Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          iEWrv3YkekGk9eEeVAn6pgTFwZim7AUd4irK+VTNPv0=
Subject key identifier:   17:9E:82:DB:8A:A0:28:74:32:DB:9B:44:0F:6E:5D:71:F2:93:46:F7
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0B70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0B48
Signing time:             Wed 22 Jul 2026 19:36:36 +0000
Manifest this update:     Wed 22 Jul 2026 19:36:36 +0000
Manifest next update:     Wed 29 Jul 2026 19:36:36 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: 5bvkke+twHNIpT4RwdPa9mbR/rv9aFOFq8LtdXzvPBw=)
                          2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=)
                          3: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: 5OKWpLiITpzC82N35iOhZbsAzgBXSVM9wxMVAwNfKSI=)
                          4: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: bmegegPDxR1urUoWVZTcpCbAwDOttLwteVNluF5nkEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2928 (0xb70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: Jul 22 19:36:36 2026 GMT
            Not After : Jul 29 19:36:36 2026 GMT
        Subject: CN=6a611bc4-ecd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:f5:e9:3e:ce:21:f6:5b:06:43:7d:4a:b9:
                    99:82:b3:73:c5:d7:5f:96:a0:0c:48:17:b0:c1:bc:
                    19:12:e9:38:75:7e:69:fd:c4:66:d4:b9:a5:4a:b7:
                    73:25:3d:ca:77:aa:8d:a0:ed:02:7d:e9:de:24:f5:
                    24:22:85:c7:47:77:81:1a:93:b4:d8:1f:63:39:c1:
                    76:07:f5:71:12:1b:80:6f:8d:fb:ba:51:0f:13:67:
                    8c:84:2e:35:43:d3:b3:6f:c2:0c:55:fc:9f:df:ec:
                    2a:ab:ea:b3:7f:5f:b1:91:e9:fb:67:3f:74:93:88:
                    3d:16:5b:53:06:ab:76:8f:f3:d8:f0:05:20:5e:6f:
                    0e:1c:db:35:fb:b4:d2:54:c8:b4:d7:7b:6c:b3:ad:
                    24:0a:69:72:28:ef:51:76:2e:21:eb:e6:9c:10:06:
                    bc:67:de:ee:33:90:9c:b6:52:8d:63:b3:43:fd:60:
                    39:4e:91:00:20:09:73:6d:fd:68:d5:79:70:52:f4:
                    06:c4:49:fe:0b:4d:1c:57:32:9e:42:2a:db:3c:da:
                    5d:70:28:04:c0:05:ba:0e:d0:56:bd:06:b2:1c:36:
                    ab:42:55:69:f4:5f:06:23:a6:25:f0:d4:5d:10:c5:
                    68:ac:a8:39:b3:79:36:2f:24:4c:81:f7:fb:cd:f3:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:82:DB:8A:A0:28:74:32:DB:9B:44:0F:6E:5D:71:F2:93:46:F7
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:b1:c5:f3:55:36:fd:77:3f:58:aa:b4:ac:a7:46:bc:65:
         33:85:32:44:87:5b:51:85:65:85:96:10:b4:3a:47:1a:84:97:
         79:f0:a1:53:db:45:b3:fd:42:d8:d4:aa:53:19:97:58:b3:a6:
         2c:f7:d6:47:d0:ec:60:bb:4c:af:34:80:96:f8:1f:20:55:e5:
         ee:de:9b:00:ea:56:40:dc:6c:55:4d:fe:2a:08:a6:52:12:2d:
         1c:74:82:9d:03:f9:88:de:f4:17:cf:b7:a3:80:9b:45:c2:56:
         03:8b:d6:db:24:1d:93:f7:3b:45:fb:fc:c1:fc:a2:62:70:81:
         35:7a:e2:6b:99:f2:57:ba:86:a3:d2:86:ab:5b:ad:51:20:13:
         d6:0f:6e:5d:8e:5e:e8:4c:17:b1:d2:5c:88:be:15:a5:8c:ef:
         77:b0:35:91:78:a8:e8:51:4b:15:77:61:c1:81:87:34:41:9d:
         ba:34:33:8b:d6:01:0f:4e:39:41:c6:af:b1:29:8e:db:2c:f9:
         1b:3b:2b:fb:3c:92:85:5a:e3:0c:24:fb:ec:d4:88:4f:a6:8f:
         bc:0f:cd:16:1f:b0:d3:6b:7a:c8:4b:47:5c:4f:c6:00:06:b4:
         47:75:4c:f8:bf:b8:f3:4f:b2:88:f6:7c:6a:2b:b6:01:c9:7f:
         1d:bc:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:39 2026 by rpki-client