Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File:                     2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier:          3UeHlNbCu05/C0IuphQy6jdzEj2aWKBHPS30NlHsb6c=
Subject key identifier:   89:3C:B2:02:D6:88:67:EE:F9:4C:C2:F8:A7:3E:66:81:1B:A2:02:FC
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number:          0222
Signing time:             Thu 23 Jul 2026 04:12:48 +0000
Manifest this update:     Thu 23 Jul 2026 04:12:48 +0000
Manifest next update:     Thu 30 Jul 2026 04:12:48 +0000
Files and hashes:         1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: jndIOIla+UsfwmNXJZazrkQJYggi9GbAuhWGqjxJtCU=)
                          2: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=)
                          3: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=)
                          4: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Jul 23 04:12:48 2026 GMT
            Not After : Jul 30 04:12:48 2026 GMT
        Subject: CN=6a6194c0-847c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:de:d4:6a:82:2d:ad:bc:5f:49:dd:57:3e:
                    29:20:0a:b1:07:57:58:80:60:bf:29:68:be:14:3e:
                    1e:55:2d:13:fd:7b:cc:c9:e0:aa:d2:1a:65:9e:15:
                    7d:6e:c9:db:c5:35:2a:93:c1:a2:9e:e0:38:5f:fb:
                    d5:ec:7f:b5:35:4f:58:3b:c0:df:36:bd:38:dd:31:
                    d6:49:db:1e:d0:5f:8b:00:2f:21:db:b0:81:dd:e0:
                    ef:28:1f:01:e2:21:87:31:64:e9:35:85:10:38:c4:
                    95:c4:88:5a:1d:fe:df:37:49:5c:84:ce:db:b1:30:
                    5b:a8:25:b9:31:bd:b6:f6:95:6f:dd:74:e8:57:5d:
                    ca:6a:bc:ba:81:6f:ae:ba:e5:39:0d:9b:47:11:86:
                    8a:22:18:32:f9:25:41:bc:3e:b5:48:b5:0b:c7:64:
                    76:70:d0:4e:07:6e:30:39:d0:19:bf:09:d2:b4:1f:
                    f6:cc:8a:40:01:1e:b6:8a:ef:41:82:a2:42:84:fe:
                    c1:96:42:42:ef:c5:30:af:ee:4e:d1:27:7a:a8:b0:
                    64:27:8c:b8:f4:a4:07:bd:ad:92:b0:c8:ad:0f:13:
                    88:df:34:01:68:d4:c9:b0:32:88:cd:53:fe:a0:54:
                    4e:7d:34:b7:e2:ac:4c:74:4f:aa:a6:cf:db:2b:c5:
                    31:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3C:B2:02:D6:88:67:EE:F9:4C:C2:F8:A7:3E:66:81:1B:A2:02:FC
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cb:76:97:92:0f:4b:95:68:ff:70:5d:4c:d6:3a:67:bc:98:
         e9:d5:ef:65:04:7b:80:9f:18:91:94:ed:63:b9:2d:45:c5:ea:
         db:34:40:50:b9:5c:c1:f3:d1:68:8d:85:c1:16:e1:e7:fc:98:
         ae:82:cb:6c:dd:e5:52:c6:b2:c3:d6:23:4c:5b:91:43:79:de:
         4d:35:e5:41:f2:1f:ab:d2:c8:82:4d:ab:af:03:7c:12:94:9f:
         e3:4b:0f:3f:b6:e5:0b:4d:11:21:28:ea:25:58:79:2f:de:e5:
         6a:34:f3:7a:03:24:4f:b0:ce:2d:ee:12:11:50:86:50:2a:a3:
         ec:f6:75:b1:35:a4:3a:58:91:13:8a:a7:a0:7a:16:cc:d3:81:
         11:32:34:1b:8c:cb:55:dd:44:84:ee:21:f6:2a:ea:55:67:3e:
         6f:ec:01:81:76:14:5d:b0:20:00:53:03:66:94:b7:b5:fa:ab:
         ec:57:5e:91:43:f7:74:3f:3f:d5:a8:6f:c9:6c:7a:9f:80:bb:
         9f:03:a3:6f:1a:db:23:02:8b:33:63:f2:c3:4a:8d:8d:84:01:
         34:ca:e2:84:64:36:42:b1:be:63:70:6c:99:6d:2f:89:49:ae:
         f1:b4:f3:d1:11:65:93:6b:24:04:0e:02:c1:52:43:8e:2d:85:
         d0:a9:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:28 2026 by rpki-client