Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft
File:                     i99RGJodvfloQ0tec2qpq_1FVhw.mft (raw, json)
Hash identifier:          dIGylLXP327bVkcmDmYrs0dn1OQWzdbytFw4DtRdMeM=
Subject key identifier:   73:08:57:4C:CA:88:66:F9:2B:23:24:0B:F1:8E:F0:8B:52:B6:89:32
Authority key identifier: 8B:DF:51:18:9A:1D:BD:F9:68:43:4B:5E:73:6A:A9:AB:FD:45:56:1C
Certificate issuer:       /CN=A9119510/serialNumber=8BDF51189A1DBDF968434B5E736AA9ABFD45561C
Certificate serial:       19E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft
Manifest number:          19DA
Signing time:             Thu 16 Jul 2026 16:25:22 +0000
Manifest this update:     Thu 16 Jul 2026 16:25:21 +0000
Manifest next update:     Thu 23 Jul 2026 16:25:21 +0000
Files and hashes:         1: i99RGJodvfloQ0tec2qpq_1FVhw.crl (hash: qKAyEBAQ3wiRPv8/YC95musLhZS8zdnPM1IbZfY97WQ=)
                          2: F13A6FB883D011E7948A8052C4F9AE02.roa (hash: OHaTxR8tHvS18hDcZnJILMVzVSAyU3o/tIVwAUWjONs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.crl
                          rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6629 (0x19e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119510, serialNumber=8BDF51189A1DBDF968434B5E736AA9ABFD45561C
        Validity
            Not Before: Jul 16 16:25:21 2026 GMT
            Not After : Jul 23 16:25:21 2026 GMT
        Subject: CN=6a5905f2-24e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:9d:07:b9:21:02:07:c6:e0:ac:58:28:c2:
                    98:8f:65:99:a1:56:82:8e:b3:d0:37:45:c1:9c:7c:
                    94:d5:85:33:87:d0:be:09:5f:90:0a:01:53:2b:b9:
                    37:45:5b:7b:31:33:35:f8:7d:1f:74:5f:d8:64:ec:
                    56:f9:d8:bc:6b:79:58:04:ba:66:eb:3b:de:ae:12:
                    70:ea:c8:33:ec:5c:a2:5a:65:06:19:85:5c:bc:07:
                    e5:6b:d7:76:1c:5d:ee:11:cc:c3:e5:db:9c:c7:52:
                    c5:7b:3c:cc:08:d7:1c:aa:9a:05:f4:e7:2d:f4:db:
                    ee:15:05:e3:67:41:f8:59:39:e8:62:2e:db:5d:4b:
                    ff:5c:9d:8b:fc:98:e7:5f:aa:cd:57:e9:56:96:e1:
                    f5:31:ea:8a:8e:1a:81:d8:74:fd:87:93:8b:69:6c:
                    2d:8c:74:04:86:f7:21:70:c4:41:50:39:77:31:0a:
                    16:9f:bc:fa:26:48:29:8e:50:e4:ad:c5:25:08:f3:
                    f6:b6:a0:90:c7:5b:55:43:42:98:be:33:df:e1:39:
                    65:80:74:84:3a:ef:56:80:4f:51:f1:2f:8f:f8:f9:
                    7c:ce:4d:6c:85:b5:3e:2c:10:51:a9:08:71:47:eb:
                    4b:d8:f6:83:c1:d4:98:cf:b7:45:88:2f:be:93:d5:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:08:57:4C:CA:88:66:F9:2B:23:24:0B:F1:8E:F0:8B:52:B6:89:32
            X509v3 Authority Key Identifier:
                keyid:8B:DF:51:18:9A:1D:BD:F9:68:43:4B:5E:73:6A:A9:AB:FD:45:56:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:96:e7:a1:25:f8:b9:82:a2:49:47:e5:c3:14:c1:45:fe:91:
         e5:f1:4d:2e:85:a4:db:8f:a0:c9:d0:e6:02:10:6b:57:ba:b7:
         9c:17:12:58:2a:ad:00:1d:30:a9:7c:f0:9e:06:71:3b:ca:37:
         f1:4d:04:38:79:fe:ea:3a:12:eb:bf:f7:4d:eb:fb:02:3b:36:
         27:f4:9f:8e:8c:91:87:c7:2d:93:9d:1f:ed:f4:9b:6e:33:17:
         97:c0:be:81:d2:4f:13:ea:58:8d:1f:a5:0d:64:3e:05:10:ae:
         db:76:76:62:8d:d4:4c:11:0a:89:41:a8:30:b7:0e:80:00:3f:
         e7:2d:af:fd:1c:ee:cc:e1:71:d5:bb:b4:9e:8d:54:96:ed:fa:
         e8:be:0d:fd:b3:46:6b:9b:0f:f0:9a:9f:6b:50:67:ed:cf:9d:
         f1:f6:a4:93:0c:89:0f:72:4b:ea:0f:67:51:da:f2:af:08:e0:
         32:d8:df:55:6d:d6:5e:ad:fb:b3:c1:ff:a9:8a:0f:b7:5f:dd:
         b9:de:99:95:eb:7d:64:d1:47:a5:7e:2f:44:b3:f3:58:3e:7d:
         a9:2f:4a:7f:eb:3c:de:bc:2f:ea:80:b6:07:1b:f3:32:23:dd:
         9d:f0:d7:36:c9:02:23:0f:cb:cd:4a:1f:75:a9:db:0e:5c:25:
         6f:a6:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:21 2026 by rpki-client