Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
File:                     xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json)
Hash identifier:          eQUcXDLZ+wW2ZsjfxnRbuhzhQo2AbKSLjJF+AASOPtQ=
Subject key identifier:   8E:2C:17:C2:B9:84:BB:7B:71:63:A4:59:D9:C2:12:13:E0:5F:82:7F
Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
Certificate issuer:       /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
Manifest number:          DC
Signing time:             Fri 17 Jul 2026 07:53:44 +0000
Manifest this update:     Fri 17 Jul 2026 07:53:44 +0000
Manifest next update:     Fri 24 Jul 2026 07:53:44 +0000
Files and hashes:         1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: k7FYqisnnY9eVnwceRwAKyxlqlsL0aXrPvzkuOdnqcg=)
                          2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: NgYA//gR87ggutPm5mFctVw4RgX1V6AvPzMOoW8iMZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl
                          rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
        Validity
            Not Before: Jul 17 07:53:44 2026 GMT
            Not After : Jul 24 07:53:44 2026 GMT
        Subject: CN=6a59df88-4966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:2b:63:42:cc:89:5a:53:c3:05:f1:e5:fb:
                    03:ae:1b:0d:44:2c:03:76:4e:a8:8b:55:cc:b7:43:
                    42:9e:b6:56:45:54:c7:83:55:d8:87:6d:7d:bb:18:
                    da:7b:cb:3b:60:ea:aa:9b:58:f0:59:2b:ea:6f:73:
                    d5:8b:55:e5:ee:06:8b:6c:9b:aa:3f:17:da:b2:b9:
                    e4:79:3b:a0:54:fe:ec:15:58:b2:ae:57:8b:69:7e:
                    b4:d3:4a:36:59:6c:9e:ca:d1:88:67:8c:e2:6f:e6:
                    60:82:c0:47:c1:fe:ac:19:86:4a:7a:78:2c:26:b1:
                    45:3f:93:cc:03:94:3c:69:b3:e8:14:c6:ef:b5:d8:
                    90:6a:6f:5a:5b:16:fc:11:cd:71:70:6e:aa:97:88:
                    f2:2e:f5:e8:e1:ec:14:91:83:c4:b0:36:19:6d:1f:
                    8f:d6:99:73:31:2e:9f:fd:f7:5e:d3:76:0a:e4:9e:
                    83:86:28:9a:46:81:a2:23:4d:a2:d9:0f:ab:b1:3e:
                    36:4c:8e:c9:79:ef:c9:24:83:98:d2:21:5e:ed:2d:
                    e4:bd:e4:ed:37:d0:32:d2:c8:24:9d:71:40:5e:30:
                    98:97:da:85:aa:22:35:b7:d2:a8:f3:79:f3:15:1f:
                    6a:cf:11:e2:70:5f:57:22:9a:98:bc:72:32:50:c3:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2C:17:C2:B9:84:BB:7B:71:63:A4:59:D9:C2:12:13:E0:5F:82:7F
            X509v3 Authority Key Identifier:
                keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:a1:df:8c:38:db:cd:ac:5f:c1:a5:d2:cf:05:5c:01:4f:
         33:1a:09:5f:97:6f:e7:78:9f:6e:54:02:fe:fe:e7:32:d7:25:
         16:75:4b:87:6f:4f:1b:d1:98:4d:85:13:bb:50:c5:6d:ea:09:
         58:f3:fe:ed:85:ee:6a:21:0e:11:4f:2e:41:08:38:40:46:f9:
         07:52:fb:b7:31:84:40:06:80:54:8e:6b:d8:ab:af:b7:24:0f:
         86:d9:28:eb:3e:85:40:3c:6f:67:f2:5a:49:30:aa:b0:13:d8:
         42:f0:84:c9:67:ac:46:50:57:05:96:b8:ee:7a:b7:7d:12:60:
         b9:a5:6b:ee:5f:69:12:75:0f:c4:f0:17:21:a3:95:5d:f2:25:
         2f:a8:82:48:82:b4:1d:96:6c:d2:d4:5d:26:2b:d4:0b:13:e6:
         47:ab:c6:3e:65:09:88:de:05:25:e7:40:cf:e2:8a:a5:e0:86:
         d6:6b:5d:4f:54:c5:e2:c2:78:6d:82:b2:cd:d9:76:0b:3c:b0:
         cc:dd:bd:3d:4d:12:71:ad:13:ce:b4:41:9e:1a:2d:d0:ff:94:
         5b:70:d1:72:1f:1d:af:2d:2c:92:54:33:de:4e:25:df:bb:dd:
         35:c1:9b:af:5f:d9:86:6a:2b:f1:0c:7d:2d:d3:84:84:b4:4c:
         68:10:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:45 2026 by rpki-client