Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File:                     2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier:          JABX5O78i0uFpkcpLKt6C5yVZZ08Xk6dZN2JcTDuCY4=
Subject key identifier:   2C:3D:C4:D2:20:AB:D0:34:60:DF:C9:76:63:73:65:3C:DD:1B:DF:9F
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number:          0221
Signing time:             Tue 21 Jul 2026 04:14:03 +0000
Manifest this update:     Tue 21 Jul 2026 04:14:02 +0000
Manifest next update:     Tue 28 Jul 2026 04:14:02 +0000
Files and hashes:         1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: JHtGFIpSTUukRIkd+362kS080HB1RECNF5jGViIHSk8=)
                          2: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=)
                          3: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=)
                          4: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Jul 21 04:14:02 2026 GMT
            Not After : Jul 28 04:14:02 2026 GMT
        Subject: CN=6a5ef20b-cde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:a8:24:bd:bd:f6:48:ae:5f:b6:77:b9:7c:
                    91:cc:28:f5:bf:20:a3:70:ad:e8:2c:04:46:ae:7f:
                    fc:c3:65:ff:62:5f:37:dc:ed:f4:f3:9d:d7:d0:11:
                    3d:08:09:72:5d:e1:c7:98:af:52:be:c8:8b:14:bf:
                    f1:fb:a4:c6:96:f6:0a:37:fd:fc:4d:ee:41:f1:ac:
                    01:05:46:cf:10:1e:5a:84:98:85:39:83:8d:52:64:
                    ff:d4:bc:dd:f0:a7:b4:4f:6b:30:51:b4:1d:30:d2:
                    54:06:47:1d:f5:25:93:48:7d:c8:ac:a3:3b:3d:ea:
                    ce:76:87:34:3f:d2:b4:ec:b9:6d:cd:3e:45:9f:1e:
                    e6:68:a6:77:0e:cd:cb:93:af:a1:e6:65:e1:e1:e1:
                    37:10:41:a9:74:ea:63:84:34:b7:5f:9b:35:0e:3b:
                    ef:6a:53:d3:85:4a:b2:fe:1a:a9:33:50:53:ff:09:
                    8b:a3:85:e5:50:b6:f1:cb:ba:e9:ec:f9:a9:a6:9e:
                    e5:ea:7f:00:d8:85:96:b5:c1:76:fb:61:1b:1f:3b:
                    d5:ee:dc:8d:50:54:1d:bb:7b:6e:4b:67:35:0e:0d:
                    8a:74:f9:14:05:18:a4:68:70:a3:32:b8:36:49:88:
                    65:a2:07:b2:ea:4c:fd:e2:03:fc:d7:e8:7b:98:b3:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3D:C4:D2:20:AB:D0:34:60:DF:C9:76:63:73:65:3C:DD:1B:DF:9F
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:99:71:d1:ae:50:5a:bd:e6:c8:85:48:6e:07:d7:5c:d3:47:
         fc:9b:84:88:ca:75:24:a7:d9:81:0b:61:f9:2d:5f:36:07:da:
         74:bf:69:ff:d5:07:9a:b8:25:60:a9:83:38:94:6f:04:ba:14:
         74:d3:e1:e1:17:02:2f:de:11:f9:c5:df:32:37:76:5a:93:85:
         e4:92:05:f8:85:5c:2a:f0:2f:53:53:61:4c:37:42:87:30:47:
         95:23:31:cf:36:50:a1:9c:54:bd:73:39:cb:e1:ef:4b:02:d1:
         00:a1:cd:cc:41:be:55:fc:26:66:aa:be:70:11:65:9b:a1:c7:
         81:0e:e5:b3:dd:25:59:77:2b:65:24:f2:1c:4d:b3:ee:e3:f2:
         78:f2:92:62:8f:be:36:8d:9e:9a:8a:51:1d:2a:a5:f1:55:74:
         d1:99:13:e9:68:3e:f3:a4:92:1b:9d:23:85:86:ce:92:5b:16:
         a4:ec:57:62:ac:a2:9a:c0:d4:e0:83:47:ac:92:b2:08:41:d1:
         71:5b:17:74:81:0e:3e:c0:d6:19:ed:32:fd:9c:4f:4b:89:1b:
         c8:1d:80:21:45:2e:75:2c:f0:0c:36:47:b0:33:f6:8d:7d:66:
         21:f2:07:fa:b2:51:c7:08:fb:f3:df:bc:e6:79:ae:47:d7:56:
         d6:a2:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:36 2026 by rpki-client