Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File:                     tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier:          LdHiGnUtnBrhqa340x8UesNe/EBW0p9mjRgRiYzyd4M=
Subject key identifier:   28:7B:45:1C:6F:09:AD:F0:20:21:7E:25:8B:9B:A3:81:1A:75:58:BF
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer:       /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number:          0203
Signing time:             Thu 23 Jul 2026 04:28:11 +0000
Manifest this update:     Thu 23 Jul 2026 04:28:10 +0000
Manifest next update:     Thu 30 Jul 2026 04:28:10 +0000
Files and hashes:         1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: fKB4SpoIqAqyuSN9qdSnhpjxIsjy/315rXLivyScqPg=)
                          2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SzmtgdmOFJZhk9jVTnV/yTe6X6D8nfk0jT/tOuImmRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl
                          rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
        Validity
            Not Before: Jul 23 04:28:10 2026 GMT
            Not After : Jul 30 04:28:10 2026 GMT
        Subject: CN=6a61985a-f7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:af:94:06:97:a2:83:c5:7d:2f:e6:e7:c5:
                    b7:e8:55:a2:50:5b:9e:f8:3d:50:bd:7d:40:d6:eb:
                    07:06:e9:c3:36:ee:52:9f:1f:3a:59:0d:f1:92:bf:
                    a4:eb:7b:83:2a:76:da:f9:57:53:9a:34:3a:e7:3b:
                    55:98:93:55:2d:5c:4f:7c:70:27:33:03:dd:8c:21:
                    d4:9b:50:f4:10:2d:08:a8:0e:06:fa:89:ce:fe:d6:
                    ba:6a:e2:3f:5c:37:73:21:e3:2e:e5:5a:95:76:96:
                    5c:8b:81:ba:fc:5d:b3:39:5d:4b:02:3d:cd:74:92:
                    15:a2:23:01:b6:bb:b9:74:5f:5b:21:23:e8:fb:04:
                    fe:5b:0f:3d:df:9f:44:ad:0c:8e:17:f6:ce:95:75:
                    b8:ce:e2:b8:c7:bb:e1:8c:29:02:ef:72:1f:fc:2f:
                    af:91:42:9e:a4:cf:4b:c9:6a:0a:95:46:ca:36:76:
                    c2:a2:f1:39:cf:f3:01:41:26:16:19:e3:c0:10:06:
                    37:97:a1:02:e2:3f:8e:fa:b2:eb:40:61:68:1f:5d:
                    12:c8:5d:41:3e:aa:13:14:1a:e9:cf:da:07:d0:40:
                    e5:8a:47:a2:e8:bb:15:4e:1b:48:a3:f4:c1:9f:bf:
                    e0:cb:37:cd:aa:db:32:15:4b:b9:b9:8a:d3:36:7d:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7B:45:1C:6F:09:AD:F0:20:21:7E:25:8B:9B:A3:81:1A:75:58:BF
            X509v3 Authority Key Identifier:
                keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:40:de:9f:44:3b:d5:3c:33:ea:1f:9d:e6:9e:a2:5e:27:dd:
         4b:46:42:d8:c2:59:96:a9:bc:e0:9e:16:f6:f5:4c:a5:4f:8d:
         7c:ae:3d:79:75:c6:8c:e0:ef:db:87:c2:6a:80:52:4f:14:d2:
         6f:2b:30:93:04:66:db:73:ec:bc:e5:62:cc:ea:61:01:42:1d:
         93:72:4b:81:f3:c0:b8:3b:08:c9:aa:23:dd:47:1f:6f:ee:f7:
         fc:2d:e3:77:a1:13:1f:2b:2d:34:44:bb:b3:6f:45:92:de:57:
         a3:dd:5c:55:12:ea:1d:03:c7:31:36:38:4c:82:2e:c0:6a:3d:
         6b:9f:64:96:e8:18:d4:e4:ee:7a:62:60:45:de:78:ca:07:ec:
         8b:ca:07:fe:5b:2d:aa:25:37:df:d2:8e:d7:83:64:83:a0:f3:
         3e:aa:49:04:74:2d:87:9c:90:63:64:17:b5:22:b3:93:c2:5c:
         a8:81:82:ef:81:96:7c:a3:dc:92:c1:0b:1e:b8:d5:78:6f:43:
         a3:e6:0e:5a:78:19:87:6e:56:06:20:fb:d2:8d:60:bf:f6:b4:
         b6:5e:1f:9a:2d:ee:0e:2d:75:89:1b:af:b2:43:13:46:e1:57:
         69:14:1f:bb:8c:19:9f:45:30:ad:46:3c:85:2d:d6:54:ef:c1:
         53:77:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:57 2026 by rpki-client