72:bc:16:bd:0e:3c:
                    9a:96:90:cd:b7:36:ce:c9:94:90:35:e2:2b:20:17:
                    b0:82:9e:40:35:52:8b:f7:21:e3:42:f3:f5:1b:13:
                    c6:6f:0e:01:d7:cf:3f:12:ce:1a:90:4e:04:ef:2d:
                    92:29:f2:ea:d7:e5:76:ec:33:f8:6f:58:d7:76:67:
                    f0:fd:6a:3d:ee:de:8b:9c:54:ca:37:54:d0:e9:4a:
                    32:d9:f4:4c:98:b4:cb:2a:dc:57:87:83:c5:f5:81:
                    ac:55:aa:d5:c3:86:9f:83:aa:a0:49:0d:66:af:94:
                    0e:12:64:d1:bd:68:e2:74:e5:dc:64:b1:60:2f:88:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1F:11:E2:6A:DB:6A:6F:C6:D5:54:9D:19:1D:F2:62:E3:F6:7F:42
            X509v3 Authority Key Identifier:
                keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0d:24:0d:68:7e:00:06:32:ff:84:fd:c8:4d:a2:e7:d1:2d:
         4f:02:44:91:fe:55:71:cd:d5:fc:83:ff:c3:4e:99:d8:ea:d0:
         26:a5:f4:8e:24:33:4b:78:b5:99:6e:82:dd:09:d0:29:88:36:
         46:b3:96:f4:d5:b0:14:5b:45:0b:94:74:ea:60:18:49:4f:e1:
         7c:cf:de:41:67:b0:6b:d5:e6:d8:e0:46:e0:14:66:b5:ee:db:
         7b:4d:11:bd:97:d5:11:a4:32:fa:87:09:28:af:6b:a6:af:89:
         ef:1f:80:10:4c:b5:1a:b2:41:12:d4:06:27:18:2c:ae:c6:21:
         c4:b4:57:1b:a6:b8:96:3c:d2:42:e5:f4:8a:e6:47:32:ad:41:
         1d:86:0b:51:41:97:91:53:90:23:e0:0d:5d:e1:44:d8:11:57:
         9d:d1:fc:85:3b:69:b1:a0:5d:7e:9d:ce:c2:2d:94:20:12:3f:
         c0:00:da:1c:b2:2d:cb:1d:ab:44:d3:d9:e9:ff:7c:01:d5:72:
         6e:79:40:ae:45:62:6d:d8:80:52:10:f8:ae:97:eb:c4:00:72:
         9e:b2:fb:dc:f8:7e:db:48:12:b6:99:b2:ed:f5:6d:6d:b6:bc:
         ed:0f:ef:d1:59:23:22:22:cd:3c:18:4e:ee:b5:b2:8c:2e:38:
         31:80:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:23 2026 by rpki-client