Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
File:                     e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json)
Hash identifier:          06QkKLMY/HgU5u1XctLP1APTQ1Lnl3RxAG4qWPAXE8o=
Subject key identifier:   BC:1D:7D:4D:6C:94:07:B9:AA:A1:65:A3:1B:F5:B3:0D:94:F1:20:D0
Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
Certificate issuer:       /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
Manifest number:          0209
Signing time:             Wed 22 Jul 2026 16:31:45 +0000
Manifest this update:     Wed 22 Jul 2026 16:31:44 +0000
Manifest next update:     Wed 29 Jul 2026 16:31:44 +0000
Files and hashes:         1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: SIDhxk1uTcRO7IdaiDxDFjt62ENoidBLxhPN6TGVUco=)
                          2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: yEyjyfL4qmMdrXUNa8/FxH8a11hKOq88Y/fK6pSWFOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
        Validity
            Not Before: Jul 22 16:31:44 2026 GMT
            Not After : Jul 29 16:31:44 2026 GMT
        Subject: CN=6a60f071-366a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:52:b9:d5:a8:d4:05:40:3c:c3:97:34:71:
                    b8:1e:fd:7d:85:83:90:f4:28:9b:81:18:d8:52:74:
                    71:2b:bd:bc:b8:bd:e1:01:7a:e7:43:5e:a4:12:81:
                    3f:36:10:9e:4a:75:42:a2:14:22:07:49:dd:ae:02:
                    0f:70:d4:df:9b:3c:22:a2:42:ac:f5:88:bb:00:0f:
                    6e:f7:d4:74:f6:94:78:b3:92:fa:d1:1e:9b:37:06:
                    5e:79:9f:df:af:a5:c4:97:ae:95:5b:95:48:50:52:
                    fb:a2:98:3e:64:f4:a8:38:86:68:9c:37:d5:c7:81:
                    d6:3d:51:fb:ef:ef:71:b2:dc:2e:ac:61:12:50:bf:
                    f4:e0:bf:82:3c:e8:c3:97:10:22:e3:9f:0a:9f:8e:
                    f1:75:e6:89:b6:5b:54:5c:be:c1:26:de:8b:20:64:
                    5b:e4:3f:77:d6:9d:d3:d0:f3:02:dd:8d:a0:ef:5e:
                    7d:79:c9:04:29:dc:cf:d3:47:2d:21:25:29:4e:0f:
                    0f:85:57:48:18:2c:0d:e2:39:56:28:e0:e5:dc:e7:
                    73:29:43:3c:bd:5a:b2:49:10:28:27:e3:5b:23:f8:
                    5a:27:19:76:41:d0:dc:83:7e:25:30:89:df:f6:2b:
                    b2:27:be:ac:44:bf:a3:cc:06:c8:80:17:93:33:45:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:7D:4D:6C:94:07:B9:AA:A1:65:A3:1B:F5:B3:0D:94:F1:20:D0
            X509v3 Authority Key Identifier:
                keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bc:c7:82:f7:cb:33:53:ba:4c:53:ad:ca:eb:24:5f:e6:63:
         c6:16:64:63:f1:fd:5e:68:f6:7f:9b:ea:9a:d1:bc:97:10:74:
         45:73:a7:e5:8c:4d:48:f9:d8:9a:36:35:92:de:19:a4:2a:71:
         ed:40:8c:fa:ea:da:cc:f7:b6:e0:05:8c:a6:f9:fb:e9:88:af:
         7c:9a:c4:5c:08:34:7d:a4:9f:e4:23:90:38:8a:3f:ea:eb:6c:
         a0:57:36:84:e6:8d:c5:ff:ab:8a:2e:73:e9:d0:99:30:5a:39:
         ab:63:a6:90:c8:a1:a4:af:1e:b2:0a:a7:89:5b:ca:49:43:25:
         05:42:f0:9d:c0:c2:30:d8:ea:26:e2:1c:06:7a:cd:9e:34:5b:
         2c:bc:ec:ee:39:1f:5f:fa:61:0e:eb:fb:72:22:f3:ab:9b:05:
         83:18:7e:3e:d2:9c:99:1b:23:9e:43:5d:51:58:41:d5:0a:6b:
         bc:f0:93:a7:db:31:59:06:94:b6:68:86:6e:4d:13:22:a9:30:
         53:40:65:a7:f0:95:82:9e:b0:01:ff:b4:43:84:e2:98:43:06:
         d8:6d:96:06:49:0b:53:c5:fe:78:a1:e5:59:c5:6d:7e:0c:80:
         88:14:5b:dc:a3:fd:ea:0a:f2:0b:06:51:ea:ef:a4:05:e6:31:
         07:dd:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:52 2026 by rpki-client