Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
File:                     0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json)
Hash identifier:          szo29+2Ysx4fUi+gFxX5zdNLft5QSNkJp/mquWnlZfc=
Subject key identifier:   16:21:BA:F7:34:A1:35:F2:74:C1:7E:FB:DD:9B:4C:08:21:A9:49:07
Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Certificate issuer:       /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Certificate serial:       05AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
Manifest number:          05A6
Signing time:             Wed 22 Jul 2026 19:55:13 +0000
Manifest this update:     Wed 22 Jul 2026 19:55:12 +0000
Manifest next update:     Wed 29 Jul 2026 19:55:12 +0000
Files and hashes:         1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: tpTglKo2MvKAcfzaV7GFbbJuAzxmVcFVmaVXbvtlobs=)
                          2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: y/RhPkVawSLf+7/JutT935tMP9izv7b3n4uLlLkmRJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
                          rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
        Validity
            Not Before: Jul 22 19:55:12 2026 GMT
            Not After : Jul 29 19:55:12 2026 GMT
        Subject: CN=6a612021-e1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:d9:8f:01:f4:1d:05:9d:bc:b6:60:c7:8e:
                    bc:1e:21:c0:32:de:b0:27:3e:9e:db:18:b1:83:cf:
                    7c:6f:9c:a9:a5:d6:94:63:7a:07:2a:ed:d5:73:66:
                    47:db:72:da:d8:e4:3c:42:5a:af:86:99:50:68:91:
                    1a:41:f7:ed:52:3f:d9:dc:4d:be:6b:8b:cc:15:65:
                    3e:3c:e6:c0:a8:5d:85:ce:38:ab:4f:2f:91:8b:5a:
                    6e:ae:f3:58:20:a7:de:4b:53:17:fe:c2:b2:00:5f:
                    0f:7e:88:3f:49:39:37:46:fb:79:29:b4:9c:f5:c1:
                    a5:e0:58:a0:77:ca:44:f1:bd:aa:57:a4:39:67:2b:
                    ed:4a:c4:e5:7e:09:17:23:63:61:b4:b1:43:1a:2b:
                    7f:a0:bf:ea:a7:74:07:39:d5:c0:26:27:f8:4a:15:
                    c4:34:84:c6:0e:6c:8f:6b:b3:51:58:ae:0b:be:3a:
                    97:c2:3e:da:01:ab:fe:28:ab:d6:19:67:51:1d:d1:
                    d0:e8:f8:7a:b1:7a:46:46:c8:3d:2a:59:6c:7a:6c:
                    e2:0c:b7:d7:19:21:17:52:47:a3:5d:94:77:12:23:
                    ae:ac:ec:f5:c3:69:aa:fe:79:10:44:3e:10:5a:1d:
                    83:a7:a9:88:84:23:49:d9:d5:f5:c3:02:8f:3a:e8:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:21:BA:F7:34:A1:35:F2:74:C1:7E:FB:DD:9B:4C:08:21:A9:49:07
            X509v3 Authority Key Identifier:
                keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3a:6f:fd:1c:13:ab:33:68:03:23:fb:b1:3d:87:2c:9f:c2:
         98:b0:a6:9b:16:23:73:b1:3d:84:86:e4:fc:5c:96:dd:ac:0d:
         0f:09:83:87:7b:14:39:d4:e9:05:6a:e3:5d:fd:1e:60:cb:74:
         2b:19:af:1e:1e:4e:0e:ea:63:73:27:b6:28:67:5f:0e:5f:9b:
         e3:35:96:01:4b:91:be:74:b0:2a:4d:58:03:f5:19:f5:15:3f:
         43:39:46:ae:92:d1:12:f5:fe:e5:74:fd:3c:02:8c:cf:c0:48:
         99:44:9b:c6:42:4a:72:87:bd:da:75:8e:bf:d4:8f:43:1a:38:
         a8:33:df:c2:61:86:17:03:c6:e0:93:74:17:f1:c4:a4:7a:f0:
         c4:bf:40:ac:8d:c6:ed:fc:58:d3:35:1b:07:e5:40:48:04:e1:
         08:2b:51:d9:ac:20:6f:ef:89:c6:15:74:71:67:7a:5f:b3:0b:
         38:d7:2d:d3:f1:09:e6:29:7c:72:a0:e1:43:58:98:89:c9:fe:
         41:5d:8c:66:3c:81:2d:ca:14:30:26:10:ee:02:1b:02:f9:37:
         cb:55:58:88:36:51:2d:9c:f8:02:42:9f:9c:87:c9:70:d3:3c:
         bd:59:93:c5:77:72:5a:dd:1b:b9:d3:05:05:8f:ea:25:06:07:
         3e:97:9d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:44:57 2026 by rpki-client