Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
File:                     -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json)
Hash identifier:          gu3b3nMMMxnupcJwvNdbnIw75yNEhrMf299ytl2VceI=
Subject key identifier:   62:C5:29:F3:9A:6D:88:71:A3:78:2C:94:03:9D:48:41:B5:44:21:C7
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Certificate issuer:       /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial:       0FFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
Manifest number:          0FEC
Signing time:             Wed 22 Jul 2026 17:38:28 +0000
Manifest this update:     Wed 22 Jul 2026 17:38:28 +0000
Manifest next update:     Wed 29 Jul 2026 17:38:28 +0000
Files and hashes:         1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: AcCJmVen7rHZO71NNjVh1oQi0h0Px8/L0aaPAcNJGW0=)
                          2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: k4cp/STum9L4RJNKMc3zj8Ri5aFzIHY5Vza6zrwXHLY=)
                          3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: 2mnTM/HTgdiRw1sKfT4sEhRjUUWStC3e6p+pRA/D//M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
                          rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4095 (0xfff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
        Validity
            Not Before: Jul 22 17:38:28 2026 GMT
            Not After : Jul 29 17:38:28 2026 GMT
        Subject: CN=6a610014-1696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:44:09:12:39:dd:62:1a:bd:af:bf:c3:c2:a6:
                    59:5c:12:56:91:1a:0e:a5:55:22:15:3b:b4:7d:05:
                    87:a6:c4:5c:26:38:83:c5:4d:a5:d0:92:53:7a:4d:
                    98:56:7c:65:f7:e9:c8:a5:52:e1:4b:fe:7d:b8:d0:
                    50:5f:65:d5:24:16:c3:5b:01:d7:20:01:e9:ab:ab:
                    aa:3e:2a:78:22:3e:e2:42:09:6e:66:22:74:19:8c:
                    15:b2:00:0f:5c:db:4d:af:ee:9e:36:9c:0b:2f:7a:
                    e0:5a:d3:a7:e1:0c:cf:53:24:ca:ed:5f:e6:c2:53:
                    92:b9:34:f2:89:6c:2e:5c:d9:67:f5:93:39:f2:61:
                    5d:6e:2f:74:05:79:83:e6:f8:8a:73:4e:14:85:ed:
                    55:5c:72:5a:b2:26:e2:ba:4e:1e:c1:dd:20:9e:96:
                    22:4e:68:02:44:2b:15:0e:a7:cd:37:90:f9:7d:3b:
                    8c:61:9c:f9:93:17:42:41:6d:8b:9e:57:85:97:6d:
                    7b:d8:93:77:71:f4:da:62:07:09:5a:b3:14:17:42:
                    e9:60:69:bb:ae:8e:5b:a9:2e:14:99:04:57:d8:da:
                    1d:fb:7c:35:02:ea:9f:6c:e5:e0:b5:74:00:46:af:
                    e9:49:52:f9:a2:99:6a:be:49:ed:6c:b8:54:0b:f9:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C5:29:F3:9A:6D:88:71:A3:78:2C:94:03:9D:48:41:B5:44:21:C7
            X509v3 Authority Key Identifier:
                keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:b3:81:22:03:ca:b7:d5:65:0d:31:8a:f4:39:83:55:43:
         0d:c0:8c:4d:ef:2b:96:de:24:5b:c0:69:0f:f6:b6:19:d6:50:
         ee:ab:36:4a:c9:a7:80:50:84:04:26:1e:08:47:fd:07:3b:27:
         b7:73:f7:0e:31:2f:3b:90:4c:58:46:22:69:53:f7:5b:99:4f:
         01:56:b4:3b:2e:49:ad:92:87:70:59:54:53:4f:36:50:50:10:
         45:ba:37:fa:67:bd:8b:f9:c2:2d:2f:bd:51:d1:cb:aa:b2:70:
         fe:08:3f:72:27:14:c3:8c:9a:11:aa:3d:ef:b7:ed:82:c9:41:
         00:7d:54:34:2b:d4:4f:b7:4a:0a:ea:33:92:a9:a4:b3:4c:2c:
         90:72:c4:94:bc:ea:e3:9f:ee:b0:7f:64:4e:cc:67:fc:25:d4:
         87:39:6e:e9:28:1e:0e:2f:6d:8e:32:11:81:31:33:2b:30:c2:
         d4:5d:c5:a5:ef:50:d3:15:98:5f:86:b4:e4:54:87:be:1a:46:
         2d:b1:d5:7f:ac:4d:51:4e:7a:7b:de:05:8a:cd:61:96:cc:5a:
         8d:ac:f3:5c:a8:a1:a7:0b:9b:de:df:d7:da:4e:41:a3:b8:4e:
         61:21:09:f8:1b:af:61:2e:18:78:47:68:c9:89:cb:64:8f:d7:
         2e:ee:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:18 2026 by rpki-client