Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
File:                     _2UQNIiSuqqxtzMf9wTDQbiaGHY.mft (raw, json)
Hash identifier:          btHPkYfH1MZ3P7gaFHPlnEVuVT04k0txANM7cPCyl78=
Subject key identifier:   12:21:99:4C:A7:54:8A:9D:86:C7:53:A8:4C:C2:51:6B:A8:E7:D0:F2
Authority key identifier: FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76
Certificate issuer:       /CN=A9189C03/serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
Manifest number:          57
Signing time:             Fri 17 Jul 2026 09:28:41 +0000
Manifest this update:     Fri 17 Jul 2026 09:28:40 +0000
Manifest next update:     Fri 24 Jul 2026 09:28:40 +0000
Files and hashes:         1: _2UQNIiSuqqxtzMf9wTDQbiaGHY.crl (hash: jvnCTHZWi38VrL1DFOlYMJP2xoLFTBfVnphhaHZd/bk=)
                          2: C0B4841002B011F19551BA913E3D8C67.roa (hash: mlBDMtNCdtUEDeCgXegQmevuYhexij5GGyJcwWWK/bM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl
                          rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189C03, serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876
        Validity
            Not Before: Jul 17 09:28:40 2026 GMT
            Not After : Jul 24 09:28:40 2026 GMT
        Subject: CN=6a59f5c8-bf64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:21:40:3f:b2:88:e1:9a:ab:25:6b:0d:5a:
                    13:05:97:73:ff:c6:fd:eb:75:d8:7f:49:7d:1d:ff:
                    bb:d0:fe:60:e3:e0:e5:6c:4a:fa:e4:96:de:58:0c:
                    c2:8f:4c:75:91:6d:52:6f:a0:9e:9f:73:28:37:ad:
                    8c:83:be:6a:98:e5:16:09:90:3b:4e:34:97:dc:7e:
                    6b:7b:29:08:08:da:24:c2:45:59:97:64:84:c2:d7:
                    bb:b1:6d:36:34:01:7a:a6:6d:e7:a1:58:68:7d:27:
                    84:7a:75:d2:75:5c:77:b7:85:23:45:e4:ff:70:79:
                    74:7d:a7:64:52:6b:97:a7:58:b8:fe:92:cb:54:a6:
                    fb:ba:f0:94:0c:eb:e0:43:3b:8f:29:07:f1:79:8a:
                    2a:8d:81:cf:0e:e3:b0:0c:d2:81:61:93:15:41:bc:
                    a0:be:cb:56:a3:96:5f:24:8b:0a:f8:ce:5e:05:b0:
                    01:d6:da:14:bc:fc:23:72:30:8e:a0:a0:c0:3e:ae:
                    41:f1:32:f4:21:00:0d:65:c1:84:8e:53:84:21:9b:
                    a5:24:ac:0e:9e:47:c5:38:f8:38:f5:b9:2e:ed:82:
                    7f:63:49:78:1e:40:3f:65:3d:57:ec:ea:14:37:6a:
                    8e:eb:3f:dd:4d:33:c6:ec:db:6b:c4:78:c8:d6:5d:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:21:99:4C:A7:54:8A:9D:86:C7:53:A8:4C:C2:51:6B:A8:E7:D0:F2
            X509v3 Authority Key Identifier:
                keyid:FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:d5:66:f7:cf:68:83:a1:d1:92:bc:72:39:56:f9:b7:a4:1b:
         8e:74:61:19:13:77:ad:3c:bf:32:7c:52:36:03:9a:40:f5:42:
         c0:00:61:be:59:cd:d7:c6:35:29:d5:53:5d:32:5f:ef:cf:aa:
         34:db:05:95:56:53:40:fc:d1:3f:0b:bf:49:20:45:bd:b3:90:
         f5:4c:17:ed:b8:61:ff:a4:65:1c:fc:cf:4e:91:fb:a4:a6:35:
         df:19:89:4f:e4:c2:49:43:8c:81:0f:87:56:0e:a7:69:22:a1:
         ce:a4:ef:81:eb:ec:83:f8:bb:21:1d:36:ee:d3:65:fc:36:c9:
         9f:9d:4c:99:8d:d7:f9:17:b2:54:7b:37:24:88:65:6d:47:6b:
         b3:cf:5c:04:7f:2c:ab:17:4f:f1:33:76:a3:a5:43:f8:f3:c4:
         15:4a:f8:05:0b:10:40:da:22:92:00:3c:c2:8c:23:5b:4d:f9:
         32:5e:b7:77:5f:97:c4:32:49:f2:48:45:b1:ac:2c:2c:25:96:
         11:c6:d4:01:23:cd:d2:65:d8:ff:2a:fc:59:82:8c:26:bf:cf:
         16:a5:7a:b4:f2:c4:6a:c2:f3:10:36:ce:b8:f4:33:31:76:5a:
         6e:79:e4:84:53:21:f8:3c:e2:9a:8d:62:2d:30:63:d8:bf:26:
         71:c9:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:05 2026 by rpki-client