Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File:                     Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier:          lsZ96Is1cLsRyaiDYlw1+PqLq+8OEQthatY8qSXV/Uk=
Subject key identifier:   7F:D9:39:F0:CE:4F:43:01:7E:31:2A:88:B2:9E:EB:A1:52:40:AA:EE
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer:       /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial:       03B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number:          03A5
Signing time:             Thu 23 Jul 2026 01:34:38 +0000
Manifest this update:     Thu 23 Jul 2026 01:34:37 +0000
Manifest next update:     Thu 30 Jul 2026 01:34:37 +0000
Files and hashes:         1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: FkXZ0z7zd/fmVz+4Zcj+hNCN0u0L44+UYETXlbyMBlY=)
                          2: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
                          3: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
                          rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
        Validity
            Not Before: Jul 23 01:34:37 2026 GMT
            Not After : Jul 30 01:34:37 2026 GMT
        Subject: CN=6a616fad-0ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:53:55:ed:00:e2:d7:05:33:fa:9f:75:52:
                    62:34:eb:77:e4:fd:4a:27:7c:45:2b:ee:ef:d3:d9:
                    97:32:62:54:ff:ac:cc:d6:8c:b7:22:55:5e:bb:c1:
                    59:a3:0d:f3:b7:fd:14:a2:77:73:8f:16:43:9f:0c:
                    5e:ad:7c:e6:aa:40:17:06:5b:24:dd:f1:12:9f:44:
                    bc:14:f7:55:be:a3:cb:e2:30:eb:e6:4e:dd:eb:21:
                    70:62:ea:1e:5d:55:fb:c4:d6:fb:71:a9:c8:b5:0d:
                    37:e9:df:8f:e4:1a:b3:bd:b7:fe:a9:dc:3e:42:c2:
                    e0:13:8c:79:b7:9a:79:b3:cc:e1:12:c8:09:d6:8e:
                    38:1a:f1:54:e1:67:15:fa:1b:76:3c:4d:13:3d:98:
                    70:9c:40:6e:d3:dd:db:05:60:36:99:d6:94:57:4e:
                    87:b9:39:8d:54:cf:6f:4d:b1:34:3b:5c:e9:03:fc:
                    50:7c:86:0a:dd:8f:e5:69:bc:87:f8:24:dd:68:a7:
                    52:fd:34:f3:63:87:40:d9:61:70:0d:6d:7b:db:c4:
                    64:e1:5b:1d:bf:e6:fc:e3:03:47:6a:63:3b:de:29:
                    92:20:64:25:c4:d2:be:c8:9c:e4:d6:ca:9c:26:12:
                    f8:33:a5:89:89:81:13:02:d1:b7:b3:1d:3d:4c:e7:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:39:F0:CE:4F:43:01:7E:31:2A:88:B2:9E:EB:A1:52:40:AA:EE
            X509v3 Authority Key Identifier:
                keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:35:16:18:d3:7d:5d:38:6b:5e:19:ca:5b:8a:4d:32:01:6f:
         68:17:e9:b1:f0:c2:c4:a7:45:35:65:9c:c1:8d:ba:82:ff:c6:
         83:6d:aa:cb:bf:f7:73:ef:e9:7d:f3:b8:f8:3f:92:2e:48:fd:
         34:cc:79:2c:9c:42:03:2a:04:18:c2:cd:8e:4b:3a:ae:54:de:
         de:db:50:41:6b:e5:b8:c8:03:2d:8f:9b:75:79:0c:b3:ff:93:
         5f:81:7a:44:da:94:eb:4d:c4:95:b8:71:b4:3f:cd:7f:eb:50:
         ba:7e:fa:69:60:0c:b6:48:3b:e4:77:87:c8:48:06:c7:0c:ff:
         54:1a:89:c9:43:94:cc:6d:6b:46:f5:ad:f9:0a:3d:55:4c:68:
         2d:68:04:67:ee:b6:9f:f5:ec:f7:7e:81:7f:c6:d0:1d:e9:9a:
         b7:fe:f2:83:bc:eb:a0:7e:db:3f:48:ef:49:c8:87:af:27:5a:
         bd:2d:84:52:d6:a0:9b:bd:b4:af:73:64:2d:1f:bf:3d:27:e2:
         88:95:2b:37:b2:41:dd:eb:90:46:5d:db:b0:db:16:e4:b7:24:
         6d:95:ba:13:30:65:71:94:84:62:5b:37:a7:66:fd:0f:ab:84:
         2f:a3:bb:ce:be:29:ed:8b:1d:14:69:df:4e:1f:6f:16:0f:ac:
         3d:17:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:30 2026 by rpki-client