Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
File:                     AI8syGQkHehjXpOldED5wusli7M.mft (raw, json)
Hash identifier:          suXvpKDiQcMod7p+fZL4yyGZr4laqkvIz6L2rewBD7c=
Subject key identifier:   78:3E:5E:2E:E8:91:31:48:27:3A:AB:80:CC:72:79:9C:F5:9A:03:27
Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
Certificate issuer:       /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
Manifest number:          01C6
Signing time:             Thu 23 Jul 2026 05:09:39 +0000
Manifest this update:     Thu 23 Jul 2026 05:09:39 +0000
Manifest next update:     Thu 30 Jul 2026 05:09:39 +0000
Files and hashes:         1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: aoLI+CJSUtAmiPdTVOGyOY4yMJbR3PPInPNgWJoVgRE=)
                          2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: /7z7IB560Zyid1gAT+cg8GKzeif1WiKdRUALH0UbtFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
                          rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
        Validity
            Not Before: Jul 23 05:09:39 2026 GMT
            Not After : Jul 30 05:09:39 2026 GMT
        Subject: CN=6a61a213-9684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:3c:13:87:82:cf:4f:1c:6c:c7:ad:e9:8d:
                    70:7b:47:7e:8b:e8:7b:29:55:d5:c7:48:ac:20:28:
                    45:be:60:28:d1:f8:40:e0:08:6e:e2:d3:ec:9e:f2:
                    8c:7a:69:1c:ee:fa:77:47:7b:15:ad:57:4f:ed:f0:
                    49:1f:2a:ac:41:f0:e0:f1:8f:21:4d:29:c8:04:56:
                    ce:63:73:f3:16:b7:15:5d:46:8e:ed:cb:b8:af:1a:
                    93:a7:ef:73:d7:a9:3d:a0:56:49:2b:a5:22:41:12:
                    62:07:e7:f2:b4:2b:26:a4:89:21:89:59:1e:ce:9d:
                    ae:a2:4e:0c:12:87:e9:b1:5b:c2:10:8e:cb:8b:69:
                    76:70:78:d9:c7:46:93:bb:fd:be:5c:02:10:b7:5b:
                    f2:65:41:3c:72:20:32:49:98:28:60:09:bf:15:97:
                    59:b7:6e:d2:95:12:33:a9:62:c9:28:bd:73:65:fb:
                    4f:f6:d9:28:26:00:06:41:10:37:e2:c7:ba:8d:27:
                    64:09:30:8d:a6:82:36:3a:50:f6:63:80:6b:1f:27:
                    87:65:2c:23:86:43:2b:20:8c:48:b8:77:9a:1c:29:
                    c0:5e:41:8d:60:6a:fe:e4:0b:6c:8f:83:ef:51:4a:
                    a4:bd:ea:a3:da:b8:af:93:f0:07:dc:34:25:ca:b8:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3E:5E:2E:E8:91:31:48:27:3A:AB:80:CC:72:79:9C:F5:9A:03:27
            X509v3 Authority Key Identifier:
                keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:07:12:16:fb:df:87:b6:44:1d:14:8c:1f:74:b4:b8:74:
         f4:b0:cb:e8:9b:e7:41:99:80:0c:11:c7:f9:e3:ff:c7:2b:a0:
         ea:a8:4a:f2:2d:a5:62:b9:7a:2b:ef:7c:1c:83:ad:6c:b4:3f:
         92:91:3b:d8:3b:4c:3e:d7:cb:55:a3:56:a4:9c:7a:9b:36:14:
         d4:75:02:37:87:36:9e:d5:cb:8d:61:d9:27:9e:30:5b:be:da:
         12:4f:34:38:d5:94:0d:35:db:62:f5:b2:5a:36:e9:9b:8b:b2:
         36:91:c9:b0:bd:96:9a:1e:5d:3f:2a:57:4a:44:d8:cf:5c:d3:
         50:79:a8:e3:17:31:4b:98:5f:66:3f:c1:bb:3c:3f:75:f2:03:
         61:5e:f8:3b:05:62:43:7a:6a:38:94:38:8c:8a:2f:d3:dd:d8:
         f9:37:90:8d:13:be:dc:0a:e2:a4:64:2a:5c:54:bc:fb:4f:1b:
         1f:b2:3c:e8:ac:4c:b4:08:e8:a8:da:34:ca:60:cf:51:88:f7:
         e4:03:39:df:fc:b7:a9:60:1e:87:38:e2:99:25:58:e8:7a:81:
         68:6b:dc:d4:a7:1e:98:8f:53:e8:2f:cc:c1:05:2a:4f:0a:ce:
         d8:5a:7f:e3:ad:b9:53:e9:f2:b3:9e:68:17:0d:1b:89:f0:6b:
         c6:6f:6d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:52 2026 by rpki-client