Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File:                     d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier:          gzL1gXHcgCYklLxIBf9XhQO0vzgukMriZ1I8tg/zV7Y=
Subject key identifier:   CF:D3:F9:A4:54:76:EB:89:92:39:AF:3E:9E:79:CC:C4:61:53:D8:11
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer:       /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial:       01F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number:          01E4
Signing time:             Thu 16 Jul 2026 23:23:53 +0000
Manifest this update:     Thu 16 Jul 2026 23:23:52 +0000
Manifest next update:     Thu 23 Jul 2026 23:23:52 +0000
Files and hashes:         1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: PQJGXXW7sWUrXYLeRRmPXFBAmZofCQNxm5bm7ChKPM8=)
                          2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: CK9QQVOiiB542PQgUfZIdXYNAnS5iyZdXbxdEf+gFCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
        Validity
            Not Before: Jul 16 23:23:52 2026 GMT
            Not After : Jul 23 23:23:52 2026 GMT
        Subject: CN=6a596808-ddcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:ed:41:1e:8a:29:13:03:83:a7:a9:e2:58:
                    21:c3:80:d3:01:39:ed:e4:0c:37:02:87:7c:ab:51:
                    8e:73:88:4c:80:f6:a4:27:a6:ed:d4:31:49:3e:01:
                    c2:88:9e:11:b6:f1:94:9d:ce:52:fd:c4:17:6f:ba:
                    5e:e2:08:ae:58:6f:3e:ea:2e:a3:a3:ce:6d:6c:db:
                    5f:3f:13:ac:2e:d6:8c:45:28:7b:f6:f9:83:67:b5:
                    b8:c8:df:9c:f9:7e:55:36:a5:11:cd:b3:07:68:14:
                    8c:f7:83:ac:85:1f:77:9d:41:e7:5d:5d:9c:ee:c5:
                    17:ca:fd:d3:ee:02:c5:4f:c2:b0:ef:5b:12:28:73:
                    b5:85:04:cf:6b:6b:0c:3d:ca:87:68:42:1e:ed:fc:
                    f6:a4:31:f9:9f:e3:bb:9a:31:ea:ca:71:2c:f4:bd:
                    26:12:43:4e:09:57:b0:0b:89:8f:0d:06:01:f7:7a:
                    21:53:ce:10:25:ab:65:9e:d2:d7:46:72:98:cd:cb:
                    71:45:27:53:a0:dd:ac:14:00:2b:63:ea:87:c1:1c:
                    bb:25:1e:ba:e4:dc:78:4a:39:ca:1a:df:02:92:16:
                    34:b3:60:e0:8b:be:f7:d6:62:26:1e:15:a5:28:ce:
                    f4:7f:15:ce:54:4b:95:21:49:70:59:b8:2e:39:99:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D3:F9:A4:54:76:EB:89:92:39:AF:3E:9E:79:CC:C4:61:53:D8:11
            X509v3 Authority Key Identifier:
                keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e1:58:24:96:0b:04:47:f6:4f:37:da:49:59:02:a7:25:a2:
         37:7d:c5:82:ab:8e:1f:58:70:db:ba:ce:4e:22:f0:65:19:95:
         46:62:03:84:c8:50:49:0f:7d:8e:51:6a:f6:d0:5b:64:16:69:
         3e:7e:f7:fa:af:08:90:2f:0d:2d:eb:32:fe:e6:7a:5b:0d:54:
         2b:20:00:45:c9:8f:5a:e9:54:af:31:0c:50:51:ac:a0:b3:ad:
         7c:60:eb:de:ec:ff:73:0c:45:f9:84:2c:74:80:d1:20:0c:db:
         cd:10:0b:54:25:fc:86:42:7f:b1:cb:7f:d9:3a:e2:e3:8a:fa:
         a7:bc:38:bd:36:71:cd:c6:23:23:71:7f:35:89:1f:85:84:69:
         56:33:c4:90:b5:c9:41:4b:dc:88:16:f9:f7:a1:5c:ce:e7:51:
         98:b9:95:44:3d:6d:91:d3:2a:d7:37:d3:7b:da:e4:b5:60:ea:
         aa:04:74:aa:8b:75:1a:86:c1:b9:62:1c:b9:6d:2f:91:94:6b:
         f4:cf:29:dd:e2:44:b4:ea:05:46:23:15:d5:4f:52:3b:c0:7f:
         3b:ef:d6:df:b9:79:1c:f9:66:85:e2:32:1c:55:0f:ec:3e:c5:
         ef:22:cd:c6:2d:23:25:2c:28:82:46:29:5c:29:91:be:71:93:
         7a:38:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:42 2026 by rpki-client