Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
File:                     f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json)
Hash identifier:          azc2iRHk4iSQA8+q3EdToxoX7GQkecymCCxdfQt3sjs=
Subject key identifier:   BE:97:F8:FB:0F:9B:24:6E:DE:C8:CC:9A:FB:74:00:8A:83:C2:F8:86
Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1
Certificate issuer:       /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
Manifest number:          58
Signing time:             Fri 17 Jul 2026 09:28:31 +0000
Manifest this update:     Fri 17 Jul 2026 09:28:31 +0000
Manifest next update:     Fri 24 Jul 2026 09:28:31 +0000
Files and hashes:         1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: UtwxIKT6VWx5cskZ+S7oQKF4E/VogPAPjMO5HYDrq4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl
                          rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1
        Validity
            Not Before: Jul 17 09:28:31 2026 GMT
            Not After : Jul 24 09:28:31 2026 GMT
        Subject: CN=6a59f5bf-5b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:14:a4:13:f4:18:30:bc:9e:d1:4c:0e:11:
                    45:89:05:83:73:79:e7:63:3e:e6:cf:0d:3c:88:63:
                    bc:04:75:43:9f:1e:f5:17:d2:3f:a2:64:65:27:44:
                    23:f4:8f:1b:ec:b8:3d:81:e4:6f:9a:88:a1:0a:5c:
                    3a:30:bb:6d:77:78:e8:bd:63:da:44:a2:3b:eb:75:
                    40:30:1f:84:02:0c:36:43:62:62:cc:26:9c:8f:1c:
                    0d:49:36:b7:62:b0:fa:77:58:a0:88:4f:12:c7:06:
                    58:0b:a5:c7:7a:84:8e:6b:6e:09:20:e2:72:f0:1c:
                    b6:7b:f3:11:39:87:4c:76:f4:14:82:84:43:b8:41:
                    1b:1d:a0:6c:d2:73:be:66:e2:fd:5f:d4:46:80:1e:
                    f6:7e:37:83:df:fb:36:b7:02:b5:5d:af:f5:28:00:
                    08:92:6d:59:ea:89:ad:a8:af:d6:13:fd:b9:aa:47:
                    7a:e5:1e:04:8c:e4:fe:73:c3:04:8c:74:02:3d:65:
                    5e:eb:8a:95:a2:88:f1:29:30:c0:bf:36:27:d4:be:
                    24:67:e4:84:12:10:b1:cd:b1:e1:4c:a3:59:c2:92:
                    4d:05:13:fc:3b:48:bf:44:19:00:5f:ed:6b:50:83:
                    fd:1a:df:67:4f:28:93:61:53:a3:75:82:4e:ce:99:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:97:F8:FB:0F:9B:24:6E:DE:C8:CC:9A:FB:74:00:8A:83:C2:F8:86
            X509v3 Authority Key Identifier:
                keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:04:a6:9d:6b:73:1e:e1:f0:9b:b1:2c:c6:0d:03:a0:08:ff:
         92:2d:0a:9f:10:21:c2:45:4a:d5:14:a6:c3:3a:7c:d6:d2:9d:
         08:ef:63:a0:01:56:1e:2b:e8:88:67:82:ca:26:2b:6c:f2:7d:
         a6:30:d0:5f:a2:1a:a0:b5:0a:28:92:15:34:76:9d:85:7d:8b:
         34:52:51:b8:18:71:da:bd:b5:83:a0:54:b1:7c:bb:1d:b2:ab:
         5e:f3:bd:94:a2:43:dc:42:f2:76:be:a2:30:61:33:6a:ad:84:
         c6:a6:c0:bf:e9:78:d4:51:40:60:34:51:c2:41:40:16:da:22:
         56:c6:b8:5e:24:6c:71:6b:fd:41:26:81:fb:d4:77:21:08:63:
         8f:da:b7:f8:1b:66:1d:10:c4:3c:1c:ab:4d:15:4a:07:87:d0:
         45:db:8a:f6:df:1c:3e:b2:94:c5:05:06:d4:86:7e:35:0b:01:
         dd:79:f0:5d:54:3a:04:59:ad:15:47:0f:a2:37:dd:6e:d1:fc:
         42:14:52:bd:6c:93:eb:a5:70:39:d9:ca:31:67:5b:e8:b3:d4:
         21:72:f1:6c:a1:1d:e4:31:02:ce:f3:51:67:9d:aa:a4:64:7c:
         c7:84:11:cf:23:c5:bc:b8:e1:a5:46:42:7d:9c:72:2a:e5:fd:
         2c:90:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:24:12 2026 by rpki-client