Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File:                     sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier:          tf5nDybMiRO0kxPTmyT9zFHLhnzVGmb100PTt8qNCrU=
Subject key identifier:   C9:A8:63:B7:35:95:B1:D9:9B:B0:53:4C:54:05:26:D3:11:16:13:15
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer:       /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial:       1403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number:          13F6
Signing time:             Wed 22 Jul 2026 17:02:06 +0000
Manifest this update:     Wed 22 Jul 2026 17:02:05 +0000
Manifest next update:     Wed 29 Jul 2026 17:02:05 +0000
Files and hashes:         1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: n0Zq8hZYvgT6vrBBASk7lCAYct8vbArp2T5nwUr9UMw=)
                          2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: DL6GA/K6cpxzI2cqMbQjFszw1dEV15dZjZ9FhFB5IeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
                          rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5123 (0x1403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
        Validity
            Not Before: Jul 22 17:02:05 2026 GMT
            Not After : Jul 29 17:02:05 2026 GMT
        Subject: CN=6a60f78e-4539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:85:f4:ad:03:a6:56:9c:63:99:55:f9:f5:
                    57:20:d6:21:33:3a:4a:92:39:57:de:38:97:36:16:
                    2d:79:47:26:09:0d:d1:f6:23:96:b2:7f:4f:8e:11:
                    ae:ba:0f:e2:94:a8:08:f2:bd:4f:ed:bb:94:6f:8e:
                    5d:aa:85:d2:06:7b:ab:9e:5e:97:f3:07:b1:3e:8b:
                    88:60:2f:13:e0:4d:25:21:f7:2a:e6:10:30:0b:cb:
                    64:c7:ef:8f:35:f2:f0:12:d5:85:88:1a:c7:db:f0:
                    06:df:c4:29:7f:51:ac:5f:2e:5e:63:e5:b6:b1:d7:
                    e9:52:c2:06:4d:3c:3e:bc:d9:41:a3:b5:1b:2f:73:
                    84:46:c9:1b:49:91:ec:3d:ca:89:b3:6b:62:22:61:
                    d9:f0:15:03:92:0b:29:e8:ee:2e:c2:b7:10:83:76:
                    ae:19:f3:2e:65:ce:a5:c1:f5:69:4f:c2:ab:42:09:
                    43:2f:56:fd:dc:7a:e3:52:da:48:8c:c4:e8:46:bf:
                    fe:10:1e:e5:9f:0f:92:a1:6c:48:7b:97:15:76:fc:
                    50:46:35:b0:9c:da:88:36:d8:55:d2:70:a0:f7:02:
                    7b:91:c1:af:99:e0:94:38:0f:98:0d:52:b5:98:0c:
                    05:b2:41:d8:6c:2a:2e:e5:28:2f:93:cf:cd:24:86:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A8:63:B7:35:95:B1:D9:9B:B0:53:4C:54:05:26:D3:11:16:13:15
            X509v3 Authority Key Identifier:
                keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a0:d8:8a:22:ee:33:2b:bb:d8:99:7e:d8:ef:58:49:14:9a:
         1e:22:b4:79:cc:ca:4a:8d:20:4a:55:5b:e2:c9:fc:61:9b:ac:
         be:f3:74:6c:a0:c0:e2:16:a3:0e:35:a1:5d:ac:65:48:ca:33:
         95:5e:b6:95:4b:81:fb:92:09:f5:ab:b0:d9:d2:3a:c6:96:0e:
         c8:12:a7:60:39:44:3e:60:90:ad:f5:8d:6d:3e:18:be:da:08:
         41:7c:0a:53:95:f3:63:7e:16:95:75:af:09:e6:2c:69:8a:c9:
         b6:4a:ce:c7:36:8d:66:5e:7f:77:1c:fb:9d:38:1a:8b:15:b1:
         de:77:b7:2d:db:1c:50:99:82:c2:68:03:0c:3b:9b:f6:14:83:
         de:69:d2:3a:10:91:c2:f5:f7:62:7a:c6:65:21:4a:b8:3a:fe:
         4e:7f:06:bf:c1:08:13:bc:7f:d2:f7:28:3c:d9:72:1d:67:dc:
         e3:7d:8b:a2:89:9e:4a:a7:f4:15:16:6f:8b:e5:88:31:a9:67:
         57:58:85:0a:d6:97:f4:a3:3a:fb:b7:86:23:d3:f9:fa:d5:ee:
         bd:9d:c3:e4:9e:f5:2d:51:8d:6e:65:a8:ad:d9:16:76:ce:1f:
         df:3f:13:f8:43:34:9e:67:e0:fd:0c:47:6c:b6:86:55:e5:dd:
         15:ed:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:24 2026 by rpki-client