Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
File:                     Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json)
Hash identifier:          q2fHZnduM0MpJNR0caLuy16qHnfitE0d8Toh8ss9pA8=
Subject key identifier:   CA:00:3E:A8:A0:96:97:B6:8B:2F:AA:07:88:F5:DB:F5:22:A4:1A:11
Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Certificate issuer:       /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Certificate serial:       24C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
Manifest number:          24AD
Signing time:             Wed 22 Jul 2026 15:51:22 +0000
Manifest this update:     Wed 22 Jul 2026 15:51:22 +0000
Manifest next update:     Wed 29 Jul 2026 15:51:22 +0000
Files and hashes:         1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: i6NpEawHgVjinorEpjxgsG+F/R6YsnzyW2D74EGaBRo=)
                          2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: QCiOK4+KmOrUy5xMwngOwn99titohfwS/g83Zrx37lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
                          rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9414 (0x24c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
        Validity
            Not Before: Jul 22 15:51:22 2026 GMT
            Not After : Jul 29 15:51:22 2026 GMT
        Subject: CN=6a60e6fa-e421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:e6:be:42:b5:60:8d:76:7f:03:0f:8a:43:
                    e5:c0:31:0d:6f:d4:a4:72:18:4b:b0:dc:11:07:68:
                    65:db:cb:15:5b:99:f6:82:a6:34:a1:c7:9c:e8:f5:
                    96:cb:8d:3e:e4:7f:2c:ec:1c:5f:83:fd:49:78:8c:
                    88:1c:b6:cd:a5:59:a5:da:16:56:38:93:f9:b3:95:
                    d0:9c:1f:62:42:de:f4:9f:31:0e:c6:4b:ae:4c:dd:
                    8b:df:0e:ee:53:fc:74:29:1d:00:d3:85:f0:03:75:
                    86:e8:8d:8d:fc:de:d3:5f:ea:8a:70:db:7a:f2:09:
                    93:19:18:40:1d:27:8f:a8:56:63:2c:b4:f0:94:3b:
                    a3:a4:96:a8:b1:f8:5a:6b:5a:0b:00:d2:fd:38:c9:
                    5d:e0:f7:66:3f:ef:f1:73:a6:03:36:63:84:88:08:
                    6e:c4:57:e7:97:61:ba:d6:2e:fc:34:31:64:dd:6a:
                    03:3a:86:ee:74:43:80:62:1d:96:25:4f:68:20:0f:
                    59:32:79:2c:b3:96:2d:94:75:06:12:9e:85:5b:46:
                    92:11:81:91:ec:06:06:36:d9:51:b3:9b:ed:92:dc:
                    90:36:27:04:3b:28:2b:96:25:d4:88:33:e6:10:06:
                    b1:a0:a4:84:89:8b:a0:30:13:be:8b:48:5e:9c:77:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:3E:A8:A0:96:97:B6:8B:2F:AA:07:88:F5:DB:F5:22:A4:1A:11
            X509v3 Authority Key Identifier:
                keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:69:9c:0a:75:3f:99:f8:02:20:51:58:2c:f0:1e:0d:a1:a3:
         e6:4b:da:84:38:fd:91:e7:2a:d5:f8:d3:d3:64:f1:f7:6c:fc:
         b9:0a:bb:b9:69:b6:80:04:ef:b7:7c:3f:1d:43:ce:7c:78:8d:
         92:57:3f:95:e4:00:93:8e:0f:6d:6c:fc:6a:aa:13:6d:0e:04:
         35:6d:7f:58:de:ec:3a:e9:f3:3b:44:8f:d5:5e:dd:fd:ff:67:
         90:10:96:ba:44:24:58:52:be:82:e6:7f:88:a9:82:e6:ab:a4:
         74:c8:74:80:84:e3:ea:f6:53:2f:a1:1d:07:b1:51:f1:27:93:
         ed:80:33:e0:ec:ce:98:20:eb:b5:44:a5:c1:ae:30:28:3f:75:
         8f:f3:04:08:70:1f:c0:74:7a:9e:a9:61:ff:29:8b:76:6a:03:
         0c:fe:1b:a0:7c:5f:c9:ed:cf:57:06:e7:3d:0d:b0:42:f3:17:
         eb:f5:d2:ef:02:7d:62:cd:d3:59:cc:88:11:14:87:13:fd:06:
         ac:f4:d8:d3:c2:b2:52:7d:e2:b7:4b:07:f9:7a:18:3d:1a:4b:
         99:f4:b1:63:08:f9:e0:e3:eb:62:f3:52:91:d8:72:5c:33:8e:
         ec:67:26:14:c6:e1:66:c4:a4:67:b0:39:4f:d5:8d:74:b0:4c:
         01:71:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:55 2026 by rpki-client