Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
File:                     19cjt6SfGf_8n8cw1A9pUEjMCZk.mft (raw, json)
Hash identifier:          GaqTox3kIqV1EdSX4M9WDRxmqufOYJR4QVzXMrBHD/I=
Subject key identifier:   C1:AD:CC:C0:04:88:F2:FE:DD:3E:6B:73:85:A9:CB:11:13:AA:A5:83
Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
Certificate issuer:       /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
Manifest number:          AA
Signing time:             Tue 21 Jul 2026 08:58:35 +0000
Manifest this update:     Tue 21 Jul 2026 08:58:34 +0000
Manifest next update:     Tue 28 Jul 2026 08:58:34 +0000
Files and hashes:         1: 19cjt6SfGf_8n8cw1A9pUEjMCZk.crl (hash: u+QVcovZcYJBuXtiLJwsnBhWpShSeUcjU72NMB/IujY=)
                          2: 751861108E2B11F0BFDA106EC4F9AE02.roa (hash: 8u77FLQY1MIG9qmUYZFhHyhqXirdAlPiL1vlCLzmLb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
                          rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
        Validity
            Not Before: Jul 21 08:58:34 2026 GMT
            Not After : Jul 28 08:58:34 2026 GMT
        Subject: CN=6a5f34ba-59dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:1e:97:22:ec:74:8f:d8:de:95:26:e2:e5:
                    92:01:f6:db:85:b4:a7:f3:a6:48:cc:64:3b:81:3c:
                    f2:fd:27:4a:47:39:e7:93:ef:4d:92:4e:f3:88:75:
                    82:6f:f3:a3:63:8a:b6:5d:dd:6f:ed:ce:1e:4d:9e:
                    ac:3a:25:5e:8c:84:0c:81:68:ee:c7:be:a0:eb:8a:
                    19:d9:be:4f:c4:5a:f6:fa:6f:ec:e2:64:23:3e:d1:
                    f9:f2:2b:a7:13:96:e8:f2:a0:ff:99:00:d5:3d:c1:
                    b9:59:01:b7:1f:95:97:87:8a:89:be:0f:12:c3:b7:
                    a9:79:e9:9a:f7:9f:19:85:15:75:a8:d2:c8:1d:b5:
                    60:1f:1d:c4:21:a2:70:6d:38:32:20:cd:c8:78:79:
                    be:52:97:f7:3f:ad:84:de:97:21:f6:d6:c9:96:2d:
                    e4:61:33:6f:05:f5:fd:f8:ab:6b:80:96:b6:bc:4e:
                    7f:7b:8b:1c:e0:f2:62:d1:52:7c:a3:63:b5:85:76:
                    52:d4:0e:1b:b4:4d:c5:9d:d9:d4:11:20:7e:2b:07:
                    7f:ee:c1:a1:aa:34:f9:5b:e6:8f:96:2d:e5:78:2b:
                    79:48:4f:e2:a6:d5:2d:54:b6:af:9e:9c:3b:9e:30:
                    02:24:30:55:59:fd:73:6d:ba:0c:c2:fe:d7:ff:4f:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AD:CC:C0:04:88:F2:FE:DD:3E:6B:73:85:A9:CB:11:13:AA:A5:83
            X509v3 Authority Key Identifier:
                keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:31:fe:8c:37:42:8f:e0:1a:3d:60:99:bd:80:c7:dd:85:c5:
         50:cd:34:b3:f1:d1:31:18:0b:b1:0b:12:10:20:c2:06:1e:df:
         00:b1:52:ba:32:75:93:2f:f6:34:18:00:ca:ac:5d:3e:0b:ca:
         a9:92:f7:29:e4:7d:68:3f:8e:01:07:c2:89:c3:c1:cf:12:70:
         39:e8:dc:cc:87:32:14:b3:3f:26:38:10:a9:77:85:d7:4f:6a:
         fc:4b:ab:f4:db:6c:2a:e3:a2:e5:b4:e1:f5:24:b7:c8:76:f0:
         19:40:01:0d:d2:40:6b:40:d6:91:91:5b:13:11:56:11:19:a0:
         eb:f5:7d:7c:40:1a:4b:34:21:e4:13:6d:ef:4d:53:bf:4a:ed:
         3b:7a:3c:72:7d:48:54:c2:53:4b:a2:bc:2b:08:da:81:cb:21:
         6d:71:8d:88:ed:b0:05:0f:76:81:c8:21:64:a2:1c:2d:27:bf:
         b7:3d:8a:13:e0:3a:8e:5c:56:ea:69:97:5b:35:a4:24:01:0a:
         b9:f4:97:02:d1:0a:cf:ca:33:72:09:c8:da:e7:2e:57:e9:dd:
         f3:d8:bf:08:ec:2b:65:2f:c8:7b:3e:bd:32:4f:19:34:3f:83:
         89:2a:12:e3:61:99:cd:53:99:bd:82:77:19:67:fd:46:8f:0d:
         fd:5a:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:37 2026 by rpki-client