Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File:                     Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier:          H7k7Au6G48WJyfh3dF30yBOt2GoWqqOcnnZ3xbbKkrE=
Subject key identifier:   B9:BC:41:35:75:10:6D:10:81:2E:71:A2:7A:11:2D:CE:E6:DE:34:C2
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer:       /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number:          011C
Signing time:             Fri 17 Jul 2026 07:04:18 +0000
Manifest this update:     Fri 17 Jul 2026 07:04:18 +0000
Manifest next update:     Fri 24 Jul 2026 07:04:18 +0000
Files and hashes:         1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: 3ZpOrfjP0UyaAnbOPxHExqu5X3IuFEJaOby/smLiAgY=)
                          2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
        Validity
            Not Before: Jul 17 07:04:18 2026 GMT
            Not After : Jul 24 07:04:18 2026 GMT
        Subject: CN=6a59d3f2-63af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:49:4b:ac:42:6f:44:1d:43:38:6a:ad:fc:08:
                    78:d8:87:f9:ee:b6:58:d3:3f:00:25:24:45:ba:c5:
                    9d:cf:3d:d3:03:dd:64:e3:63:2c:de:d5:e7:e0:9d:
                    c4:85:fd:1a:c7:e8:f7:5a:fe:02:cb:b6:48:71:07:
                    18:a7:5c:12:3b:b7:eb:93:40:5e:80:26:f8:88:3a:
                    12:20:7d:68:1d:f8:61:6e:87:f0:07:7d:f9:e3:c7:
                    f3:b2:c2:a8:e4:f0:16:35:e5:c8:3b:7c:22:b3:c8:
                    65:b1:50:d2:6a:2d:3e:f6:28:f5:f2:3f:f9:ff:d1:
                    0f:a1:19:2f:ba:76:5f:d4:f6:7d:b3:a0:ed:5a:91:
                    79:3d:9d:ac:5d:2b:23:ff:71:82:85:73:8b:d2:fd:
                    78:c6:c8:fd:51:1e:c2:69:8a:ca:81:ad:9a:cf:70:
                    30:fe:cb:cc:b8:05:8f:ca:c8:cb:5b:37:e9:b3:18:
                    14:9d:ad:ca:de:ad:3a:ba:a9:09:17:d9:04:a1:7f:
                    ca:e1:f8:11:d3:d7:1d:97:9b:84:1e:b6:7c:e2:85:
                    07:88:73:a8:98:d0:0e:ad:76:56:ca:79:f9:e7:de:
                    88:b9:7c:20:95:1a:38:3c:c1:ca:db:f4:17:91:94:
                    56:30:04:d4:da:b0:48:c8:fb:74:f4:30:e2:dd:91:
                    2b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BC:41:35:75:10:6D:10:81:2E:71:A2:7A:11:2D:CE:E6:DE:34:C2
            X509v3 Authority Key Identifier:
                keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:b4:e3:5f:40:9f:5a:d5:cf:4e:9e:0b:91:f2:fe:0a:1b:d2:
         64:89:8c:4c:3f:48:52:d6:6d:e6:b3:b0:30:bf:48:90:4b:b9:
         0e:53:cd:0b:e0:a8:9e:53:70:d0:4f:22:85:f9:54:ea:47:cb:
         cd:4a:78:b7:d0:e5:c1:76:0b:d1:3f:d9:24:cd:55:1c:f5:0f:
         5b:03:f7:98:af:b6:be:82:e7:13:b0:80:cf:66:b5:9c:f4:eb:
         a4:a7:75:08:22:50:7a:0a:f9:a9:85:03:7d:55:61:6d:58:e2:
         a9:d7:5e:ab:58:f6:0d:f0:ef:68:fc:71:8f:7f:eb:2c:57:55:
         63:8e:ff:97:03:6b:f1:38:48:f3:82:62:40:ac:56:fd:ae:2e:
         81:2f:d0:68:00:72:fd:c4:62:0c:9a:97:1a:91:05:55:64:76:
         f7:57:4b:c1:69:1c:43:e6:d5:a8:93:e6:46:0d:c3:6d:8a:cd:
         29:49:e1:0e:66:c4:fd:4b:68:26:43:fe:5b:43:5d:67:71:a7:
         3f:2e:23:94:b2:de:59:cd:f3:26:f9:df:35:6b:a1:be:b1:55:
         97:e3:47:db:e5:27:cd:fd:7c:e5:4b:c9:b4:da:51:ac:d4:fa:
         30:89:e2:d6:a2:2c:c5:85:61:9f:61:07:3a:09:94:68:cb:31:
         8d:c0:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:49 2026 by rpki-client