Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File:                     if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier:          C+C0rWDkH+4VXIG+mwULBD+vMAliIYKECQsvllW2evg=
Subject key identifier:   C0:DB:9B:8C:CF:7E:23:9B:C5:8A:CD:7F:A6:83:52:14:59:86:5D:01
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer:       /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial:       3593
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number:          356C
Signing time:             Wed 22 Jul 2026 15:07:16 +0000
Manifest this update:     Wed 22 Jul 2026 15:07:15 +0000
Manifest next update:     Wed 29 Jul 2026 15:07:15 +0000
Files and hashes:         1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: NQ8VJyOtRAB2pbgaf+a8Xu6dr4Al6SABSpt+NQWd8XM=)
                          2: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=)
                          3: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=)
                          4: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
                          rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13715 (0x3593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
        Validity
            Not Before: Jul 22 15:07:15 2026 GMT
            Not After : Jul 29 15:07:15 2026 GMT
        Subject: CN=6a60dca3-d09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:f3:ab:29:b6:0d:02:97:bc:0f:e8:73:cc:
                    1d:84:a3:d2:56:1d:8f:cc:28:ab:29:47:f8:83:82:
                    26:a4:05:7c:ee:30:53:9c:c6:41:09:f6:07:fb:85:
                    de:38:7b:5d:4c:49:37:0b:ff:74:1f:de:e5:f9:0a:
                    36:0b:21:4b:4b:87:e2:22:f6:0b:57:7f:e6:91:d8:
                    1b:65:e9:6c:c5:65:39:28:da:4a:36:ed:51:6b:09:
                    5a:96:c9:a2:bf:7e:0d:f0:a7:3a:03:0e:56:73:2a:
                    54:0f:72:9a:3b:d5:41:26:2b:d2:2b:63:93:82:3a:
                    d8:e1:01:86:e9:b5:b5:b4:f7:8a:24:c7:83:3d:92:
                    78:01:10:da:e9:37:8a:f7:8b:e7:a7:58:36:9f:fc:
                    e5:07:ef:31:ff:1a:9d:ae:80:98:ef:72:f1:9b:a4:
                    21:cf:a0:9d:ed:9a:3c:ee:bc:9a:9d:4e:d4:98:a5:
                    01:1e:b0:e4:bb:be:e4:f5:15:dd:a2:ba:57:1c:99:
                    87:20:01:3e:1a:87:b8:54:90:4f:ad:14:97:dd:13:
                    ed:f6:d6:aa:15:41:82:68:b5:e8:bc:ec:aa:83:a4:
                    df:aa:cd:f3:3e:cf:9b:3d:58:3e:c8:9d:47:cc:61:
                    e2:dd:ed:bb:57:02:b3:3c:33:e8:6e:f4:5e:4d:85:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DB:9B:8C:CF:7E:23:9B:C5:8A:CD:7F:A6:83:52:14:59:86:5D:01
            X509v3 Authority Key Identifier:
                keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:49:79:dd:2c:1d:a0:67:2d:8a:32:d8:dd:b8:22:17:be:
         14:e8:27:80:bc:1b:06:10:4b:e3:89:5b:88:0e:3a:59:21:20:
         22:37:40:08:a0:35:5c:24:e1:d4:0b:d6:53:12:17:1a:a9:1a:
         2f:9c:73:ae:99:4e:3b:bc:34:6e:cd:2f:00:92:b6:14:0d:ce:
         b5:eb:06:45:36:23:1c:46:e3:4e:92:15:7a:4f:23:1e:2c:58:
         65:d2:3c:5e:1e:c2:af:74:b2:35:ba:e9:83:51:c8:95:83:4d:
         22:1b:e2:6b:97:57:71:63:0c:b8:b8:5c:56:39:6f:91:75:83:
         b0:46:d9:f3:e4:e7:2a:38:ca:70:a8:15:ab:fb:e4:cf:bc:f0:
         61:ae:f0:0f:ab:95:f8:69:b1:9d:18:c0:1c:86:1f:67:bb:07:
         51:89:03:41:77:69:c5:f5:c8:21:eb:30:80:87:fe:b2:79:12:
         da:5d:ea:8b:0d:b3:13:54:32:aa:ff:36:97:8b:06:8c:01:dd:
         5d:29:e5:3a:ab:cc:1a:64:a1:b5:70:bf:f2:1b:d0:4a:ec:7d:
         1f:30:50:27:28:f5:49:f2:64:b9:5d:68:ab:b0:8f:e7:89:d9:
         c8:6b:3d:b4:ed:0d:b0:71:70:b1:4b:3d:d9:bb:16:fd:ed:04:
         05:a0:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:24 2026 by rpki-client