Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
File:                     T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json)
Hash identifier:          Ji4LwyEow2yD7YdyJQ2aGvv35SN5gAFFQ0R/M3EBvHQ=
Subject key identifier:   F0:2B:12:76:94:7C:B0:D7:69:4F:40:D6:7B:89:E2:EC:64:83:80:25
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Certificate issuer:       /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
Manifest number:          014A
Signing time:             Thu 23 Jul 2026 06:52:51 +0000
Manifest this update:     Thu 23 Jul 2026 06:52:50 +0000
Manifest next update:     Thu 30 Jul 2026 06:52:50 +0000
Files and hashes:         1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: oUoBBNfnJoTsuTqZgsn3jK08R+rdJXCsCBKENmZJN68=)
                          2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: GWxvbbNMDfEq6GjtAEuqf8igE/KKZ5xAZH6r5owzQZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
        Validity
            Not Before: Jul 23 06:52:50 2026 GMT
            Not After : Jul 30 06:52:50 2026 GMT
        Subject: CN=6a61ba43-a728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:fd:b4:15:ff:86:d7:23:f9:27:34:8c:f4:
                    0f:53:eb:c3:dd:bb:59:17:01:3f:ec:0d:88:65:8e:
                    20:a8:ee:02:17:f8:5e:e7:05:a2:72:89:be:53:c1:
                    41:ee:3f:67:9e:c0:a7:cf:f4:a5:17:2e:bf:74:1d:
                    7d:e9:46:41:22:fa:f1:ad:d1:6a:a2:35:48:86:eb:
                    3f:e7:40:73:05:40:e2:30:96:36:75:1b:84:6d:70:
                    7c:d0:6a:5e:45:18:89:aa:8d:31:10:a5:f0:0c:2d:
                    e3:cc:9a:e8:4e:07:3f:4d:60:da:1a:08:ad:5a:a7:
                    48:19:97:96:48:4d:e2:46:0d:33:c1:e6:22:76:bf:
                    0e:af:58:8e:1f:2e:0d:31:5e:08:71:18:b0:63:fb:
                    6a:77:88:2c:0d:e7:e4:80:5c:65:8c:52:81:c7:05:
                    13:22:48:16:be:99:06:2f:57:f6:8b:95:ce:e0:2b:
                    b8:61:35:75:53:ec:bc:1b:2d:e0:4c:94:0a:91:76:
                    4c:3d:d0:04:f7:dc:83:7c:a0:8f:0c:59:f6:b8:10:
                    7b:ec:03:b3:5e:7a:f9:f6:03:a3:0a:78:8e:7e:91:
                    2d:62:93:fd:97:cf:5d:f8:55:95:ee:c5:53:b2:db:
                    44:8d:31:b9:8e:ec:7e:2c:83:c5:41:47:23:7d:71:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2B:12:76:94:7C:B0:D7:69:4F:40:D6:7B:89:E2:EC:64:83:80:25
            X509v3 Authority Key Identifier:
                keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f7:a1:5b:ce:67:fc:9c:b1:af:ea:c9:6f:9d:c0:a9:5b:8d:
         81:fc:86:45:fa:c6:29:21:e0:9d:03:60:31:bf:ec:0c:c3:e3:
         e4:95:e3:13:34:83:b7:7c:47:ff:cc:6e:07:b8:0e:61:8d:0c:
         e1:ed:8c:1f:92:69:0d:74:89:f8:fc:4b:b1:55:cb:92:81:e5:
         4e:4d:18:5a:f2:20:32:bf:1a:3a:88:97:db:d4:13:b5:93:dd:
         14:c3:e9:02:10:53:9c:a6:84:f5:1d:65:33:33:8a:f5:9e:d1:
         b9:89:1d:1e:56:52:dd:6f:07:a6:e6:30:1c:8f:b9:ab:5f:66:
         fb:d0:cb:bb:85:db:43:aa:4c:2b:7a:d9:36:c4:28:10:34:60:
         ff:c9:c4:5e:69:29:00:52:79:8a:ea:64:1e:43:a5:57:d4:9b:
         81:52:2b:47:09:14:31:90:07:1b:7b:fb:1a:c0:0c:85:70:58:
         77:0d:48:76:fd:00:c1:3b:01:6f:9c:b5:f9:6f:d4:4f:52:d9:
         17:f1:5d:33:ba:d2:fc:f9:61:ef:dc:83:c4:f9:4f:7f:bc:65:
         82:b8:13:ae:a9:12:3c:ea:75:5a:4c:9f:49:a2:bb:c0:49:b6:
         47:1b:49:36:e5:e1:f5:3d:dc:56:b9:e2:55:2b:bd:39:14:34:
         f0:c0:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:00 2026 by rpki-client