Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
File:                     f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json)
Hash identifier:          j+d4ohrfFy72eEkbDm9XfZEoueC74kd7jAXWdtuh2QU=
Subject key identifier:   27:C6:5D:50:2F:C2:AE:28:E3:75:4D:4E:BA:90:2A:DF:E0:D5:96:E7
Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
Certificate issuer:       /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Certificate serial:       0530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
Manifest number:          0521
Signing time:             Thu 23 Jul 2026 00:25:39 +0000
Manifest this update:     Thu 23 Jul 2026 00:25:39 +0000
Manifest next update:     Thu 30 Jul 2026 00:25:39 +0000
Files and hashes:         1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: zU6H9w3T6BxtwKimx5ZS5lubEJWyDYpu7DAgpYxzrdw=)
                          2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: 4w0TogS+2atxTCMCzPs6c9BF71e/45vAMcdgv3e+SKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
                          rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
        Validity
            Not Before: Jul 23 00:25:39 2026 GMT
            Not After : Jul 30 00:25:39 2026 GMT
        Subject: CN=6a615f83-4b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:8f:80:78:2b:b0:e1:55:90:19:07:b0:fd:
                    6a:f2:77:40:6b:67:3b:36:dd:4b:4e:8b:f6:cf:fb:
                    af:81:78:0c:a1:f4:91:d3:66:95:a5:4a:44:a8:d9:
                    9a:f2:16:4c:46:6b:a8:23:41:29:d1:71:bd:c1:e4:
                    d0:ba:52:8b:f9:ea:52:bd:b3:f1:e8:87:c5:88:da:
                    b9:9f:ba:ea:60:2a:e9:c0:bb:9e:50:51:ea:3a:30:
                    ce:36:72:2d:6e:aa:8c:1a:8b:28:52:dc:c5:61:1e:
                    95:f6:3c:bb:b6:9c:af:56:35:9b:ce:1b:f7:4d:16:
                    7a:da:c5:8e:8e:25:e1:dd:87:4e:f8:9a:3a:9f:5a:
                    c1:79:57:51:54:f6:de:c4:30:a2:f6:97:a1:bc:3c:
                    0d:65:af:68:88:ac:03:96:16:db:d7:d0:5f:be:8a:
                    e8:b3:d9:9d:e6:45:41:30:ea:b5:ff:e6:ca:81:ef:
                    b5:03:67:6e:34:7f:42:b5:9d:78:1d:b1:95:4c:df:
                    cc:8f:43:71:d6:65:1b:46:c7:c4:54:c4:09:3e:59:
                    db:ec:ea:83:ad:23:e0:20:8e:88:c1:2a:b8:ee:66:
                    da:33:c8:a5:53:d5:09:99:b6:86:b1:43:1a:d8:d3:
                    cd:23:f9:52:aa:46:03:91:7c:4c:75:70:cd:17:92:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:5D:50:2F:C2:AE:28:E3:75:4D:4E:BA:90:2A:DF:E0:D5:96:E7
            X509v3 Authority Key Identifier:
                keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:36:99:11:09:df:c4:74:45:e1:e6:d4:4e:0e:94:66:81:c4:
         80:01:55:7d:05:e3:06:c7:8c:37:3a:22:50:49:8a:55:05:ac:
         4b:ac:db:6a:93:a1:e5:68:0b:ca:32:69:4b:73:b5:20:12:ec:
         a7:82:2b:2c:13:d0:c0:98:1d:07:32:6a:86:c0:9a:71:ab:cb:
         8d:08:a6:a5:47:1d:91:c8:7d:0d:81:3d:a1:d2:d4:db:39:30:
         1c:df:4c:00:f2:6f:e4:26:e7:6e:28:7a:a8:cf:95:6e:8f:82:
         3d:e0:1d:3a:2d:db:da:8f:f6:c8:c1:d3:27:a7:ba:f5:2f:14:
         f2:b7:08:57:42:9e:5f:5e:0e:c4:15:08:b1:76:b8:ac:d1:04:
         22:37:1e:2c:32:ff:47:12:0c:7f:24:e3:f0:ab:24:62:76:8e:
         a7:2d:28:7d:07:be:ef:04:b9:25:c9:27:24:f5:65:ea:5f:95:
         01:c2:7c:19:14:ee:2e:1f:84:ad:24:2b:23:fb:aa:b6:9d:9b:
         f8:4e:f2:ea:0b:77:d9:84:84:9b:1c:a7:8e:80:e2:7a:c0:d8:
         d6:f3:89:ec:e5:8d:b3:35:e5:0e:17:7c:9d:f9:81:b0:c9:d5:
         55:3b:fa:ad:e8:88:7c:46:7f:95:52:b5:e7:2b:f6:46:e9:f8:
         15:1e:40:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:12 2026 by rpki-client