Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
File:                     -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json)
Hash identifier:          l/dc/a/X/nCge3ak/9mYqjLRuxB70d4tkdKDdHHWDf4=
Subject key identifier:   CE:EC:FA:C3:E6:A0:06:67:3F:C9:47:27:01:91:9E:BE:6C:04:28:E1
Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
Certificate issuer:       /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
Manifest number:          0158
Signing time:             Fri 17 Jul 2026 06:17:45 +0000
Manifest this update:     Fri 17 Jul 2026 06:17:44 +0000
Manifest next update:     Fri 24 Jul 2026 06:17:44 +0000
Files and hashes:         1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: 6uEVNIoET3yvQNcUOBRq2VJPr3COgIY7U1Cok978AUw=)
                          2: C276060084F011EF9D52F573C4F9AE02.roa (hash: GaX2eTz1KVZJBCRnp0CPc8pGqtf6VC7dkGVx9Fs53F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
                          rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
        Validity
            Not Before: Jul 17 06:17:44 2026 GMT
            Not After : Jul 24 06:17:44 2026 GMT
        Subject: CN=6a59c909-7fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:75:a3:12:02:ba:e0:a9:fa:6d:a1:bd:5c:
                    e6:91:41:a8:a4:57:07:4a:66:cc:09:76:35:c5:01:
                    62:58:38:d0:4f:f9:24:53:b3:f4:c4:3e:32:7b:ae:
                    60:4b:e3:58:a2:03:7b:85:db:11:ea:3c:76:77:26:
                    7b:a3:e3:d0:5a:45:ea:59:3c:b7:54:af:e9:5b:83:
                    3c:dc:09:eb:01:f1:6b:50:09:bb:46:0f:5d:b5:a6:
                    cd:a2:3c:7e:c5:c5:a0:84:e3:02:56:6c:50:ad:1f:
                    56:c9:de:50:c7:fd:9c:a9:fc:86:8f:d1:38:f4:b7:
                    a1:1b:c4:e6:80:9d:a3:34:0b:3b:c5:f2:bf:e2:2b:
                    88:75:c3:d1:b7:9d:c4:32:57:a3:a6:2d:0c:04:2c:
                    ca:ae:54:25:43:44:79:1a:43:9f:84:91:88:a4:9f:
                    08:12:f0:b0:bf:8f:d3:e3:7a:39:24:e4:a0:f5:90:
                    ab:60:34:37:31:8c:22:b9:0f:01:c0:7d:9b:9d:02:
                    8f:61:e1:4f:60:33:78:e0:e5:be:fb:18:5f:4e:4d:
                    76:59:d7:39:67:8e:4a:87:5f:06:8d:01:97:5c:e2:
                    72:f2:17:75:ab:fe:b2:c7:57:bb:7e:9b:7c:fe:c9:
                    5b:2b:6a:20:65:11:e5:4f:03:a6:4f:ca:91:0b:68:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EC:FA:C3:E6:A0:06:67:3F:C9:47:27:01:91:9E:BE:6C:04:28:E1
            X509v3 Authority Key Identifier:
                keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f7:d5:98:7e:71:74:f0:74:a4:f2:88:81:4d:ad:7d:15:1b:
         9b:e6:ac:3d:85:00:83:9e:95:c0:b3:11:0f:2d:8b:c9:aa:f8:
         d3:12:5f:1b:5f:72:03:a7:1b:b7:a9:46:30:fb:95:40:33:85:
         78:30:5e:44:37:18:f5:34:98:4a:c6:56:d6:81:c8:c4:0d:b4:
         0c:f5:48:ba:9d:aa:39:f4:cb:46:48:d3:27:8b:01:25:2d:3d:
         63:3e:32:55:f1:e6:56:c7:89:f4:71:91:4d:f4:4a:97:a7:14:
         34:7d:2f:85:bd:7e:36:76:4b:91:c0:18:08:09:7b:5c:58:59:
         6d:7b:8f:e1:ad:b9:03:31:dc:38:e1:94:cc:63:f4:35:f9:e1:
         ea:c2:ec:06:6b:19:dd:d6:5e:17:e4:aa:77:fa:a1:71:7f:51:
         75:17:5d:b6:e6:2f:59:f0:ce:5d:a6:0a:55:25:4d:36:e6:e3:
         1a:5e:83:19:9c:ad:3b:bb:b4:d6:91:86:c9:39:4e:33:2c:f6:
         80:8d:3d:31:36:3a:15:b0:87:1e:30:0e:d9:67:ed:d6:5d:74:
         ae:f6:a7:99:52:98:23:c3:53:93:a2:64:56:f2:8c:9c:1b:7f:
         7d:53:bf:4d:b6:82:ee:56:56:5a:0b:96:db:07:99:3d:37:6f:
         7e:c6:66:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:26:58 2026 by rpki-client