Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
File:                     P20pux90eTz4jHg3KFY7vUPoCj4.mft (raw, json)
Hash identifier:          nO1F++zhzcUFzNaE7HxMu3324gi65y8AOWwJkar4RFM=
Subject key identifier:   EE:17:26:C9:93:77:BF:F4:0D:FA:7D:46:41:5B:71:FC:2D:11:D1:AC
Authority key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Certificate issuer:       /CN=A9186428/serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
Manifest number:          41
Signing time:             Thu 23 Jul 2026 10:29:01 +0000
Manifest this update:     Thu 23 Jul 2026 10:29:00 +0000
Manifest next update:     Thu 30 Jul 2026 10:29:00 +0000
Files and hashes:         1: P20pux90eTz4jHg3KFY7vUPoCj4.crl (hash: BzbMJIm8FvkwbF/lXKdBMY9aUFRF3aQDXMs4gnUB5+c=)
                          2: 66767246246211F193F9A3F1C5833773.roa (hash: I6tnaRrL2ImhRfp92h3chg5E+cCvl6J/obElhMxuuOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
                          rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
        Validity
            Not Before: Jul 23 10:29:00 2026 GMT
            Not After : Jul 30 10:29:00 2026 GMT
        Subject: CN=6a61eced-9dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3b:44:ef:8e:e2:f4:f5:ed:c9:c2:3f:bf:58:
                    32:f9:96:31:a1:fc:09:46:ca:d6:e2:1c:2c:89:2d:
                    1b:ff:dc:52:da:21:e9:65:26:44:a1:9b:cf:14:2c:
                    42:3b:4b:7f:78:58:ab:33:33:c9:5a:ad:87:63:9f:
                    a6:c0:1d:4a:ec:b9:04:18:d3:2d:59:9d:d3:97:e5:
                    51:06:30:f9:15:07:04:45:34:8b:2a:2c:b0:58:0e:
                    aa:b8:bf:fa:d3:8a:79:b9:86:91:b0:9b:6c:c1:3d:
                    d2:7c:61:97:aa:4b:ee:3d:92:da:02:7a:f3:d3:90:
                    96:02:c1:05:1c:f9:a2:75:83:0b:08:a1:8a:4d:b2:
                    13:d1:c1:66:fb:12:f0:f5:50:13:27:67:ff:ca:1c:
                    18:e2:7e:5e:a4:7f:11:31:ee:fc:f1:dc:2c:cc:b1:
                    b2:e3:4f:68:50:e7:f0:37:6f:fa:1e:9a:e3:0a:6b:
                    66:7d:c1:13:aa:00:90:6f:af:e4:93:47:1f:cf:1b:
                    24:9e:dc:45:db:6a:a5:32:d5:d2:6c:fc:27:7e:54:
                    ee:9d:67:1b:46:02:ba:3b:46:74:36:cc:73:c3:f3:
                    e9:f7:d6:60:b6:36:ab:21:52:b8:a3:2d:8d:ea:86:
                    49:d3:42:f6:b2:03:9a:8c:c0:9b:03:b7:76:d9:55:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:17:26:C9:93:77:BF:F4:0D:FA:7D:46:41:5B:71:FC:2D:11:D1:AC
            X509v3 Authority Key Identifier:
                keyid:3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2b:3f:b7:2b:e0:fa:d4:0c:31:25:18:58:18:4e:6d:ec:bd:
         76:97:08:2d:3c:6f:ec:dd:f0:c1:22:48:d4:31:e3:79:d2:31:
         41:77:ca:46:ce:7c:ae:d8:ac:f1:1a:2f:53:b5:e9:48:3e:46:
         41:2b:f5:c7:48:e7:0f:c0:14:6f:cd:ff:fc:4f:e6:50:3e:4a:
         31:51:22:c2:24:81:3c:a5:25:44:39:08:5f:f4:98:38:62:26:
         be:1c:98:3b:f0:e9:c1:88:a3:8e:88:a4:0e:3e:8b:36:3a:f9:
         a6:06:19:43:69:07:f2:a7:4b:cc:da:e6:67:04:d4:ae:74:6d:
         64:4d:93:7d:b0:ba:f8:7d:d3:23:6a:33:13:76:c6:a1:e4:45:
         58:c3:cf:a7:5c:24:73:d7:c2:20:d8:a9:12:7c:78:52:f3:b4:
         54:82:d3:ce:74:b7:01:10:bd:08:22:27:36:b3:b1:61:ce:bf:
         ff:31:62:06:85:6c:25:13:55:c3:42:18:80:b9:8f:58:f5:8b:
         3d:d7:63:c9:c2:3a:6f:e8:68:06:b6:ca:9a:bc:82:c9:a2:5f:
         71:3d:b6:5e:44:10:0d:a7:f2:c6:08:60:5f:7f:5d:f0:ae:21:
         b4:50:8e:51:bb:6f:f7:eb:38:e1:6e:21:61:6b:a3:60:78:a2:
         d1:7d:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:30 2026 by rpki-client