Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
File:                     -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json)
Hash identifier:          wFGbBqsao2rt6CXX6zZb4SaFUlXc6638+paV4kGLSN0=
Subject key identifier:   3E:DC:B1:1C:DC:DE:CC:AC:88:DF:66:89:B7:CC:E4:48:21:40:5A:73
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Certificate issuer:       /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial:       02F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
Manifest number:          02DF
Signing time:             Mon 27 Jul 2026 02:32:28 +0000
Manifest this update:     Mon 27 Jul 2026 02:32:28 +0000
Manifest next update:     Mon 03 Aug 2026 02:32:28 +0000
Files and hashes:         1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: ncVIw6/zzpN7h0fCKmNdp0vAMK3QH8733lmW9aQwA9A=)
                          2: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
                          rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
        Validity
            Not Before: Jul 27 02:32:28 2026 GMT
            Not After : Aug  3 02:32:28 2026 GMT
        Subject: CN=6a66c33c-5d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bb:a2:6a:ba:aa:7c:b2:73:1a:39:36:b4:1b:
                    85:0d:db:a2:db:12:be:3e:91:fd:f1:b4:54:97:b9:
                    51:b5:f8:e9:cc:46:74:fa:86:15:8b:3f:b8:5c:22:
                    d2:34:c1:89:e0:d4:12:f3:92:64:52:f8:f8:9e:ee:
                    75:c9:80:29:e2:c0:a8:70:f5:0f:c6:ae:0a:e8:97:
                    35:ed:61:13:88:11:ea:35:ab:6a:db:9f:94:21:03:
                    c3:aa:16:2a:33:7f:04:ff:0e:51:96:e8:64:13:da:
                    18:3b:8a:53:6d:05:2b:4c:f2:a3:f2:78:0c:a4:c2:
                    27:d0:ac:f2:d5:bb:7f:4c:67:cd:c2:3a:3e:e8:14:
                    c4:07:70:9a:55:10:2c:e4:89:b5:11:44:5c:87:10:
                    96:57:4f:86:52:8b:06:7f:bb:39:7d:dd:cc:1a:5e:
                    50:c1:0f:50:b3:f7:8d:b2:c1:0f:43:37:d6:e7:fc:
                    a0:09:1b:df:46:c2:59:3c:f5:9d:0e:e4:d3:9a:73:
                    94:2d:2e:0f:f8:03:69:be:c7:7c:9e:da:cd:f3:c7:
                    13:9f:63:c9:42:b5:71:3b:c4:09:79:9c:d3:f6:a9:
                    cd:1e:d0:c3:17:8a:b8:c2:a8:6f:c3:42:76:9c:48:
                    9d:d8:43:24:31:e3:8b:66:3b:ce:39:78:92:3b:d9:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DC:B1:1C:DC:DE:CC:AC:88:DF:66:89:B7:CC:E4:48:21:40:5A:73
            X509v3 Authority Key Identifier:
                keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:87:0d:6c:82:9d:5f:ab:a8:4d:a4:7f:78:13:a7:9e:d6:81:
         e9:0c:82:5d:2b:14:81:f5:41:e6:32:42:42:0c:7b:e7:d9:7d:
         dd:ff:9c:2a:8e:c3:36:49:93:3a:a8:15:a1:36:0a:ba:81:3e:
         63:28:c1:24:1b:ee:86:a3:ba:d0:c4:ca:dc:e5:f0:b3:0b:be:
         47:28:5c:a3:83:99:df:4a:fc:53:a2:af:74:e2:9b:34:b4:85:
         7c:be:54:05:39:77:a0:1e:3a:11:1a:1c:e7:60:03:33:94:81:
         45:a2:65:f5:2c:08:11:fa:66:5d:2a:ca:a9:6f:13:a6:0e:dd:
         b9:2a:b3:f6:a6:1a:d0:ce:14:5d:23:3e:cd:95:6d:13:e0:84:
         51:62:a0:b4:2f:05:5b:22:b9:84:a6:c3:b0:a4:65:69:e1:f0:
         67:f2:32:08:7f:40:28:f8:58:f2:1c:f4:66:a9:5b:53:68:4f:
         a9:8c:f0:d0:13:7e:a2:86:50:b2:e3:b5:fb:3b:1f:f9:3d:a8:
         31:4b:f1:2b:30:aa:60:a1:89:b7:98:5c:37:ab:cf:67:be:4a:
         54:77:4a:47:dd:fd:d5:94:8c:91:05:7b:e3:9e:6b:94:30:03:
         11:af:7f:a4:22:d6:eb:7a:c2:ca:cc:89:a6:f0:a5:d5:3b:a7:
         80:40:a9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:18:34 2026 by rpki-client