Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
File:                     X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json)
Hash identifier:          TNfm5fxM8LQ1t14KQwzITG69z1+3S6QTRKGJAnUN8+s=
Subject key identifier:   97:40:62:81:CD:55:0F:6B:E1:2E:B0:F0:A2:EE:94:E3:C0:7E:A0:EA
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Certificate issuer:       /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
Manifest number:          02BF
Signing time:             Tue 21 Jul 2026 02:23:44 +0000
Manifest this update:     Tue 21 Jul 2026 02:23:44 +0000
Manifest next update:     Tue 28 Jul 2026 02:23:44 +0000
Files and hashes:         1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: hv6GpqknQml1EA3yWDU3IfmqPcvpZlxIjnNZz3eAZOI=)
                          2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: 18O7Lp0T09zqzj1uz2UvboEJEAG8f//RjAML5YNM31g=)
                          3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
                          rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
        Validity
            Not Before: Jul 21 02:23:44 2026 GMT
            Not After : Jul 28 02:23:44 2026 GMT
        Subject: CN=6a5ed830-2fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:28:55:0b:7e:1d:8d:c4:ad:87:6e:80:5b:
                    52:00:b9:01:3d:ff:eb:b4:76:e3:80:7c:d2:6e:59:
                    fa:09:97:6f:bb:6d:da:c6:03:29:c8:25:11:d0:87:
                    47:7d:25:28:a8:e5:65:60:f6:66:bb:54:02:ce:92:
                    15:74:78:60:58:0e:4d:51:af:0a:12:b1:5d:1e:fe:
                    bf:0a:5e:65:57:74:0e:f8:c3:80:8d:9a:b7:e3:0c:
                    20:9b:ba:d0:db:16:2b:82:41:43:cb:0e:b1:79:24:
                    fa:e1:96:6d:d6:7a:27:c7:76:b3:ca:9e:c5:67:35:
                    f0:50:02:05:56:c9:b4:b3:05:dc:fc:ed:5d:2e:73:
                    e7:a6:b9:c6:95:b1:7d:40:09:ce:24:13:d1:f9:84:
                    ed:82:ba:6a:ac:ee:95:12:83:c0:bb:0e:6b:e1:84:
                    ff:c0:08:40:04:38:68:3a:71:7c:3e:eb:a8:f2:dc:
                    03:01:d4:57:4c:21:ec:d1:5f:79:9b:3e:10:83:13:
                    34:8b:8f:9f:1f:15:de:08:de:1c:44:c2:fb:6f:2f:
                    a7:1d:a0:9f:ff:c0:6e:50:a7:42:94:37:de:9f:68:
                    47:ae:7f:94:13:b2:49:11:59:46:ef:4a:8b:07:3b:
                    f7:12:dc:3a:ae:74:7f:f5:f4:12:b4:7b:b5:fd:27:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:40:62:81:CD:55:0F:6B:E1:2E:B0:F0:A2:EE:94:E3:C0:7E:A0:EA
            X509v3 Authority Key Identifier:
                keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:95:f3:db:03:a6:f4:b5:f2:74:d9:84:58:27:af:05:be:
         3a:85:ba:fc:b6:0a:e9:68:48:5c:6d:d6:9c:28:18:ab:55:b3:
         b3:a5:0c:3f:59:e7:a1:b2:2e:79:66:f2:81:3d:18:ad:85:5e:
         bf:b3:1e:ab:59:73:51:27:43:90:d8:c5:c8:fa:8b:52:f1:1f:
         45:21:c4:6d:b5:61:89:0a:27:35:5f:9a:85:d6:86:03:7e:7c:
         78:6d:b8:ea:00:ad:39:6f:d2:b1:a9:94:07:6e:25:0a:b0:5c:
         79:b5:b0:91:37:cd:12:15:77:40:53:7c:63:20:61:66:44:72:
         fc:6d:04:df:9a:31:54:81:40:e3:b3:b6:f2:0e:20:32:3d:9c:
         66:4f:97:4c:90:b2:20:ed:e6:70:19:9c:02:f5:02:65:0b:75:
         87:d3:66:ce:f7:31:b2:60:7b:93:66:1a:57:6f:2c:ff:30:6e:
         18:7a:ad:98:3d:9e:1d:01:ca:0d:9c:b1:92:a3:e3:71:3e:d4:
         d3:06:38:4b:2e:dd:ee:68:af:f6:c2:cd:4c:f5:2e:22:b3:53:
         ef:82:94:d5:4e:ca:7e:ce:9b:a7:95:83:00:2b:81:7b:e5:a8:
         a2:ab:a5:b5:06:bd:17:8f:8d:8d:a8:d6:34:49:61:6e:a0:4d:
         9d:31:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:37 2026 by rpki-client