Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File:                     -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier:          zFCuZ5bTkonzorJcQULxmaxKhDPWWBPyYnr1Czj4aoM=
Subject key identifier:   41:B3:F8:55:E7:26:B2:37:FC:71:FD:21:E0:B0:21:BB:FA:B7:5E:96
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer:       /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number:          033C
Signing time:             Thu 23 Jul 2026 01:58:21 +0000
Manifest this update:     Thu 23 Jul 2026 01:58:20 +0000
Manifest next update:     Thu 30 Jul 2026 01:58:20 +0000
Files and hashes:         1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: L/qMtb72g8nMcWtaJpMnhjMmM/+Zb2Jq+BV5+4CVWMc=)
                          2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
                          rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
        Validity
            Not Before: Jul 23 01:58:20 2026 GMT
            Not After : Jul 30 01:58:20 2026 GMT
        Subject: CN=6a61753d-b328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:82:69:77:4d:16:0e:a7:65:e1:ea:94:31:
                    ba:f7:5a:cd:6f:eb:ff:9f:bc:fc:fe:67:ba:50:25:
                    cf:01:2f:5a:fb:5e:a9:0c:0c:fc:7f:58:e8:73:f2:
                    02:a4:80:6f:fd:6c:15:56:48:a4:fc:67:47:9a:7d:
                    34:31:92:d8:68:9e:8b:8e:3e:e8:7a:78:b1:26:5e:
                    cb:68:73:cb:7f:9c:a7:c5:eb:38:da:e5:78:3a:32:
                    75:58:d3:a5:07:0a:1e:12:dc:10:76:e9:25:cd:80:
                    27:3d:e9:c6:be:19:e9:ee:71:7a:42:b8:be:62:7f:
                    4a:04:d5:40:1c:8e:8e:a0:25:ce:e9:7f:7a:3e:71:
                    2f:70:5c:2f:fa:2c:e0:fe:77:e2:85:a3:21:68:b4:
                    d6:e6:0a:68:fd:ec:22:b0:8d:86:88:e1:cf:ce:94:
                    d3:e4:04:63:4a:32:08:9f:17:f2:66:0c:ff:0e:87:
                    99:2a:84:25:72:c6:8e:b0:45:35:1b:29:79:19:eb:
                    aa:c5:21:16:d8:88:90:ad:dc:b1:ba:28:a9:fe:7e:
                    79:aa:e4:3c:af:40:ce:44:54:da:d2:bd:1e:48:ef:
                    af:4b:f2:95:ee:49:04:a2:64:cc:3e:c5:e5:f4:3f:
                    78:f7:8f:b5:f8:53:a1:20:d2:98:82:e1:28:93:99:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B3:F8:55:E7:26:B2:37:FC:71:FD:21:E0:B0:21:BB:FA:B7:5E:96
            X509v3 Authority Key Identifier:
                keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cb:70:df:8f:6e:c4:86:04:27:3c:d7:01:18:71:6b:a7:ae:
         b5:00:e6:a0:e7:d5:26:e3:b8:6b:fa:9b:9a:f5:56:55:10:6c:
         5b:34:77:be:11:1a:d0:e7:e3:20:ad:95:81:81:28:7a:6e:f5:
         70:de:70:e2:d2:5b:84:8b:8d:0a:10:3a:47:76:a5:07:7b:63:
         48:66:10:48:95:23:07:23:41:68:4c:bd:9a:38:4a:9e:c9:3f:
         78:1a:c5:29:b5:b4:90:6d:6f:6c:f5:fe:49:24:d7:a5:3d:a2:
         be:02:6d:4a:66:d8:2c:7a:67:09:dd:db:00:90:35:e0:f4:2c:
         6f:7f:30:5e:14:b0:5c:59:ef:8b:ab:a6:0c:11:a4:7a:d9:77:
         d7:f9:46:5e:e0:0e:fc:11:2f:11:00:8f:59:55:d9:2e:1f:a3:
         05:cc:28:67:ac:38:ec:2f:10:23:11:e8:6e:78:13:78:6e:da:
         1e:10:66:99:2c:84:b7:18:c5:bc:99:7d:4b:c1:09:3c:b4:96:
         4a:ad:59:48:35:a4:06:24:c4:e9:24:be:49:5f:01:0a:08:1f:
         b2:d1:6f:93:17:d0:06:32:4d:5d:e9:06:08:3c:aa:59:cf:5c:
         34:35:84:31:ac:84:e6:b6:d6:9b:27:54:f9:a8:9e:2a:b0:83:
         de:09:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:49 2026 by rpki-client