Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File:                     2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier:          Z9p90iDg5N8XstyNzLBg/tJQy6vNWaa+sivaZ2zSCrE=
Subject key identifier:   03:65:B0:B6:48:2C:34:49:BF:05:4B:13:6E:25:1D:F8:4F:88:19:DF
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer:       /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial:       0556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number:          053E
Signing time:             Mon 27 Jul 2026 00:27:58 +0000
Manifest this update:     Mon 27 Jul 2026 00:27:57 +0000
Manifest next update:     Mon 03 Aug 2026 00:27:57 +0000
Files and hashes:         1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: jV4dJQ+5KtpDCqCRO9FsEFiJVsUgyesy2Ojv49dqGgs=)
                          2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=)
                          3: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=)
                          4: 5542C1D66D7E11F1B74F03108747A888.roa (hash: GK+s6oT3MEUn7idrDMZYD/2eUrDgfq7a0JF4Bt8bdJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
                          rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
        Validity
            Not Before: Jul 27 00:27:57 2026 GMT
            Not After : Aug  3 00:27:57 2026 GMT
        Subject: CN=6a66a60e-da92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:3b:46:8e:20:a3:e9:43:49:9c:21:93:be:
                    c5:78:af:fa:db:a3:48:1b:5e:08:29:d9:7d:b7:35:
                    0c:89:e9:f5:de:08:d1:3a:fb:58:8f:c4:b8:e2:eb:
                    3e:41:d3:3d:08:bd:e8:f4:90:51:c7:34:ab:a0:96:
                    8c:82:c9:04:d2:b3:b9:c9:d9:ec:e4:1e:fd:fa:ae:
                    a7:ff:7a:90:c9:f9:83:bc:d3:3c:b8:77:f7:33:41:
                    f6:fe:f4:45:54:08:ad:44:fa:2c:b9:93:22:d7:c9:
                    c5:8a:eb:c8:27:99:3f:d8:a0:5d:e9:26:86:d5:c3:
                    20:d6:b1:c2:37:ed:c0:84:0a:f2:04:22:10:52:ca:
                    84:a6:a2:ba:03:6c:58:86:1b:5b:ef:7a:b3:1e:f4:
                    35:24:c6:c7:eb:ac:b9:c0:2b:02:33:eb:c5:34:ed:
                    83:6f:8c:e1:ac:bf:68:52:f6:d1:c6:04:3d:27:61:
                    bf:c1:18:0f:a0:91:c5:f7:c1:b7:de:dd:1f:61:a4:
                    78:e4:39:b6:d6:85:bf:c4:58:5d:b9:44:1d:98:27:
                    65:db:ed:18:51:7a:1e:ee:7b:84:56:4d:92:5d:a4:
                    b5:d2:e9:a7:c9:6f:4b:ac:62:bb:20:1f:ed:1f:19:
                    85:9b:6c:24:ea:11:55:1c:8e:b6:99:84:84:79:23:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:B0:B6:48:2C:34:49:BF:05:4B:13:6E:25:1D:F8:4F:88:19:DF
            X509v3 Authority Key Identifier:
                keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ed:fe:24:e2:a4:2f:41:40:33:8d:49:b9:bd:80:ec:45:df:
         28:24:6d:1c:25:22:cc:74:89:cb:2e:1a:58:81:23:7a:00:5f:
         a4:04:af:be:7e:54:3c:2a:f5:84:1c:73:b3:41:ca:9a:4e:d8:
         c9:07:eb:0a:d8:19:fd:b3:69:e3:2c:03:1b:d6:cc:e3:19:b4:
         46:e5:44:6e:60:73:49:39:02:13:7e:5d:c7:24:9f:2c:41:dc:
         cc:b6:e5:62:94:d1:29:17:72:df:1b:de:85:f0:3f:4c:84:5c:
         07:40:6f:e0:40:ef:4e:fa:50:d3:e2:bc:f4:64:6e:55:0e:5d:
         41:bc:0f:1f:44:51:af:d1:95:df:d4:aa:ad:b7:20:d4:b2:b7:
         3d:4d:56:cd:3e:39:e9:df:35:32:3b:3b:a4:18:36:16:1d:04:
         49:f0:fc:06:ac:1c:65:50:b6:35:73:37:9a:bb:c8:63:2e:16:
         99:95:d8:09:1e:d3:7c:0a:48:76:b9:40:ed:b6:8f:ff:e2:c1:
         19:4a:dd:c2:4c:a1:a8:bc:a7:1d:74:67:fe:38:c0:8c:ed:39:
         ca:49:5f:7d:b5:b1:f2:1b:40:b8:12:18:1d:8c:b9:9c:cc:26:
         37:82:98:eb:1e:dc:1a:2b:67:ed:e6:d7:11:a1:ad:bb:d8:8f:
         c6:86:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:44:59 2026 by rpki-client