Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
File:                     15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json)
Hash identifier:          oJXNqywDEs3yFvkpvvECOGYyR5erpkyIpduBVIZ0L2c=
Subject key identifier:   E7:F0:F9:18:BD:61:E4:06:B4:78:6A:F5:3D:3A:8A:7D:E7:13:27:BF
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Certificate issuer:       /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
Manifest number:          0237
Signing time:             Fri 17 Jul 2026 03:32:48 +0000
Manifest this update:     Fri 17 Jul 2026 03:32:47 +0000
Manifest next update:     Fri 24 Jul 2026 03:32:47 +0000
Files and hashes:         1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: xB8pIwsa9W0iQFGkVYnEYWoMEtWRf4U+pjGvpMNj/rA=)
                          2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: oPiJqmRhnsqJ9VzYZizn2gWr3NtxijO+hht/Af3EOxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
        Validity
            Not Before: Jul 17 03:32:47 2026 GMT
            Not After : Jul 24 03:32:47 2026 GMT
        Subject: CN=6a59a25f-07d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:d4:d1:d0:97:aa:b3:04:5e:b2:92:b9:e4:
                    07:b6:b4:82:14:7d:0d:bb:af:76:c9:5b:5f:6d:29:
                    2d:dc:f8:1b:c5:89:51:0f:08:73:88:e5:a9:a5:6b:
                    f7:4c:31:24:bc:04:f6:95:24:1b:bd:8b:a5:6d:c6:
                    22:0c:26:dd:ea:80:ad:eb:6d:29:c2:12:06:17:51:
                    b7:e3:ee:22:b2:38:a6:db:82:e8:b5:6c:0c:54:51:
                    e0:05:d6:cd:26:ec:a3:e2:8d:a3:52:84:af:8c:e7:
                    d8:b2:30:ce:08:02:af:95:8d:fd:5e:68:c0:00:dc:
                    46:8f:0d:3f:b6:6b:e0:42:2f:8a:08:66:d6:d5:59:
                    06:5e:39:4e:75:0a:4d:8e:e3:73:75:72:7d:43:7f:
                    d1:29:0b:98:fd:55:3a:6f:1d:e2:b5:c4:2b:31:f1:
                    f6:0e:ca:15:f2:19:de:7a:fc:b5:e5:f7:88:af:da:
                    4f:8c:b4:7a:9c:1e:9d:ac:0e:2a:02:a6:7c:ac:13:
                    59:76:57:32:17:5e:02:95:cc:c9:49:f2:6c:af:6e:
                    19:78:f6:bf:57:3d:9a:98:8c:f4:51:f5:64:a0:44:
                    aa:1b:69:4b:13:1c:06:ec:08:3a:6f:2d:04:89:8c:
                    63:19:20:15:9b:02:f0:3e:17:e6:51:09:2b:ff:9d:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F0:F9:18:BD:61:E4:06:B4:78:6A:F5:3D:3A:8A:7D:E7:13:27:BF
            X509v3 Authority Key Identifier:
                keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:17:cc:8c:17:ea:f0:e6:82:36:b6:2f:c2:60:57:fb:82:
         18:23:b3:ce:1b:01:e4:4d:4c:c6:5f:be:48:6b:50:8e:86:d5:
         93:4b:1a:2a:83:e6:18:62:02:47:ba:b8:a5:9b:8c:1f:53:f2:
         eb:10:13:88:e4:89:e0:10:f4:81:b8:e9:54:87:fd:0f:76:2a:
         31:19:9a:ac:45:bd:d0:06:a9:c8:e2:ff:e9:83:54:1f:b6:4c:
         3d:13:ba:c0:bf:f2:24:a1:60:1f:c5:f9:c7:18:43:94:b5:9c:
         47:aa:18:16:a8:13:c6:4d:4a:0e:dc:55:f6:e1:84:67:b9:d5:
         66:81:32:42:02:73:11:09:8b:6e:70:d1:2a:16:3b:73:1c:6b:
         a9:1d:99:35:31:60:11:da:4d:cc:00:20:39:76:43:bd:0a:b3:
         41:1e:1e:39:33:cf:50:75:39:2a:f6:a6:47:35:11:42:88:87:
         b2:28:57:de:7f:c7:12:7c:f8:15:bb:a1:37:78:34:12:f6:93:
         7f:a5:88:21:21:8a:f7:2e:5c:0c:dc:fd:ad:53:93:42:d0:5a:
         ff:44:bf:19:64:1c:e6:3b:20:e1:6f:26:ef:68:06:77:7a:48:
         12:14:37:f8:c4:21:78:b0:27:12:37:b5:84:31:de:13:22:6a:
         bf:a1:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:23:00 2026 by rpki-client