Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
File:                     rXVQArP_DnYnxKnah3pQV1LgFvY.mft (raw, json)
Hash identifier:          OHeveqlu89mdqVMljYcNw6cn9JyfNTVCyJueyQX9wcM=
Subject key identifier:   42:CC:B6:38:25:6F:E3:6C:B5:17:87:4C:B6:C3:CC:2F:46:E2:1E:1C
Authority key identifier: AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
Certificate issuer:       /CN=A9145CB7/serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
Manifest number:          51
Signing time:             Fri 17 Jul 2026 09:34:48 +0000
Manifest this update:     Fri 17 Jul 2026 09:34:48 +0000
Manifest next update:     Fri 24 Jul 2026 09:34:48 +0000
Files and hashes:         1: rXVQArP_DnYnxKnah3pQV1LgFvY.crl (hash: avyOUBJdaoiTioue50f5N/raOp6KaHDOrACA63xH0kY=)
                          2: E3565366082A11F19BFE93E8353D8C67.roa (hash: /aCKUkFizA70YgvpSSlO/F5nZ+3741gcJyJ2Mit8OBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
                          rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145CB7, serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
        Validity
            Not Before: Jul 17 09:34:48 2026 GMT
            Not After : Jul 24 09:34:48 2026 GMT
        Subject: CN=6a59f738-d97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bc:87:da:4d:73:1f:f3:eb:7b:96:b3:95:a8:
                    79:62:d3:32:9b:7b:73:33:cb:7c:3b:2c:a8:80:13:
                    a8:2b:b3:b3:63:08:95:0b:17:7b:9a:1d:52:b7:23:
                    82:2c:b6:c0:0e:c9:cc:10:44:5a:89:ab:6a:4b:8b:
                    12:02:d3:79:aa:b9:83:8a:83:f4:71:f9:73:86:a3:
                    22:3d:43:2e:e9:13:bf:1c:a1:59:69:4a:b5:cb:42:
                    61:4e:7b:c1:24:37:b6:ce:39:82:d4:8d:81:2f:e1:
                    b1:48:fe:8d:12:b1:01:74:66:aa:1b:77:5c:dc:2e:
                    f1:67:44:df:63:ad:65:5f:26:4a:0a:e9:83:ac:0a:
                    59:7f:59:0b:c9:6d:f1:aa:1c:eb:0a:b6:85:f3:0a:
                    76:8a:c5:cd:1c:ee:07:e4:50:ef:a4:fc:c6:fd:36:
                    16:8e:e5:a6:72:5a:9b:81:cb:8d:f6:bd:d1:eb:b8:
                    01:83:bc:32:39:9e:27:1c:c8:2b:02:5c:85:97:07:
                    ea:e5:c5:ba:34:f3:1d:17:e5:e6:a8:35:91:9f:dd:
                    f9:28:2d:c5:1e:8d:95:e0:e4:6c:86:34:33:1f:3b:
                    2e:67:50:3b:86:21:e2:14:96:2d:b9:6a:e9:b8:84:
                    85:39:67:3e:62:33:fe:a7:f3:00:2a:0c:0c:6c:e8:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CC:B6:38:25:6F:E3:6C:B5:17:87:4C:B6:C3:CC:2F:46:E2:1E:1C
            X509v3 Authority Key Identifier:
                keyid:AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d2:fb:00:a0:63:bb:a2:6e:f4:70:79:68:65:0b:8b:29:9f:
         49:f3:82:29:16:95:ca:c1:e4:fd:d1:a2:c5:36:b7:23:40:7d:
         90:65:41:b3:34:1b:2e:8d:b2:e4:3e:35:d8:36:f5:5b:08:58:
         43:32:76:16:52:f9:76:ec:a7:ba:ca:de:67:f4:2a:b8:fa:fa:
         cd:25:e6:59:62:7e:6b:8e:20:1e:21:14:2c:32:ef:de:ea:38:
         fc:6f:96:83:9d:08:4e:13:d9:51:a8:e8:93:67:99:f3:c0:ad:
         6b:d3:6d:57:5d:18:5f:b9:23:9e:37:87:23:e6:ca:93:c0:58:
         aa:84:e1:91:75:b5:de:fc:36:34:d5:60:d4:89:3b:d8:37:25:
         c0:e6:b8:12:df:26:67:34:2f:3c:7f:83:34:a7:4a:38:ff:ce:
         f1:34:30:fb:10:0e:7d:bb:fb:27:3e:a2:b2:a9:60:3d:6b:1f:
         19:fe:ad:84:9d:9b:1e:c2:7d:16:ea:b6:7c:e2:1e:62:bc:c8:
         f2:e6:75:06:7d:ee:ba:e7:09:7b:a4:18:40:f1:3b:7b:56:36:
         7a:74:27:8f:cc:ec:6a:1d:9a:60:5c:d9:a2:b4:c8:e8:81:73:
         66:16:ee:3b:66:ca:e4:f8:56:bc:9a:e4:c3:54:ae:ca:02:26:
         1f:ab:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:33:13 2026 by rpki-client