Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
File:                     U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json)
Hash identifier:          kkJobCz/GkoRNRRr+I3ImucIFYeaLpNbH2BMssv4lk4=
Subject key identifier:   20:AE:5A:B3:96:58:DC:05:AF:F0:71:08:99:96:F7:59:C7:50:55:16
Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
Certificate issuer:       /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Certificate serial:       0584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
Manifest number:          057A
Signing time:             Thu 23 Jul 2026 00:06:04 +0000
Manifest this update:     Thu 23 Jul 2026 00:06:03 +0000
Manifest next update:     Thu 30 Jul 2026 00:06:03 +0000
Files and hashes:         1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: Lb80vbX8K7TbkRLLyHFO9RK6RCIlvlKrON9OkEX9Jjg=)
                          2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: bR2E+gd+wrOJUwU1dHm00di9g4h4d99vt7PxzQB7b14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl
                          rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130837, serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
        Validity
            Not Before: Jul 23 00:06:03 2026 GMT
            Not After : Jul 30 00:06:03 2026 GMT
        Subject: CN=6a615aec-dbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:d9:cb:35:46:2b:b2:6a:8f:5e:50:cf:18:
                    30:27:a4:31:0f:3b:79:28:6a:4f:ab:f3:4e:1a:6a:
                    2a:c2:d1:4e:39:3a:22:7a:b9:5c:ca:ea:52:03:00:
                    9f:76:14:dd:ac:d1:79:bd:97:45:b1:50:b9:2c:95:
                    7c:51:8c:ac:3b:53:16:93:1c:24:63:cd:08:96:ff:
                    f4:f1:57:88:e7:db:a9:50:22:68:89:23:13:c7:e5:
                    7b:2f:1a:11:a3:fe:08:10:b9:84:a8:37:b0:f0:3e:
                    20:89:03:08:71:c6:60:06:39:59:68:35:5d:b1:b5:
                    40:c1:12:c0:2b:0d:42:1e:96:b6:a9:e0:bd:82:3b:
                    09:22:9a:33:b8:af:ad:9e:17:cd:53:22:27:e2:38:
                    58:53:6b:bb:92:a1:26:21:4a:0c:88:f9:4a:09:ec:
                    15:6a:bf:d6:74:ce:20:1f:0b:c9:46:61:76:91:6d:
                    97:56:51:ec:5c:cc:30:48:d5:08:37:96:0b:89:3e:
                    3a:7b:32:60:9b:c1:89:ad:8d:ca:c7:44:63:26:5f:
                    6c:05:95:a8:9e:c2:bd:5c:eb:47:d5:4d:3e:6c:f8:
                    9d:20:a6:9b:47:a0:9c:4e:01:f1:e6:97:56:77:50:
                    ed:d3:c5:85:c7:20:1c:d0:98:6a:36:b3:07:aa:f9:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:5A:B3:96:58:DC:05:AF:F0:71:08:99:96:F7:59:C7:50:55:16
            X509v3 Authority Key Identifier:
                keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:75:a8:7f:ed:52:bc:47:ef:6a:ff:d1:c3:1f:2b:30:36:
         aa:3e:b5:4b:e5:8b:0e:a7:4e:bc:b5:42:91:9f:32:b4:e5:1d:
         b9:e1:0f:fb:e5:79:8e:74:29:8f:9d:c5:46:90:a3:9a:9c:b6:
         e4:c6:05:21:90:09:55:2a:36:32:d1:24:9b:b1:07:53:d0:67:
         e9:3d:6f:c2:79:1b:8b:72:a2:33:7c:a0:55:51:1a:86:27:1d:
         11:4b:a0:b2:5a:83:cf:75:73:aa:58:be:c1:3f:10:01:63:25:
         81:f1:f6:96:42:2a:90:44:9c:c6:d5:89:4a:3c:f6:ff:27:15:
         29:a4:f7:2b:45:50:c5:73:59:c7:56:af:0c:d5:d7:ad:02:f9:
         f8:f6:2f:ea:53:c4:ea:78:b9:ba:a8:f0:c3:7d:f4:7e:87:17:
         5a:61:83:26:46:78:8f:de:df:24:b7:50:15:bd:0f:57:e7:2e:
         c5:fd:1d:df:2e:14:08:8b:33:5e:df:2e:cf:be:f5:93:4a:3f:
         23:c9:b5:08:11:8f:5d:eb:8e:40:04:e9:e6:9f:94:c9:c5:2d:
         1a:d4:c3:31:ea:e7:61:e1:9b:27:2c:d6:8b:cb:7d:1c:64:6f:
         21:a4:a2:7c:69:7c:23:9b:65:20:cf:6e:54:3d:c3:6e:e5:45:
         d7:da:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:08 2026 by rpki-client