Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
File:                     cxDvrX8opn8UFBjJsRBpULHxnQE.mft (raw, json)
Hash identifier:          ZpcN9usZwcqp+4+Bzf2AuosQBGxQuwWsTTlAiquRsbM=
Subject key identifier:   62:C7:13:59:18:C2:B4:0F:FE:FB:C4:F7:F3:45:9A:D0:C6:DF:A0:31
Authority key identifier: 73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01
Certificate issuer:       /CN=A917C7B9/serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
Manifest number:          49
Signing time:             Tue 21 Jul 2026 10:12:50 +0000
Manifest this update:     Tue 21 Jul 2026 10:12:50 +0000
Manifest next update:     Tue 28 Jul 2026 10:12:50 +0000
Files and hashes:         1: cxDvrX8opn8UFBjJsRBpULHxnQE.crl (hash: DFvPQUoWpHrozNdVUQvOkV31ryG7Rvat2W9vH/YDHqA=)
                          2: BE2F17B615F511F1B7AEABB7223D8C67.roa (hash: zKiNfSZQd+zVTjw6SpG8Cbzd+WL1GkRi9YLy4PP2k78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl
                          rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C7B9, serialNumber=7310EFAD7F28A67F141418C9B1106950B1F19D01
        Validity
            Not Before: Jul 21 10:12:50 2026 GMT
            Not After : Jul 28 10:12:50 2026 GMT
        Subject: CN=6a5f4622-c3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:a7:16:39:93:39:fb:7d:db:76:87:2d:b7:
                    26:b7:89:d5:1b:c5:66:2a:3d:74:f8:69:7e:98:87:
                    3d:48:f3:38:24:bb:e9:44:c9:60:1d:af:1a:8c:db:
                    b8:fe:19:c2:3b:ac:36:41:bc:40:c1:bc:5d:0c:38:
                    19:f7:e6:a7:f2:8f:a3:b6:93:0d:93:cf:98:89:bb:
                    2f:66:40:3b:96:8b:70:af:aa:bc:9b:05:75:3c:80:
                    e4:58:77:e3:2e:88:49:50:d2:c1:79:3a:e6:51:f6:
                    bc:66:ef:77:22:bc:c7:15:e8:08:40:a1:7b:29:ca:
                    91:a4:0b:b5:03:62:52:28:53:b4:bc:ad:17:1f:8d:
                    ca:c3:f8:e7:67:e9:df:e0:e4:cc:79:b9:38:fc:66:
                    c7:d3:7f:c8:71:56:94:77:f7:13:b7:6f:8d:68:44:
                    d8:37:64:93:9e:78:5b:dc:4e:89:90:13:e6:32:9c:
                    b0:d0:7d:d1:6b:07:4b:37:f0:52:0b:1d:87:ef:da:
                    8e:c9:c8:03:b1:6f:c6:a0:13:cf:47:30:ad:90:41:
                    70:e0:65:d9:f9:1a:b7:6b:b5:f7:9d:e5:ee:b2:9c:
                    74:6d:24:e1:c6:11:86:31:ac:8c:0a:96:8e:7b:fd:
                    d8:68:35:a5:4f:67:38:61:c1:9e:26:63:c1:87:73:
                    79:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:13:59:18:C2:B4:0F:FE:FB:C4:F7:F3:45:9A:D0:C6:DF:A0:31
            X509v3 Authority Key Identifier:
                keyid:73:10:EF:AD:7F:28:A6:7F:14:14:18:C9:B1:10:69:50:B1:F1:9D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxDvrX8opn8UFBjJsRBpULHxnQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C7B9/7A3519E815F511F1ACB81DDD213D8C67/cxDvrX8opn8UFBjJsRBpULHxnQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b8:f5:9f:f7:8d:d8:e3:09:bb:86:c4:9d:9a:2e:ae:c9:17:
         08:82:b4:c8:33:0c:ad:40:30:f3:be:99:de:76:e7:ab:d8:97:
         aa:97:8c:70:54:3e:c5:bf:41:b5:a8:2e:ed:e4:ff:bb:f9:5b:
         57:6b:ef:1e:3d:6d:eb:fa:e2:83:0d:95:f8:3f:06:86:d3:ca:
         ce:31:b8:7a:f8:1c:d9:7e:2f:30:58:a3:c1:9a:28:5c:e7:56:
         31:39:48:ac:e1:5f:e9:37:e9:73:65:33:9f:f3:09:e4:2e:2d:
         50:79:77:d4:39:30:d0:34:39:6a:b8:e2:e7:a8:eb:6a:a9:53:
         bb:d7:52:a6:f3:ee:da:61:5d:7f:af:32:82:22:ff:d5:7b:98:
         8b:19:33:68:f0:c2:60:e9:81:aa:36:e2:0a:f2:ed:4f:9a:9c:
         b9:90:3c:fa:b1:5e:99:24:71:3a:94:1c:a3:8b:29:b4:6c:1c:
         b3:17:87:fa:5e:b5:77:dd:df:f3:ed:6c:7f:95:c8:31:06:2f:
         94:54:f9:ef:89:88:19:28:09:8e:e5:82:dc:42:1d:e5:7c:c9:
         73:f4:e2:e5:df:89:b3:b2:c6:68:e8:1e:ea:c0:b8:b4:88:22:
         ca:68:b1:14:31:b5:f4:05:da:90:de:c7:57:a8:f3:55:65:37:
         66:16:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:40:21 2026 by rpki-client