Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
File:                     cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json)
Hash identifier:          UCm4ZROCq/dnXUA9E8VqwQEeQ9h0+ZomKxzJtx5kCLk=
Subject key identifier:   B9:B7:EA:D8:D5:D9:3A:E1:2B:DD:E5:97:C3:A1:DE:D2:54:9F:F4:97
Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
Certificate issuer:       /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500
Certificate serial:       0728
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
Manifest number:          0718
Signing time:             Wed 22 Jul 2026 22:43:47 +0000
Manifest this update:     Wed 22 Jul 2026 22:43:46 +0000
Manifest next update:     Wed 29 Jul 2026 22:43:46 +0000
Files and hashes:         1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: HGEsVezxooW+UO0tGk7s1+NaWZobE6UTg0r57hqDdcQ=)
                          2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
                          rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500
        Validity
            Not Before: Jul 22 22:43:46 2026 GMT
            Not After : Jul 29 22:43:46 2026 GMT
        Subject: CN=6a6147a3-1d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:9a:8c:38:b6:9c:2d:55:0d:83:33:03:e8:
                    c7:9e:25:ce:da:1a:2e:e9:61:58:a7:88:52:1d:72:
                    51:44:08:99:d0:75:5c:23:da:10:a4:00:0e:77:d1:
                    bf:f0:61:dd:a2:bf:d1:06:b9:52:16:be:c6:ca:08:
                    32:4d:3a:0c:97:08:de:72:60:10:2f:b8:a2:3c:d5:
                    de:e4:66:d3:65:cc:48:b5:08:80:82:48:f8:de:cb:
                    b4:6e:bf:63:9a:5e:52:82:5a:b7:c0:75:04:62:e5:
                    5e:82:ab:82:93:01:49:44:42:cd:65:6c:25:ac:81:
                    7b:14:2d:58:4b:fd:a2:64:3b:0a:e6:40:a1:8d:fd:
                    e3:5e:23:3a:e6:db:e3:0e:a1:5b:ab:92:c4:8f:68:
                    38:c7:86:46:ba:f7:e2:2f:8a:2f:4c:c8:3e:37:cc:
                    f7:e9:3a:bb:72:a3:a8:0e:1f:43:02:73:4c:fe:43:
                    b2:06:2a:46:42:0b:55:be:e2:3e:fd:ef:a3:04:1c:
                    eb:2b:95:2d:05:e9:be:8f:6f:30:96:a0:79:e3:b3:
                    bb:af:77:8c:82:81:09:39:fd:c5:30:0c:5c:8e:60:
                    6a:e2:f7:20:01:25:50:fb:f8:97:d1:af:a4:9b:6f:
                    72:de:06:37:d4:4d:19:44:cb:03:c8:d2:bb:0f:b5:
                    47:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:EA:D8:D5:D9:3A:E1:2B:DD:E5:97:C3:A1:DE:D2:54:9F:F4:97
            X509v3 Authority Key Identifier:
                keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:52:c7:b9:b7:05:4b:35:e6:14:cc:45:f2:9a:0a:97:98:
         ec:2a:bc:bd:4f:e1:45:c1:95:92:0f:10:66:98:15:2a:bf:ae:
         84:3a:7f:58:77:2e:99:30:b2:75:b3:14:3b:cf:28:3b:ce:08:
         f0:64:a0:bf:8f:78:4a:12:ea:c1:85:0b:ab:f7:9e:07:18:26:
         40:b9:56:c2:21:01:0b:09:ad:56:d1:50:bb:7b:ba:a1:5f:dd:
         07:3c:56:5b:c3:a5:7f:20:ea:a5:bf:97:31:9b:2b:29:10:ae:
         23:6e:f2:b3:73:34:66:b2:e7:0e:5b:cc:e2:62:0f:03:c3:45:
         bb:68:68:63:6a:68:ad:d5:a7:89:62:89:ee:63:cb:4d:81:26:
         1c:88:41:86:94:55:4d:b4:8a:b8:49:b0:6b:df:5e:ac:65:9c:
         42:d3:89:4c:df:b1:99:f8:e8:71:f1:84:ac:01:46:3e:d9:24:
         1b:11:61:14:63:62:fd:8f:69:84:fb:32:8c:b5:d0:23:f2:22:
         33:2a:fe:56:84:3d:3a:72:fc:67:1c:42:33:aa:e1:55:bf:24:
         05:d7:19:7c:b8:36:54:76:61:56:b5:22:88:80:63:5f:27:69:
         29:4f:a4:a9:f1:2f:8c:4c:fd:e3:bc:ff:fe:23:f4:03:cf:5a:
         d1:53:24:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:36 2026 by rpki-client