Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.mft
File:                     CPjroqSGttij8nlF1NQ_TaFArYY.mft (raw, json)
Hash identifier:          5mjYgpkL7B3BIIBqSUpj7bIQ1zM7uuv3hn+bgJNrpFA=
Subject key identifier:   C7:FE:D1:20:C4:4D:77:E3:4A:A1:5D:42:2E:08:D7:87:86:E6:11:AD
Authority key identifier: 08:F8:EB:A2:A4:86:B6:D8:A3:F2:79:45:D4:D4:3F:4D:A1:40:AD:86
Certificate issuer:       /CN=A9132336/serialNumber=08F8EBA2A486B6D8A3F27945D4D43F4DA140AD86
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CPjroqSGttij8nlF1NQ_TaFArYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.mft
Manifest number:          07
Signing time:             Fri 17 Jul 2026 10:32:03 +0000
Manifest this update:     Fri 17 Jul 2026 10:32:03 +0000
Manifest next update:     Fri 24 Jul 2026 10:32:03 +0000
Files and hashes:         1: CPjroqSGttij8nlF1NQ_TaFArYY.crl (hash: 0z/FQIe0WefWMYPVDo6rdar/RgD7J6asfKl7OVg8aOI=)
                          2: 7355A0E479A911F1B013AE2794A30FBC.roa (hash: sabTo3YOIwQeO/1bHAZgwBZt4098HDK7V0AISW0p8SM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.crl
                          rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CPjroqSGttij8nlF1NQ_TaFArYY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132336, serialNumber=08F8EBA2A486B6D8A3F27945D4D43F4DA140AD86
        Validity
            Not Before: Jul 17 10:32:03 2026 GMT
            Not After : Jul 24 10:32:03 2026 GMT
        Subject: CN=6a5a04a3-c9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:45:4b:98:7e:20:d2:3d:75:23:93:bb:7c:c4:
                    5a:9f:53:11:97:9d:f0:d1:63:0b:40:ce:39:c9:16:
                    3e:68:73:8f:35:29:1d:7d:e4:4f:da:66:93:9e:bf:
                    a2:a2:8e:55:94:57:a9:62:08:15:3d:0b:bd:6d:0d:
                    05:5d:d1:d6:04:47:5a:a4:3b:b6:ba:d6:ab:b5:44:
                    a4:ec:fe:41:a2:53:0d:e1:19:45:b7:61:d1:f1:36:
                    88:4a:0c:9e:f8:e6:e7:20:4f:65:bf:0f:6f:23:c1:
                    b1:c6:e2:a1:2e:ae:6b:93:4b:db:be:12:ce:61:14:
                    7c:58:b9:db:69:d0:57:a3:89:c2:98:b9:bb:9c:c6:
                    3e:39:a0:df:e6:1a:9a:79:6a:0a:12:e7:68:fc:58:
                    c8:4c:c7:d4:8c:0a:d6:97:6a:7a:35:dc:7f:a1:c9:
                    a0:b8:59:f0:d8:e4:72:dc:ac:d4:5a:7f:87:8a:8a:
                    14:84:70:d5:38:b2:33:27:25:f2:15:c9:f0:c7:53:
                    fc:af:28:6a:e0:2d:15:66:76:6f:b4:57:6a:c9:cd:
                    3f:d3:34:20:db:68:c8:ea:59:59:f1:16:18:ab:4b:
                    74:2e:5a:a0:5d:d3:81:5a:3a:aa:d1:8e:ab:9e:73:
                    bd:fc:1a:b2:30:ed:e9:31:e7:de:6c:3f:bc:92:ec:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FE:D1:20:C4:4D:77:E3:4A:A1:5D:42:2E:08:D7:87:86:E6:11:AD
            X509v3 Authority Key Identifier:
                keyid:08:F8:EB:A2:A4:86:B6:D8:A3:F2:79:45:D4:D4:3F:4D:A1:40:AD:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CPjroqSGttij8nlF1NQ_TaFArYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132336/98FEBF1079A411F18D0EC0EF92A30FBC/CPjroqSGttij8nlF1NQ_TaFArYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:31:b0:7d:9e:26:b1:4e:e6:11:3e:92:9e:1b:f4:00:e9:ba:
         fb:58:31:98:e8:21:2e:de:01:56:71:f4:eb:19:aa:e0:73:f4:
         04:dc:07:ce:8a:f7:4e:8a:12:24:77:31:ec:4c:1a:8a:9b:ae:
         ee:0b:e6:1c:f9:ce:62:03:26:96:cb:1e:46:be:57:60:52:d0:
         78:a7:93:86:be:1e:4a:a9:03:54:f8:fc:2b:d3:dd:84:67:9a:
         f6:74:30:10:f5:49:d9:b7:2c:82:16:f6:e3:25:60:6a:55:f2:
         95:99:09:1b:5b:70:bb:c0:9a:5c:e3:1f:6c:6e:ba:91:c1:ab:
         16:18:02:f6:3d:c1:87:42:b9:4a:07:fe:7d:a1:fe:cc:50:b1:
         72:43:61:b0:17:b0:22:b0:21:d8:d0:6b:d0:f4:6e:8d:fc:76:
         06:c4:97:6f:31:9e:9c:c2:c4:a9:4c:d8:20:55:a2:dd:07:37:
         12:01:b0:70:d5:7c:6b:cc:9c:f7:00:5b:46:7f:4c:ac:44:e6:
         e5:c8:4c:97:db:0f:a2:92:24:82:f7:c4:e8:7d:91:5a:a9:90:
         13:b9:d8:c3:a3:2b:07:26:19:98:85:78:e4:f1:bb:44:a7:08:
         3d:fa:c0:19:51:67:13:15:b6:e5:1d:48:88:ff:11:8a:7c:84:
         b8:06:d5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:57 2026 by rpki-client