Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File:                     1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier:          G66KxirprUipSslBmacmpfuajYpjBEhgU46uksiEM5c=
Subject key identifier:   F8:6C:B2:2C:FA:CF:3F:1A:4F:0D:C5:2F:62:95:C4:19:B4:64:AB:07
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer:       /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial:       312E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number:          30FA
Signing time:             Wed 22 Jul 2026 15:31:25 +0000
Manifest this update:     Wed 22 Jul 2026 15:31:24 +0000
Manifest next update:     Wed 29 Jul 2026 15:31:24 +0000
Files and hashes:         1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: 9KS9wAyUNUJtXA+g+6SWqKffAAcCBz8D7r2vVlaBWFg=)
                          2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: B5rWzBjI7BfkOi4vSBBhpW3ifXKdbuWjkXECi3PmcCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
                          rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12590 (0x312e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
        Validity
            Not Before: Jul 22 15:31:24 2026 GMT
            Not After : Jul 29 15:31:24 2026 GMT
        Subject: CN=6a60e24d-6042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:0b:66:0b:98:57:5a:66:12:32:24:42:ed:
                    d2:a7:2f:e2:81:17:36:ea:2a:ea:ec:43:a2:db:04:
                    37:2c:c2:87:43:ef:ef:9f:4c:93:04:b1:d9:1f:b4:
                    46:87:8b:68:f8:cb:70:d3:b9:1a:52:2b:97:df:52:
                    e3:1c:be:fc:77:5e:fe:19:e9:f1:4c:cf:1a:e1:c5:
                    7b:92:85:3e:97:ba:09:66:52:42:3d:e1:9c:50:26:
                    93:0b:3b:ab:e0:45:3d:03:3e:46:e4:85:fc:da:16:
                    b6:52:10:72:d2:df:d6:d3:fe:8e:8c:30:65:11:a0:
                    23:b5:10:c2:2d:59:a3:a2:f8:2c:96:3a:00:24:bb:
                    7c:09:2c:f1:6b:70:5b:f8:ed:48:4c:7d:c6:c9:e9:
                    15:07:bd:fa:99:62:04:36:07:19:59:cc:bc:75:06:
                    75:93:62:ff:c5:09:ac:7a:64:26:95:03:3b:92:5f:
                    a6:4c:14:2e:ab:ed:da:6a:33:d0:32:60:55:a1:af:
                    97:a2:57:98:cc:ae:5f:d3:fe:03:4c:71:8e:49:e9:
                    09:ef:fb:84:46:96:2e:49:28:fc:ec:6a:42:f9:cf:
                    33:64:a2:a6:c7:0c:0f:17:60:84:07:60:be:0a:ac:
                    60:2c:9b:b0:99:d6:7a:81:d8:82:56:24:ce:45:50:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:B2:2C:FA:CF:3F:1A:4F:0D:C5:2F:62:95:C4:19:B4:64:AB:07
            X509v3 Authority Key Identifier:
                keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:fb:3e:05:fa:56:cb:a7:f7:1e:a9:e9:8f:4b:ce:77:1e:
         98:15:82:b6:22:4b:55:c5:73:d0:1b:9b:b4:64:7a:0f:ff:ec:
         94:c2:03:e0:a2:b8:a5:65:31:27:09:65:54:ef:97:c6:84:ba:
         28:92:a6:77:df:ea:63:7e:82:54:cd:16:b5:2d:03:dc:c6:38:
         03:72:11:ef:55:71:e8:e0:6e:d6:b1:f3:07:b3:a3:92:1d:87:
         48:27:14:87:60:d4:aa:f2:b7:bc:eb:6f:64:e1:ba:aa:84:9a:
         34:21:61:d5:ef:8a:82:41:c5:8b:99:06:9b:d9:44:69:25:05:
         be:1a:b7:92:6b:8f:c7:b3:4e:b6:a1:3c:04:a5:45:d2:46:7d:
         24:1c:a2:e6:d7:28:e6:c2:6f:08:47:c5:9d:69:5e:b9:86:de:
         0c:40:3f:70:bd:19:38:21:bd:bf:c7:4a:fc:c8:82:f3:97:c7:
         96:41:c0:66:9e:79:86:67:7e:ec:61:36:6d:3d:3f:e9:0a:cb:
         6c:be:84:e7:14:4a:46:3a:85:eb:62:c8:93:c3:ec:68:ad:fa:
         78:1e:45:a1:0f:04:75:26:34:c9:dc:04:a4:2b:00:5c:e9:77:
         42:df:f2:a4:a8:c2:7b:21:36:29:88:d4:06:46:9b:c5:97:35:
         9f:1f:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:39 2026 by rpki-client