Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
File:                     Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json)
Hash identifier:          k0leBz8v2CGiMI6ogYmAPNB9c2XRsSwNqAX3ZwNviy4=
Subject key identifier:   0F:8F:C9:90:D4:52:CF:3C:AE:9E:6C:F7:98:0B:1A:88:98:A5:E0:F8
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Certificate issuer:       /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
Manifest number:          0131
Signing time:             Fri 17 Jul 2026 06:43:45 +0000
Manifest this update:     Fri 17 Jul 2026 06:43:44 +0000
Manifest next update:     Fri 24 Jul 2026 06:43:44 +0000
Files and hashes:         1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: ww0IcJxfmGI+8ES4YqXyWyeq4WABGU3LpWm06pkp7bI=)
                          2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: 3nD9LInONQ51DGwH1Bk1CRRWQxIMYRaBTzihhmaQ14w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
        Validity
            Not Before: Jul 17 06:43:44 2026 GMT
            Not After : Jul 24 06:43:44 2026 GMT
        Subject: CN=6a59cf21-5b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:ae:18:15:77:5e:43:66:9f:fd:b7:da:ca:
                    3e:af:f9:cb:a6:10:d7:85:e3:67:15:b8:87:5c:2b:
                    b2:93:77:1a:63:c3:9e:79:aa:18:82:6c:64:dc:e6:
                    0e:e7:3f:6b:4b:f0:3c:63:ac:cc:79:ee:1d:69:88:
                    02:2d:6c:54:ed:2d:65:71:21:e7:64:05:5f:aa:6c:
                    be:d4:e0:d1:6e:bf:9e:b7:eb:6d:7f:81:0f:47:7d:
                    ae:8c:ba:bf:10:22:aa:26:bc:a3:df:44:e5:3b:01:
                    0a:b7:43:96:c9:ca:af:e6:04:1a:89:8f:1e:03:eb:
                    b4:8a:55:4d:01:35:69:4a:9a:f3:5a:a4:82:2a:f3:
                    60:c3:b5:82:5e:c4:10:55:d4:44:d9:e5:98:e3:9d:
                    ad:25:c4:95:fd:01:27:79:8e:ba:0f:8b:29:bf:bd:
                    9c:d8:f4:c0:9c:22:ca:84:50:e0:a7:8e:ef:63:52:
                    0d:6d:33:15:61:d2:2d:68:76:e8:f8:21:29:b2:e8:
                    6b:17:b1:3a:3d:82:e9:44:1c:8c:f2:5f:30:c4:9a:
                    78:66:77:41:f5:3b:63:42:2d:73:18:83:3d:52:08:
                    76:82:b0:81:65:37:74:95:31:6e:b0:23:b4:78:60:
                    c8:63:e8:26:94:8b:d9:e1:e4:4e:f0:e1:9c:6c:48:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8F:C9:90:D4:52:CF:3C:AE:9E:6C:F7:98:0B:1A:88:98:A5:E0:F8
            X509v3 Authority Key Identifier:
                keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5d:79:fa:b6:df:e5:46:84:f5:82:c3:52:f8:98:99:37:ae:
         bc:aa:42:52:79:77:36:4a:92:96:4c:ba:5b:4e:66:da:d1:f0:
         8c:56:7c:e8:57:d9:73:ae:5e:cf:54:20:55:34:b2:4f:4a:59:
         40:b2:30:d5:bc:df:45:6a:07:08:5d:ec:3e:ee:44:25:f7:02:
         70:ff:22:fb:b7:ca:98:fd:f2:fe:51:52:5b:11:70:d7:ca:7d:
         22:6b:80:a7:8f:3d:58:1c:39:00:07:b1:68:c6:61:2a:92:b0:
         0d:b9:2e:93:0f:41:0b:4e:c3:fb:68:f8:79:f2:e4:7b:90:79:
         51:0a:49:95:c9:b6:b1:13:49:56:ce:26:93:25:e4:ab:a8:f9:
         48:cc:69:d3:2e:5d:c2:de:b9:28:87:25:e0:f2:6e:8c:f0:dc:
         ae:14:f4:11:2a:f1:7a:ac:5c:69:ae:ec:c6:46:43:3a:50:6a:
         ba:26:06:0e:2c:6c:a4:5a:10:cf:92:79:3d:2e:a4:89:b1:a4:
         cb:da:48:41:fe:cb:90:1b:f4:9f:34:38:62:0a:ea:98:05:1c:
         22:d7:29:fc:46:4f:79:7d:4a:d3:66:fb:1c:81:6b:18:96:ec:
         cc:17:8f:33:b5:20:b6:f3:dc:67:1c:61:df:91:64:03:ef:30:
         5e:50:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:24 2026 by rpki-client