Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
File:                     aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json)
Hash identifier:          OMYn0EdGHrrtHlpgoqtW1uTbXhu0FoVQeZkrDhRV/2I=
Subject key identifier:   C6:9D:84:E2:A8:8E:83:47:F6:CB:03:10:D0:03:21:57:39:EA:E4:30
Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
Certificate issuer:       /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Certificate serial:       08CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
Manifest number:          08B8
Signing time:             Wed 22 Jul 2026 21:02:22 +0000
Manifest this update:     Wed 22 Jul 2026 21:02:22 +0000
Manifest next update:     Wed 29 Jul 2026 21:02:22 +0000
Files and hashes:         1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: ks2E5pFo3CnrDUKoN2SM4fu+dx8/bXGJXeeqmE9izCI=)
                          2: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=)
                          3: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
                          rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
        Validity
            Not Before: Jul 22 21:02:22 2026 GMT
            Not After : Jul 29 21:02:22 2026 GMT
        Subject: CN=6a612fde-9eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:86:7f:0e:69:b1:c8:f0:06:48:90:56:ab:
                    48:55:c1:c5:7e:df:9c:87:c7:d4:dc:25:28:c5:2a:
                    9f:a2:5b:8d:d8:e9:92:1a:42:b8:6f:9c:d4:58:fd:
                    20:04:99:83:4c:b3:15:69:83:6f:a2:33:1c:04:bc:
                    11:3b:db:03:9b:65:fe:0a:25:d5:ea:32:87:41:a6:
                    26:64:42:a4:ca:2c:4f:9b:33:7f:34:c6:c3:4d:e6:
                    48:43:50:f2:b6:a1:ac:fe:71:1e:1c:ac:92:e6:5c:
                    18:b4:3d:09:02:ce:d6:60:54:86:64:f3:97:2b:27:
                    8c:d3:07:4f:dd:71:85:b4:c6:87:fe:87:f5:79:18:
                    b7:28:69:14:d1:1f:92:ca:c9:2c:ab:2a:22:0c:11:
                    ef:bb:0a:dd:84:d7:67:e2:43:99:1c:9b:11:b5:29:
                    76:5d:64:a6:0c:ef:66:eb:59:bb:13:f0:6c:19:0f:
                    de:dd:3a:e6:f5:04:95:df:5d:43:c2:2f:4d:e0:d7:
                    31:04:45:2c:ba:3c:3e:b4:0b:4c:9c:15:b5:82:b2:
                    fc:c8:fd:cf:b5:90:c2:e3:de:d8:a6:7e:2a:ab:b2:
                    04:ae:36:d0:2a:f0:29:d5:7b:e4:5c:76:58:4a:fd:
                    29:ac:2a:3b:95:08:af:68:ee:37:ae:5a:71:f9:d4:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9D:84:E2:A8:8E:83:47:F6:CB:03:10:D0:03:21:57:39:EA:E4:30
            X509v3 Authority Key Identifier:
                keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5e:aa:10:6e:ad:06:0b:39:48:40:cc:3c:aa:12:62:23:84:
         d1:22:99:66:ac:67:72:c8:ee:1d:33:08:b9:b7:97:ae:91:4d:
         33:2e:89:ea:f5:8a:f9:fc:06:36:97:87:73:b6:c4:16:a3:cd:
         64:b4:c8:43:9d:5d:a7:e5:2a:b2:80:81:75:11:9d:ae:14:e0:
         93:96:93:74:e1:28:be:6d:98:90:4a:79:87:3c:0e:ec:bc:53:
         5f:cb:46:e3:90:9f:c8:9a:13:ff:d6:cc:31:cb:74:ac:4e:b1:
         1a:f1:34:7b:54:ff:48:93:78:2a:26:15:c9:1c:58:66:1f:1a:
         bb:87:c6:4d:54:2d:4f:82:d5:fe:08:8a:0f:6b:14:5a:de:86:
         74:9b:8f:81:c2:35:84:70:28:a8:27:bd:ed:88:58:bb:ce:3f:
         6c:46:c4:e3:31:4a:d8:74:38:5e:8a:0c:cf:0c:50:f0:68:4e:
         81:a5:03:e4:43:9f:30:ac:8b:83:22:e7:86:df:82:e7:f8:64:
         de:b7:0e:b8:71:bb:7b:0e:19:da:bd:27:b4:7d:b7:96:7f:16:
         24:8d:2a:46:f4:b0:d2:53:2b:e6:67:02:37:d8:64:12:58:27:
         d9:7e:1b:74:7a:50:e9:59:21:be:fa:a3:e1:aa:f0:ae:02:4a:
         f7:84:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:36 2026 by rpki-client