Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
File:                     Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json)
Hash identifier:          EPwUPUR7gYAK8P8HHjVB4CjxmiiGXWjAWUtypOMq0e8=
Subject key identifier:   A1:DC:51:41:CF:C1:4B:96:42:B4:24:BB:09:25:91:CF:FB:46:17:6C
Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A
Certificate issuer:       /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
Manifest number:          B3
Signing time:             Thu 23 Jul 2026 03:20:21 +0000
Manifest this update:     Thu 23 Jul 2026 03:20:20 +0000
Manifest next update:     Thu 30 Jul 2026 03:20:20 +0000
Files and hashes:         1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: 0BWq9n5cUKRn8n9S+t1aIO6PSDVOIP3NetTUeDMWdfQ=)
                          2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: u0M66qh4o7knuILMykFw4eLMQQ390tee1LvBxu3LBIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A
        Validity
            Not Before: Jul 23 03:20:20 2026 GMT
            Not After : Jul 30 03:20:20 2026 GMT
        Subject: CN=6a618874-eb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:c1:18:45:c4:85:ab:ea:3c:c2:0e:b9:8c:
                    07:ec:83:f0:3c:48:a7:d3:e3:24:5b:ce:7a:1d:78:
                    bf:69:93:22:6d:ce:10:82:e9:73:ed:70:a7:35:22:
                    25:99:3e:57:da:2b:7f:a4:e5:47:f5:08:f4:7e:12:
                    12:e7:b6:19:ca:8c:a3:c1:10:dd:c1:eb:a4:ae:f1:
                    4b:9d:a2:f8:90:33:af:4d:b9:b1:c9:4f:e1:15:df:
                    64:c9:93:52:6c:d7:7e:8b:4b:6c:67:2e:e7:3e:bc:
                    34:18:1e:f6:b7:67:ab:eb:78:9e:4f:c3:b0:fa:a6:
                    9d:b8:49:b8:2f:82:64:b8:81:90:22:e7:5e:2e:7d:
                    58:e5:ce:fb:6d:3b:12:3f:6f:20:41:7f:34:13:e8:
                    5f:1b:66:b0:48:f3:19:c4:45:b7:73:1b:62:f4:e4:
                    c5:6e:d8:be:78:62:77:49:be:70:e8:ea:47:d4:af:
                    30:f9:a9:af:95:36:d7:28:19:4e:f5:97:a9:ef:0d:
                    9d:64:20:0d:87:d6:7d:40:41:e6:e6:91:78:5d:1e:
                    b7:5d:84:0b:36:92:49:93:60:21:1a:ea:da:a8:87:
                    61:5c:8e:9a:53:c6:13:8a:10:cd:3e:bd:03:ac:96:
                    95:5a:b5:a3:6b:fe:fe:f7:ea:42:cd:6c:1b:71:6c:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:51:41:CF:C1:4B:96:42:B4:24:BB:09:25:91:CF:FB:46:17:6C
            X509v3 Authority Key Identifier:
                keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:71:1d:8d:81:e8:89:fe:49:27:b6:15:1b:99:a3:47:31:
         50:81:cc:ec:df:2a:08:68:ee:50:84:82:31:98:4d:29:1e:3c:
         c0:a0:68:ce:8e:e8:82:f9:74:c8:95:18:d2:be:0c:02:15:2e:
         ed:f1:a3:a0:5a:7b:6f:b9:02:12:20:2f:0a:d5:80:77:27:a9:
         30:7d:ee:84:4f:1f:b4:f2:95:fe:9a:7c:17:70:0c:89:57:66:
         fe:4b:7a:b0:03:f7:5e:f8:a0:2c:7b:a1:99:8c:71:87:d2:f6:
         fa:81:2d:50:6e:e8:38:1b:2b:f8:69:88:3d:a9:67:82:dd:cf:
         3d:3c:c1:12:10:5f:c9:d1:53:2e:99:f3:8d:fd:77:52:be:24:
         09:10:f4:fd:0b:b7:16:ab:10:6c:a1:fd:f7:3a:46:6e:ef:ed:
         68:f2:47:6a:e5:8d:2e:9f:ca:63:c3:24:4a:ff:4e:97:e1:57:
         21:ca:b4:6f:06:bd:3b:ab:9b:6f:c5:36:8d:68:e1:b2:cf:0b:
         15:d3:80:e4:06:5a:61:f5:c9:66:b8:8a:2a:39:2e:b8:d9:09:
         08:eb:04:89:87:a4:f7:dc:66:ec:40:c6:02:79:d4:0f:a1:c7:
         4f:36:8e:21:df:78:a0:05:f9:f9:d2:2c:70:9e:4e:4e:fc:a7:
         c5:92:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:53 2026 by rpki-client