Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
File:                     r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json)
Hash identifier:          +lYxZM6vMJCoQ9ra3jFrqua4HzbzfAv821w5mudAkco=
Subject key identifier:   5B:DE:06:F7:89:28:F9:A3:3A:7F:E8:CD:70:EE:70:40:60:B6:0C:F3
Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
Certificate issuer:       /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Certificate serial:       0C99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
Manifest number:          0C90
Signing time:             Wed 22 Jul 2026 18:53:41 +0000
Manifest this update:     Wed 22 Jul 2026 18:53:40 +0000
Manifest next update:     Wed 29 Jul 2026 18:53:40 +0000
Files and hashes:         1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: SvjYSaOuM5oxSi2r8Cy4seQjVOiAWLCMUgHWg7dU4RA=)
                          2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: MhK6fjpCgRPkr/iKRfOswI8Vu+Z6RpVv9J3L3B3Ndho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
                          rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3225 (0xc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
        Validity
            Not Before: Jul 22 18:53:40 2026 GMT
            Not After : Jul 29 18:53:40 2026 GMT
        Subject: CN=6a6111b5-a1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:81:f1:87:1f:cf:f4:41:ac:fc:22:26:39:
                    99:a8:58:98:30:fa:6a:ef:ff:7d:29:c0:a0:3d:d2:
                    95:1e:a3:99:02:b7:17:24:e7:f1:99:20:25:ed:52:
                    16:f1:45:2c:a3:31:81:6a:f5:da:b7:47:4e:aa:1c:
                    e4:5d:48:53:d5:ac:14:b6:f8:c0:c1:88:d8:17:38:
                    eb:9f:7a:3b:97:2a:a4:08:29:a2:c5:4b:e5:ed:3b:
                    5c:4a:a4:4e:d6:c8:00:a3:fa:0f:eb:cc:5a:2d:7a:
                    c3:27:cc:83:5b:3f:ce:97:bb:72:e8:5e:bb:83:c5:
                    b1:90:0b:3f:c5:7e:96:78:fa:da:eb:ff:16:d4:ed:
                    23:6b:f6:ed:16:35:eb:19:ac:e7:96:1c:be:59:64:
                    b6:c6:e8:68:aa:a7:36:8d:64:8c:ab:fc:fa:b1:15:
                    28:32:eb:af:45:9f:78:8c:b1:65:ff:5a:b6:cb:16:
                    65:73:5f:b8:d1:b3:41:92:fd:6b:a8:7c:25:7d:ea:
                    ef:31:8a:75:2c:b5:b6:8b:8f:74:e4:9c:2c:a6:a1:
                    ec:19:97:8e:f6:0a:9d:86:e6:cd:5e:e7:e7:97:bf:
                    7e:0d:df:a1:f1:95:25:68:b5:fe:1d:49:7a:10:20:
                    e8:59:17:bb:8e:21:b5:dd:bf:eb:8b:32:42:96:ab:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DE:06:F7:89:28:F9:A3:3A:7F:E8:CD:70:EE:70:40:60:B6:0C:F3
            X509v3 Authority Key Identifier:
                keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c3:ac:72:46:57:60:fb:e8:7a:72:08:4c:5e:28:54:fe:1a:
         df:85:06:ed:61:bd:9c:7c:d7:2c:6d:40:ff:87:5d:c9:1b:86:
         19:32:4c:ef:22:23:1b:9e:74:2d:20:63:99:95:95:1d:a4:9a:
         df:2e:6b:22:58:3d:ca:15:c7:fd:da:88:82:32:0c:6a:0b:2b:
         65:4b:c9:ac:f3:18:43:4f:b9:4c:5b:20:63:58:36:fe:69:e8:
         b5:2d:58:91:5d:63:78:f4:c8:84:b3:7b:f3:bf:08:29:32:ee:
         b2:3f:98:35:16:85:44:6f:85:57:db:d8:64:25:80:16:0c:74:
         30:f7:cc:83:95:de:13:ec:d4:aa:c8:84:be:b8:38:de:d3:ce:
         d2:dc:de:ec:74:d6:19:e3:66:23:21:e4:11:ef:f1:2a:98:ac:
         fe:f4:aa:f3:b1:8e:1e:f0:4e:4c:fb:4d:2e:d9:83:33:7e:e3:
         3f:11:83:ee:33:00:08:38:d2:8b:d2:90:30:1b:da:0f:94:96:
         cb:ee:75:e8:1b:ff:64:c0:5d:75:fc:66:23:67:bf:3c:65:e6:
         7b:2c:2f:bf:f3:d0:3c:73:26:99:5b:69:8a:44:80:fb:0d:24:
         41:be:ab:19:e5:26:32:7e:55:43:91:b2:cb:46:e3:ed:8b:bc:
         65:4a:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:39:36 2026 by rpki-client