Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
File:                     c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json)
Hash identifier:          oOFHWqwT03DufaevSpYGJ1tajWWoWXeTBmhobecPZJM=
Subject key identifier:   DA:AB:FF:02:E2:21:26:AE:D4:BD:02:B1:B9:E6:C0:14:F1:35:64:99
Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A
Certificate issuer:       /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
Manifest number:          CC
Signing time:             Thu 23 Jul 2026 08:49:19 +0000
Manifest this update:     Thu 23 Jul 2026 08:49:18 +0000
Manifest next update:     Thu 30 Jul 2026 08:49:18 +0000
Files and hashes:         1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: bz0wpQdDV7a9V0KRb4XRQRn/Nryi5ss81cY9qd6LPLk=)
                          2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: sAUXemNxO6xniEk3FsI/MUCXegnzm3Yy4E2YL2XqTBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl
                          rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A
        Validity
            Not Before: Jul 23 08:49:18 2026 GMT
            Not After : Jul 30 08:49:18 2026 GMT
        Subject: CN=6a61d58e-7012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:85:49:58:66:a9:47:1b:51:98:7b:fa:80:
                    eb:c6:5b:0a:ef:5c:03:04:24:c7:98:03:4b:1a:88:
                    5d:00:52:4a:03:e7:06:50:05:6b:ba:f9:c6:1d:d2:
                    24:d4:c6:14:68:8c:50:e8:c3:da:2e:98:5e:cc:aa:
                    e0:72:5d:92:dc:c5:51:d6:57:ef:c7:57:1b:f7:d3:
                    8a:99:2f:f9:1c:3d:c0:34:02:43:25:44:6b:11:5b:
                    55:1c:c9:d5:62:c7:4e:40:08:d5:a6:97:b0:15:80:
                    70:84:34:05:7a:ff:66:15:32:aa:91:d5:ce:57:cd:
                    70:dc:05:9e:fc:16:de:e5:b4:5b:3c:cc:91:05:93:
                    00:44:62:8b:b5:4d:bb:9b:66:e5:03:cd:25:49:8e:
                    85:8b:64:24:96:26:fc:c9:4e:cb:a7:37:e6:3a:63:
                    25:ff:20:2a:b5:a7:a2:f5:ce:84:56:c5:a6:9d:e3:
                    7e:99:bb:ed:a4:05:79:b6:48:3c:d6:9c:01:08:63:
                    c6:23:6e:e1:3d:6d:48:56:53:ee:28:62:f1:ac:3f:
                    f9:df:ec:1a:95:51:f6:32:da:3e:c8:6d:e9:12:4d:
                    d3:ca:2d:48:4a:6e:71:bd:ac:ca:b9:34:23:81:3b:
                    ea:59:ed:bb:02:49:bc:b4:28:88:c2:7c:45:0a:50:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AB:FF:02:E2:21:26:AE:D4:BD:02:B1:B9:E6:C0:14:F1:35:64:99
            X509v3 Authority Key Identifier:
                keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:74:35:62:2b:25:29:30:fb:92:56:e8:b5:38:c1:08:6c:14:
         be:bf:2d:3f:08:22:94:68:e2:32:ee:3e:26:a7:66:af:cf:b2:
         e4:10:f0:11:e5:3d:47:bc:46:25:53:2a:ac:76:55:4c:83:27:
         04:55:e7:1c:a2:16:79:21:be:6f:32:13:87:25:b9:da:3d:64:
         c6:d1:36:33:ee:d4:c0:f7:3e:26:71:5b:d1:7b:1f:cd:2f:30:
         d5:bc:f2:b4:ac:84:eb:7d:25:ab:11:5f:5a:c8:d1:3b:f1:0b:
         2c:6d:24:8a:29:dc:49:e9:37:ef:a2:c2:d2:a9:bf:25:16:80:
         af:21:63:cb:f8:de:51:6c:e4:36:a9:45:e5:56:f6:93:9e:c5:
         f6:c4:33:cd:06:d0:3f:d7:72:15:a2:b7:b5:28:48:27:bb:9e:
         72:26:2f:9b:bb:01:7a:08:ed:50:64:0b:67:0b:50:c0:78:98:
         56:f9:32:41:d8:38:62:e9:15:5d:70:1d:c1:5c:a8:02:3c:0c:
         b0:e5:1a:3b:f0:5a:fe:2b:8d:c8:93:f1:3a:e7:69:ad:91:a6:
         84:a2:ce:7c:31:ad:02:b4:a8:13:94:ee:a5:11:87:e5:6e:e3:
         0e:81:a8:53:f9:f2:1c:17:d8:ab:57:27:02:68:9d:28:dc:76:
         19:e1:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:50 2026 by rpki-client