Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft
File:                     e0Coz49PGgbDbiA08Yo4v5jKWxg.mft (raw, json)
Hash identifier:          QO1CL/LFwwMZvDcrMTfQcUSScYUF/Y9V7sju89hfg30=
Subject key identifier:   27:F9:11:B8:02:C0:8D:B1:CA:A1:36:47:0C:C7:A8:98:8C:C8:37:9A
Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18
Certificate issuer:       /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft
Manifest number:          025A
Signing time:             Tue 21 Jul 2026 03:28:18 +0000
Manifest this update:     Tue 21 Jul 2026 03:28:17 +0000
Manifest next update:     Tue 28 Jul 2026 03:28:17 +0000
Files and hashes:         1: e0Coz49PGgbDbiA08Yo4v5jKWxg.crl (hash: laIPLkr0l+YCjcFcYX9d2w1LsGzAPllDvVj3dTs/cHw=)
                          2: 2F9915D8718D11EE97E3E022C4F9AE02.roa (hash: GrGkG20pVLIXaVavRxjSp69qWiDnznKbma4BJAp5ZPg=)
                          3: A74C3132F49211ED8659177BC4F9AE02.roa (hash: Nrh6V0U+1Nnn8AOUdT5avxBPzS8RcFqGhKo5PfZIjZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
        Validity
            Not Before: Jul 21 03:28:17 2026 GMT
            Not After : Jul 28 03:28:17 2026 GMT
        Subject: CN=6a5ee752-5362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:88:3d:a1:e2:aa:82:b4:23:77:44:02:96:
                    7c:1b:fa:41:20:d5:05:50:9e:f8:b4:4d:d4:ac:84:
                    f3:c0:55:47:a8:b0:6b:b4:af:bf:6f:8a:c8:0c:f0:
                    80:c8:2c:46:72:6f:80:20:27:f4:de:cc:31:f9:9f:
                    f2:bf:b6:a1:c3:47:a4:4e:6f:1a:5c:a6:6b:99:45:
                    7a:84:0a:e0:60:27:0d:48:9d:fd:eb:f4:11:d0:f5:
                    5e:76:0f:6d:5d:f8:63:f7:3c:0a:4f:a6:76:ea:87:
                    b4:03:22:4e:e1:6a:65:22:27:82:f0:a8:66:9a:11:
                    c7:c7:f5:82:ff:73:99:ac:68:24:8b:38:29:dd:56:
                    a0:15:bf:0f:e4:0d:3c:83:d9:ce:bf:d9:7f:46:8c:
                    71:e7:4b:5a:4b:75:b2:cf:df:91:d1:83:fa:6b:d1:
                    52:36:56:cf:4c:7a:f3:f4:62:56:b3:d9:a6:43:e7:
                    a8:54:91:c6:49:44:ab:54:1d:5b:9c:b8:53:02:a2:
                    03:7d:9a:7b:6a:b1:34:8f:4d:a0:df:11:a6:73:fe:
                    9a:2e:ac:7f:9f:c5:59:67:a0:f8:8a:fb:01:48:76:
                    0c:96:fe:cc:a3:77:10:f9:71:da:d4:48:a6:e4:ed:
                    41:ba:d3:45:21:94:94:28:38:0a:f9:78:a0:cb:0e:
                    72:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F9:11:B8:02:C0:8D:B1:CA:A1:36:47:0C:C7:A8:98:8C:C8:37:9A
            X509v3 Authority Key Identifier:
                keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:d2:70:b0:8c:d6:37:2b:ed:f0:cb:d5:44:4c:b5:c9:81:
         d5:8a:ed:5c:7d:a8:f7:66:47:4b:58:36:7e:df:dc:25:03:fd:
         41:5c:28:7e:19:0f:73:a0:a1:b5:b5:c2:3f:24:a8:32:25:ba:
         e2:e4:53:5b:48:11:cb:46:77:76:6d:40:49:93:d1:7a:9f:d7:
         81:de:c6:77:49:f0:b1:8f:fa:94:e3:08:7c:61:d8:32:f8:8f:
         44:5c:88:3b:57:e0:06:b6:fb:3b:b5:27:27:1f:bd:a8:ae:a8:
         51:45:fe:bb:79:ad:84:1d:39:ad:fd:26:20:a1:1d:01:4a:b6:
         aa:fd:0f:03:81:b1:5c:4a:27:3b:e6:f2:d1:b5:be:a7:e8:bb:
         f6:1b:58:13:47:16:de:76:bc:89:68:bc:2f:2c:a6:c7:4d:62:
         2a:b2:ef:96:80:5b:c1:50:6a:a8:a6:21:5b:60:a3:9c:76:e8:
         7b:6d:16:3f:a3:1b:55:0d:b8:56:09:1c:b1:69:0a:6d:0f:a0:
         1b:ae:3a:65:21:17:36:29:03:fd:50:e3:f8:34:5e:10:06:ed:
         c8:ad:c7:de:71:02:5d:0a:d1:05:3f:fc:77:df:6c:7d:cf:cf:
         ac:6a:3d:aa:b2:72:d4:1a:64:08:a5:2d:cb:d0:15:f2:67:13:
         3f:24:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:08:20 2026 by rpki-client