Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119461/6B2F2F6E4DC311F185151B97AE833773/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.mft
File:                     vPApoMl6h3EGCdQ_tDIvlq7Jkaw.mft (raw, json)
Hash identifier:          wiA1Cp4HehJ185zYccBYGlBTv/B8RZfiWD1vsmoxrnE=
Subject key identifier:   70:2D:1E:CB:73:DC:56:A2:0E:2D:09:12:13:DF:28:2F:1D:4A:9E:A2
Authority key identifier: BC:F0:29:A0:C9:7A:87:71:06:09:D4:3F:B4:32:2F:96:AE:C9:91:AC
Certificate issuer:       /CN=A9119461/serialNumber=BCF029A0C97A87710609D43FB4322F96AEC991AC
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119461/6B2F2F6E4DC311F185151B97AE833773/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.mft
Manifest number:          28
Signing time:             Thu 23 Jul 2026 10:53:42 +0000
Manifest this update:     Thu 23 Jul 2026 10:53:41 +0000
Manifest next update:     Thu 30 Jul 2026 10:53:41 +0000
Files and hashes:         1: vPApoMl6h3EGCdQ_tDIvlq7Jkaw.crl (hash: HPc5JfCD9YV1w0ss8+DbXgntK7Nul2ziBxQWAE41Mdw=)
                          2: A7170CAA51D211F19797AD7E8F833773.roa (hash: T4VW//HiqB8CChMf47kOdxAuBVRxwdnDOt1frcrIdjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119461/6B2F2F6E4DC311F185151B97AE833773/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.crl
                          rsync://rpki.apnic.net/member_repository/A9119461/6B2F2F6E4DC311F185151B97AE833773/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119461, serialNumber=BCF029A0C97A87710609D43FB4322F96AEC991AC
        Validity
            Not Before: Jul 23 10:53:41 2026 GMT
            Not After : Jul 30 10:53:41 2026 GMT
        Subject: CN=6a61f2b6-0b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:79:c3:f7:63:6d:90:53:00:47:07:2e:c3:
                    38:ab:ba:62:cc:a5:a8:9d:27:87:13:e6:7a:c4:2a:
                    b9:e9:7b:f8:d1:08:38:14:4c:d8:de:ef:57:90:58:
                    b3:fb:27:66:0f:6a:b5:ad:da:79:55:af:c2:07:62:
                    b1:73:1f:ba:30:a9:88:cd:8e:4d:d0:1d:55:48:af:
                    a8:86:35:5c:8b:09:c5:cb:50:02:3e:7e:cf:82:19:
                    0c:a9:1c:bf:90:3c:91:56:56:3d:be:a0:a3:84:af:
                    7a:f8:0e:48:c3:a7:61:f7:a8:a5:21:57:8a:94:49:
                    10:31:9a:e3:3a:26:79:ab:1e:3a:c7:64:51:16:c7:
                    0e:b3:37:83:f7:96:6e:42:15:3e:87:18:2d:b2:25:
                    66:ad:d4:0f:37:79:32:da:77:f0:9c:ae:b0:2f:11:
                    3a:91:88:2d:34:7a:a4:bd:0b:b6:98:6b:44:80:ce:
                    99:0a:97:b4:6d:dc:00:72:a5:f3:d7:75:73:0a:8c:
                    19:db:0e:e1:fd:2d:36:d5:d4:0e:3c:c4:0a:52:50:
                    c0:6d:b4:6c:ca:2e:14:17:85:e1:5b:fe:5f:63:e3:
                    74:79:90:fa:2c:1b:59:26:e5:0d:03:12:83:cc:13:
                    07:4c:f8:2e:b2:04:09:0b:9e:bf:33:be:de:00:01:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2D:1E:CB:73:DC:56:A2:0E:2D:09:12:13:DF:28:2F:1D:4A:9E:A2
            X509v3 Authority Key Identifier:
                keyid:BC:F0:29:A0:C9:7A:87:71:06:09:D4:3F:B4:32:2F:96:AE:C9:91:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119461/6B2F2F6E4DC311F185151B97AE833773/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119461/6B2F2F6E4DC311F185151B97AE833773/vPApoMl6h3EGCdQ_tDIvlq7Jkaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:85:88:2e:f2:cb:d6:80:92:44:55:2e:f8:fb:eb:92:97:
         57:8f:91:db:4f:e0:2e:d3:6c:aa:7b:7c:be:d4:71:66:85:43:
         73:2e:08:ad:f8:2a:78:b9:95:75:7d:99:d3:ed:0d:07:4a:1e:
         43:d8:2d:76:6b:78:ef:91:3e:aa:31:ed:80:15:34:a9:d5:f7:
         16:42:9c:36:a8:66:fe:2c:23:f6:db:0e:ed:fc:e0:a5:70:2b:
         c0:97:fa:9c:49:cb:65:62:09:c2:fe:c9:d6:46:46:68:fb:5e:
         23:f9:a0:62:0b:e4:b0:6b:d5:89:0d:72:e9:3b:7f:e6:fa:58:
         e8:10:be:73:3e:60:1b:d0:54:ef:9a:57:ce:ca:cc:ab:74:ff:
         e9:e9:1a:98:e9:fb:bd:ab:21:de:83:7f:ed:53:e3:d7:bd:f4:
         0d:e8:01:5b:f9:dc:81:b0:7d:9c:c1:94:63:9b:7b:31:34:08:
         91:03:9a:be:33:9d:60:08:65:cd:71:86:90:3a:7c:62:62:1f:
         34:c7:97:22:1f:cd:12:a5:4e:65:c4:67:72:76:85:0f:5e:87:
         56:c9:53:41:f3:5d:bb:c3:63:36:9d:53:1b:82:be:1b:9f:89:
         7b:0a:04:ad:92:5a:ee:dd:c6:00:48:d8:f2:9d:22:82:d2:d0:
         12:d6:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:24 2026 by rpki-client