Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File:                     fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier:          68Ik7GMjyiFCJFm2isb0TTN0K/nOIBG3KR4l0Zu+uV0=
Subject key identifier:   C2:B2:05:A8:31:BD:EF:C0:EA:B8:DC:D2:FD:5E:34:F4:0C:F7:B3:CA
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer:       /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial:       0714
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number:          070C
Signing time:             Thu 16 Jul 2026 22:31:28 +0000
Manifest this update:     Thu 16 Jul 2026 22:31:28 +0000
Manifest next update:     Thu 23 Jul 2026 22:31:28 +0000
Files and hashes:         1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: 1zWs/WqnLPPCCsCuTcOwvWZFIE6Nc2sa56W8SO0NQ/s=)
                          2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
                          rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 22:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
        Validity
            Not Before: Jul 16 22:31:28 2026 GMT
            Not After : Jul 23 22:31:28 2026 GMT
        Subject: CN=6a595bc0-ce32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:bf:e4:a2:7b:05:20:1f:de:89:f9:12:62:
                    ab:c8:11:5b:d1:03:38:c7:6b:86:6b:8f:3a:60:a9:
                    99:bf:9c:12:b8:d3:01:37:2a:d3:0c:e3:df:b4:6d:
                    e1:74:d6:f5:36:60:0e:62:f7:21:dc:d6:e1:84:08:
                    9b:6a:aa:ef:7a:a1:84:9f:27:1c:09:c7:a8:f4:cc:
                    d1:a2:ea:94:b6:db:6c:4d:ef:28:48:14:d7:05:68:
                    4a:b4:90:0b:ef:f9:ad:67:14:bf:a4:fd:67:82:49:
                    60:37:a5:78:cc:ab:7d:77:fa:12:d5:bc:02:cb:c6:
                    40:fe:86:95:42:3b:bb:34:22:0b:08:17:8f:82:cc:
                    bc:5d:4b:dc:b0:db:5e:0e:52:4d:9b:81:a5:ac:f6:
                    84:87:5e:4b:70:b9:41:bf:bb:7c:96:56:77:c0:13:
                    b1:e2:46:ec:38:77:64:f2:02:62:18:0e:de:a3:48:
                    62:97:49:52:2a:6b:89:51:2b:b8:20:e4:29:9e:18:
                    fc:b0:da:77:4e:49:21:28:0b:d5:dc:7e:8a:0b:a4:
                    c0:b6:5c:58:50:e7:97:2f:16:a6:6d:c7:e0:df:ad:
                    d7:81:82:30:62:2c:13:49:0a:15:e8:89:9d:13:5b:
                    82:be:83:45:27:7f:1d:32:65:9a:1e:a3:d7:83:6c:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B2:05:A8:31:BD:EF:C0:EA:B8:DC:D2:FD:5E:34:F4:0C:F7:B3:CA
            X509v3 Authority Key Identifier:
                keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:30:3e:37:bf:a6:06:18:b5:80:bd:be:b0:11:65:30:0b:
         17:a4:04:bb:86:8d:0e:c5:7a:f1:5e:2d:20:0d:ea:f5:a1:46:
         b2:0a:52:af:d1:b2:a5:d0:92:b2:6e:e4:88:30:15:f4:d5:64:
         f6:bb:26:4d:7f:76:88:7d:38:d5:38:d5:6d:9e:a0:2e:c6:77:
         96:36:17:a6:98:e5:9f:a9:ec:9a:2a:97:9e:c2:da:c8:3c:4e:
         88:04:ac:7d:83:d2:25:f7:8d:3a:de:58:de:e0:0e:b8:06:6d:
         0a:46:52:c4:90:39:9c:a6:4b:c7:fa:3c:80:1d:c3:91:b8:03:
         ec:f8:d6:0b:a7:04:f1:bf:3d:e0:64:51:d8:9f:3d:aa:09:42:
         1c:13:b2:ba:1d:93:29:66:87:24:9c:34:a2:78:b8:8f:6b:89:
         d5:24:63:c6:3c:62:79:57:b0:0c:b1:1d:50:8d:0c:ad:f2:5f:
         c2:33:11:5f:37:94:27:5b:b3:6d:f3:71:b2:f8:bd:73:9e:07:
         f9:66:02:c5:02:12:ce:d5:ec:5c:4f:24:40:41:8c:80:4f:89:
         25:c0:59:9e:30:11:30:b8:f0:aa:db:98:c5:cb:d7:94:e3:f4:
         68:75:c3:5e:0a:42:9e:17:47:ad:2a:f8:88:c4:1c:a0:7a:73:
         4e:d7:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:29 2026 by rpki-client