Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
File:                     JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json)
Hash identifier:          +hSU1NuH6lfnN2/mWrhz9PLRvbLuQCP8JVndMyZSS1I=
Subject key identifier:   5A:50:A7:3F:76:82:E1:4F:B1:18:CD:DF:12:33:08:02:96:36:C8:16
Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
Certificate issuer:       /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Certificate serial:       0BE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
Manifest number:          0BDB
Signing time:             Wed 22 Jul 2026 19:16:58 +0000
Manifest this update:     Wed 22 Jul 2026 19:16:58 +0000
Manifest next update:     Wed 29 Jul 2026 19:16:58 +0000
Files and hashes:         1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: hx/1qfrpiIeIAstxBlZP/NkGgD16VTB8X/iUdyB4r7k=)
                          2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: nzu6xGAZVwQN3sFL3XLygbLgrfyY1tLxmnEus1wus5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl
                          rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3044 (0xbe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
        Validity
            Not Before: Jul 22 19:16:58 2026 GMT
            Not After : Jul 29 19:16:58 2026 GMT
        Subject: CN=6a61172a-9009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:25:fd:33:d4:28:1f:94:0c:5d:b4:27:04:
                    26:04:c4:3e:ff:1f:0e:1f:c3:14:37:39:e5:f6:cf:
                    e0:8b:5c:db:8b:3e:d2:24:29:0e:d7:c1:fc:fd:24:
                    4f:72:aa:6b:3f:f3:12:c0:2e:1a:09:0e:4b:e3:ad:
                    20:18:e7:d0:1d:12:7e:72:e2:e7:f8:68:ce:c1:68:
                    3f:68:ce:86:56:bb:72:fa:4d:e9:66:b3:5c:99:79:
                    fd:17:ca:13:c8:4e:0c:5d:f1:1c:fa:4a:31:5a:1f:
                    29:2c:6f:e7:4f:df:0e:3f:8d:2d:da:93:88:a5:55:
                    10:2c:9d:28:e5:21:a7:cc:8d:2b:f6:87:e4:76:d2:
                    e7:7e:be:48:1c:16:bf:5a:88:0a:26:91:43:ff:42:
                    00:14:bb:5b:d5:90:ce:43:e7:77:57:63:2e:f3:30:
                    ce:cc:8d:e7:5f:75:3b:41:6c:4c:e5:94:9f:19:16:
                    44:bb:0c:20:22:b0:58:90:7c:e1:14:cf:93:97:bd:
                    88:99:f2:75:85:a8:5a:f1:43:37:bf:73:0a:cc:8a:
                    6d:11:88:eb:0d:11:3f:45:f0:e4:6c:78:ee:c0:7a:
                    d7:d3:3c:0b:3e:1a:d8:4a:06:d7:dc:87:61:78:1e:
                    51:c3:7c:b2:46:74:ed:0d:09:06:65:2e:bf:a7:23:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:A7:3F:76:82:E1:4F:B1:18:CD:DF:12:33:08:02:96:36:C8:16
            X509v3 Authority Key Identifier:
                keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:9b:26:11:53:a2:3e:fa:db:cb:da:2b:c7:68:dc:38:68:
         cc:cf:9b:9f:ec:fa:31:bb:41:62:04:55:fd:5d:fe:1c:5f:8b:
         b1:d5:36:05:b0:46:94:db:5c:99:91:d8:5d:8e:40:8a:02:32:
         1c:e0:27:cb:ae:8a:4e:ac:fa:86:7c:05:1c:21:93:a4:db:64:
         f3:23:6d:70:55:bc:09:ee:f8:3e:5e:0e:35:9f:69:b1:8f:57:
         79:53:91:3a:de:3e:40:b8:1b:f9:02:c3:6d:98:16:ec:8b:4e:
         56:7e:58:2e:55:b5:ac:4c:f1:14:51:ca:83:69:8a:d6:f8:27:
         10:13:f3:30:5e:a9:e6:50:0a:16:76:7f:8f:b2:34:6f:25:6b:
         7f:cb:3e:2f:bc:de:8d:88:2e:f6:81:5e:33:6b:31:27:42:ca:
         20:53:f1:ea:f4:15:58:fb:1d:0b:5c:64:e4:4f:95:b9:a9:67:
         54:ae:f9:30:39:8e:f7:93:56:8a:9a:8f:78:fb:94:06:6e:0d:
         b4:5c:8e:ff:cc:93:67:93:9a:d8:88:6e:22:04:d9:30:23:f2:
         6e:4b:55:9a:a8:45:f4:f4:bd:45:e5:55:ab:ca:24:cf:e7:44:
         d2:ab:03:ca:a8:ac:98:ab:82:bb:c5:72:98:e6:e1:61:da:0f:
         9a:3b:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:25 2026 by rpki-client