Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
File:                     _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json)
Hash identifier:          9HBOnBmYOlTIBy1NMaO2GdiNyGabp/Ipqm6PxHSVwZk=
Subject key identifier:   38:B7:FD:A1:F3:32:C8:84:7E:EE:09:41:BB:25:6A:A8:B4:A6:0D:FE
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Certificate issuer:       /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
Manifest number:          0239
Signing time:             Tue 07 Jul 2026 03:33:44 +0000
Manifest this update:     Tue 07 Jul 2026 03:33:44 +0000
Manifest next update:     Tue 14 Jul 2026 03:33:44 +0000
Files and hashes:         1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: eJUfmUsBlQmwY9HHnNWOHFF66fyXgtOrArCT9bqXmlY=)
                          2: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=)
                          3: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
                          rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 03:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
        Validity
            Not Before: Jul  7 03:33:44 2026 GMT
            Not After : Jul 14 03:33:44 2026 GMT
        Subject: CN=6a4c7398-f531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:52:48:56:40:42:0b:1d:12:97:f1:b2:4d:
                    31:54:03:7b:d4:c3:0d:6d:4d:76:a2:06:1e:c2:cf:
                    c9:49:7f:29:ca:84:fe:9f:7c:d8:5f:44:a0:17:c8:
                    81:6f:85:ab:28:0e:10:b0:45:74:9d:f5:5b:7c:81:
                    b4:2b:1f:95:ac:95:e0:0c:0e:0b:2f:77:db:8d:72:
                    d5:8b:da:7f:7f:db:c3:c4:5c:74:0c:03:4b:56:d9:
                    92:16:10:03:ad:09:d7:9b:9a:dc:88:4f:76:12:52:
                    5c:1c:e3:1a:d8:f6:f9:0d:24:7a:61:9c:fc:f6:50:
                    d5:e0:ba:fe:f2:12:df:05:ee:16:95:ed:f4:41:da:
                    e5:9b:ee:b1:0a:25:8f:45:f9:fd:43:93:c6:25:d6:
                    ee:d9:55:06:e2:f9:7f:96:8f:f1:4c:e3:aa:8d:e8:
                    e5:97:69:81:35:ae:a6:9b:ee:85:71:6a:6d:78:6d:
                    6b:58:5a:48:e8:7a:bc:9c:d9:a1:36:dc:fd:5c:bf:
                    3e:13:2b:22:35:ed:1e:32:3f:8f:b5:fb:6e:98:c6:
                    93:90:b2:4c:45:89:12:a0:37:df:2c:90:5f:7f:48:
                    8b:5b:3a:e1:68:66:b3:62:4d:45:be:a2:53:84:6c:
                    dd:3a:28:9a:fe:23:13:67:0a:38:c5:a0:db:cc:94:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B7:FD:A1:F3:32:C8:84:7E:EE:09:41:BB:25:6A:A8:B4:A6:0D:FE
            X509v3 Authority Key Identifier:
                keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:16:63:4c:fe:36:8e:67:87:80:45:ea:c7:01:72:60:cf:2a:
         9d:fb:c7:02:f9:6c:cb:0b:a4:de:25:af:e5:67:d5:38:95:44:
         7b:e1:cc:6b:c3:ca:b2:7a:eb:74:3b:f5:e5:2f:1d:0b:06:21:
         c1:5c:b0:c4:c2:cb:ee:cb:4a:ad:6b:2e:af:d0:b1:36:e9:de:
         21:b0:58:f7:7d:53:cb:fd:12:7d:ba:d8:b4:bb:d7:1f:00:09:
         8d:04:06:60:7f:49:66:f4:16:f9:e4:a0:35:86:64:d9:13:92:
         83:e2:2a:d4:69:fb:3d:dd:2d:47:0d:82:73:93:5c:1c:80:4e:
         62:7d:d3:fa:cc:de:29:6a:bd:51:89:5a:e1:2a:0a:77:d7:e2:
         2d:53:cf:80:08:c2:53:78:f9:26:38:84:0c:f5:62:6f:f6:94:
         53:7f:4c:d5:e9:94:c3:98:ad:3f:5b:22:67:9a:ce:f9:f5:63:
         3f:6e:a5:23:85:05:8c:e2:89:4c:1a:06:4f:b8:5d:dd:3d:46:
         02:81:95:4c:8a:7f:f7:36:28:aa:59:eb:55:89:81:2c:26:94:
         48:2f:f4:95:b8:7f:6e:78:e8:87:e9:83:33:68:64:85:43:96:
         66:e8:2d:04:8d:42:83:47:ed:12:cc:47:bd:ca:d7:04:2b:21:
         2d:f1:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:43:50 2026 by rpki-client