Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File:                     xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier:          ioS+qFODSzT19v3d66QA6YpM9f8UH6Fx5gfpEluyQC4=
Subject key identifier:   2E:06:85:58:4E:1E:41:20:12:46:7C:BA:C9:74:7D:0B:48:69:62:84
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer:       /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number:          024B
Signing time:             Sun 05 Jul 2026 02:54:49 +0000
Manifest this update:     Sun 05 Jul 2026 02:54:48 +0000
Manifest next update:     Sun 12 Jul 2026 02:54:48 +0000
Files and hashes:         1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: TCyOnhJHWJPy98kr35EJEnuW6wxEZWDV4cnAQU4kDPA=)
                          2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: aajUanjdNrNtkjhupeIjAdiXMn4aEREZ53JBb0jvqlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
                          rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
        Validity
            Not Before: Jul  5 02:54:48 2026 GMT
            Not After : Jul 12 02:54:48 2026 GMT
        Subject: CN=6a49c779-68f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:6a:cd:45:e7:77:31:40:f9:8d:0e:21:94:
                    4b:98:7a:4a:96:6c:9e:4f:12:49:23:86:4f:80:9a:
                    fd:85:d5:79:cc:2a:86:6f:85:81:8a:3b:ab:cb:ba:
                    f2:2e:dc:c7:ad:6f:86:17:7b:98:38:c9:b7:b1:ca:
                    61:c0:0a:dc:b9:d4:4c:dc:54:50:18:51:6e:7d:0e:
                    37:0a:aa:b1:10:7b:e2:07:b7:cf:eb:7c:b8:01:48:
                    dc:fa:48:07:f1:f9:21:46:1f:dc:98:26:af:03:a7:
                    51:0e:de:8a:92:ba:68:40:7b:37:d0:00:a5:b2:f3:
                    36:aa:26:e8:65:96:46:77:d2:bb:9a:45:68:35:4a:
                    01:61:7f:a6:5e:ee:85:bd:01:22:95:a1:3d:18:94:
                    57:2e:d1:43:32:0e:11:12:53:0a:62:50:a1:1f:f9:
                    94:d9:17:d8:ef:0e:41:1c:b6:78:b1:5a:51:bf:e1:
                    6c:c3:86:8c:f5:52:ee:e0:f9:ec:13:61:bf:3d:40:
                    c7:c9:d3:43:f5:0f:ec:4b:04:c7:9b:45:5f:c4:43:
                    9b:a9:0e:28:f5:2b:c2:6f:a7:c2:ee:d6:65:b0:ed:
                    a1:6c:40:2d:ab:d8:55:34:89:4b:13:3d:ba:91:ac:
                    20:f5:35:fb:cb:ac:eb:7e:ae:8e:8f:9d:bd:e3:f3:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:85:58:4E:1E:41:20:12:46:7C:BA:C9:74:7D:0B:48:69:62:84
            X509v3 Authority Key Identifier:
                keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:98:95:84:9b:e2:a0:70:22:29:78:0a:23:08:b5:ee:7c:
         54:76:53:20:52:94:01:d3:2d:ac:f7:eb:66:f0:83:f1:24:b1:
         cd:ea:25:37:ec:3b:4a:bb:69:16:09:af:17:4a:ef:1b:ef:d5:
         5b:b6:fa:bb:47:f2:52:14:93:f8:18:8f:d5:b8:e8:7a:0e:1b:
         b0:41:2b:1a:cf:c6:c6:90:61:f3:eb:ed:27:e3:4d:7c:47:47:
         bf:d0:ce:1f:6b:f4:ae:e1:67:1d:5f:20:96:9e:0c:57:2a:2e:
         7c:54:fa:b3:f1:a8:f1:ef:d3:29:95:b5:65:2d:a0:d8:e2:f4:
         2f:7f:79:d0:4d:93:b4:db:bc:43:c0:93:9c:b0:e4:8c:35:c1:
         f4:34:a1:3b:55:d5:d8:4c:cb:27:e5:8c:ea:e8:e2:81:89:5c:
         75:aa:e4:d8:1d:f3:81:39:1d:dc:23:c6:c9:01:7d:66:2c:94:
         da:c7:bc:f5:57:d2:89:c4:98:91:1e:d1:b1:58:11:ef:9b:1c:
         37:bd:d7:f7:f8:d3:5a:b1:b0:0a:5c:d8:84:cc:8a:3b:a0:24:
         d6:33:fe:ad:48:68:b9:96:58:37:94:f3:8c:b7:f5:1e:d5:47:
         5e:74:be:4d:dd:02:5c:ac:cb:a3:b9:63:96:0b:1d:e4:26:db:
         b5:cd:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:54 2026 by rpki-client