Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
File:                     AiMNlU5PPWqtRJXXTNs-4PKHygc.mft (raw, json)
Hash identifier:          Ge3b3ou6tNOj3pAkvZCwZcStAUlfzu/DAJl//N2G/8g=
Subject key identifier:   E3:02:5C:D2:8B:4C:81:B3:FB:28:00:28:19:60:4A:22:AD:EA:98:F5
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Certificate issuer:       /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial:       24A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
Manifest number:          2475
Signing time:             Thu 23 Jul 2026 23:33:42 +0000
Manifest this update:     Thu 23 Jul 2026 23:33:41 +0000
Manifest next update:     Thu 30 Jul 2026 23:33:41 +0000
Files and hashes:         1: AiMNlU5PPWqtRJXXTNs-4PKHygc.crl (hash: a5HLbFxYU399XB06yfyPYz1ALso2Rf5082R3bf+9hCk=)
                          2: EDC8B49086EE11F19E006003A7EE528E.roa (hash: h+jWpQU5RPeD0V9iWjQpKIX46qoIpgt7mOA43N2WPl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
                          rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 23:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9384 (0x24a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4C6, serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
        Validity
            Not Before: Jul 23 23:33:41 2026 GMT
            Not After : Jul 30 23:33:41 2026 GMT
        Subject: CN=6a62a4d6-6a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:b7:4c:cb:85:54:43:79:38:6e:29:65:ad:
                    9b:55:a5:0e:25:20:92:4c:13:0e:92:bc:ac:41:83:
                    20:4e:65:d7:41:17:66:0e:d2:17:ff:3e:e3:df:87:
                    58:47:b1:d0:d1:e3:0f:19:d3:37:96:79:f8:f0:6e:
                    6d:fe:d7:62:46:9b:59:07:f8:f5:51:83:9d:1a:e5:
                    3b:58:c8:bc:b2:31:cb:4d:13:2f:28:81:1d:76:ed:
                    2f:03:1b:30:89:a3:86:a5:e7:c4:29:3e:1d:09:81:
                    06:e0:9b:12:56:11:56:3a:8f:39:0b:80:7f:54:17:
                    96:63:aa:b4:b7:c7:0e:e7:09:96:ec:03:27:59:bc:
                    10:69:6f:ff:d8:9a:9f:b8:fb:02:b2:de:6c:c8:e7:
                    93:bd:59:60:4a:ea:68:5f:28:f2:30:f5:b4:bc:25:
                    7a:23:b6:27:26:20:e6:9d:7d:e1:dd:dc:f5:1a:1a:
                    46:2e:4e:10:fe:76:94:27:6c:5b:a7:67:14:24:a9:
                    54:b0:cd:ed:5a:3d:7e:c6:a8:b5:af:46:e5:41:93:
                    13:5e:52:e1:64:f5:d7:48:e8:30:e2:c5:aa:bb:d0:
                    d7:d4:9f:69:bf:ae:e5:b9:c5:44:75:86:09:cd:19:
                    3e:2b:58:2a:b8:a4:37:fa:93:d4:4b:d6:fd:70:84:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:5C:D2:8B:4C:81:B3:FB:28:00:28:19:60:4A:22:AD:EA:98:F5
            X509v3 Authority Key Identifier:
                keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:44:8f:a3:be:1b:df:b7:c6:cb:d4:72:56:11:e7:93:79:
         53:30:3e:91:bc:5f:a0:89:a5:fb:f7:e0:9c:46:82:fb:28:23:
         73:6c:6a:1a:40:6a:fd:c6:47:80:48:28:f8:3c:dc:64:87:35:
         ee:5c:01:f3:76:e6:6c:ad:f8:36:b0:70:65:b8:c8:ea:d4:34:
         d5:e0:cb:fd:d8:cc:3a:32:ab:0f:b0:f5:df:d5:e6:9b:f4:d9:
         b3:ea:03:5f:dd:37:52:7e:c1:83:48:ff:46:54:ee:53:39:08:
         aa:20:3c:14:eb:b1:0c:f0:3f:91:f4:15:f6:9c:a3:f0:ad:f3:
         19:ba:16:eb:d9:fb:4c:3f:5c:99:25:7c:26:5e:31:8f:92:fd:
         ea:fc:e1:d6:c9:a4:09:8c:16:07:1f:be:6e:49:a6:01:d7:0a:
         51:85:33:9c:98:2a:01:a0:f0:b5:6d:6f:58:f7:2e:b0:31:a5:
         cb:60:33:cb:0d:8f:36:cb:d5:a7:52:38:68:1f:c9:1a:2d:63:
         7a:28:12:35:a6:32:1f:2b:d0:62:c8:79:4f:de:96:82:b9:ed:
         01:21:59:2d:66:9c:2e:6b:a5:86:68:57:19:23:16:1b:04:c8:
         e2:d4:d6:b2:86:49:eb:20:8e:be:2b:68:54:f3:b9:d5:d5:da:
         f0:f9:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:00 2026 by rpki-client