Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File:                     2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier:          Ypyfkp00zXbj/C+38lcQ6Z4SLlhikYodpWQHP9cIZs4=
Subject key identifier:   0D:26:15:6B:FA:00:34:99:9B:F3:A7:AA:A0:4F:FE:C3:D2:98:E7:66
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer:       /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial:       0554
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number:          053C
Signing time:             Thu 23 Jul 2026 00:18:33 +0000
Manifest this update:     Thu 23 Jul 2026 00:18:32 +0000
Manifest next update:     Thu 30 Jul 2026 00:18:32 +0000
Files and hashes:         1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: WOJFZyyjy+wT1VmYWeq1nA8UzP4QBN8G9RH9k+yQ6fA=)
                          2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=)
                          3: 5542C1D66D7E11F1B74F03108747A888.roa (hash: GK+s6oT3MEUn7idrDMZYD/2eUrDgfq7a0JF4Bt8bdJM=)
                          4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
                          rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
        Validity
            Not Before: Jul 23 00:18:32 2026 GMT
            Not After : Jul 30 00:18:32 2026 GMT
        Subject: CN=6a615dd8-2a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:21:10:43:e9:e7:99:b7:0e:82:04:94:12:
                    82:07:1c:37:97:44:25:65:8e:5e:f8:34:53:42:2d:
                    88:45:d0:c2:4a:88:b1:55:1c:0b:41:5b:04:9c:0d:
                    75:5d:97:5c:19:9c:6c:4b:e3:53:a9:58:9d:31:e1:
                    70:15:04:1d:c8:ae:24:2d:5a:0a:db:bb:17:93:18:
                    ba:44:f7:79:47:89:6b:f5:73:5b:44:89:ab:f1:ce:
                    05:b1:1a:3f:9d:1b:9b:cb:6e:1a:f0:83:0f:bb:0e:
                    25:21:62:30:d1:40:32:3c:af:fc:9b:fa:3e:30:3f:
                    4b:5c:e6:7c:4c:7f:72:a8:ab:bf:f9:6c:f0:70:84:
                    8d:89:c7:7d:7f:f3:b5:b0:77:f7:e5:d0:2f:a7:7b:
                    ad:66:91:76:98:4c:e2:3c:56:e3:73:a1:04:ba:51:
                    69:c8:87:28:e7:48:c2:cf:2a:3c:54:65:45:41:bd:
                    0c:a3:25:0c:c7:55:3c:25:a4:05:68:00:aa:a7:d2:
                    3b:2f:bb:7e:7a:94:cd:86:fd:a5:c8:0e:0f:d2:e3:
                    ba:df:2f:4a:01:e6:dd:0b:24:55:f4:4b:fe:9b:b8:
                    e5:9c:5d:6c:f6:58:fe:51:4b:b5:9f:f9:7f:e7:26:
                    b5:66:cc:8d:ac:05:21:bd:6c:33:23:fe:6c:ac:66:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:26:15:6B:FA:00:34:99:9B:F3:A7:AA:A0:4F:FE:C3:D2:98:E7:66
            X509v3 Authority Key Identifier:
                keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:56:60:6b:48:c3:03:62:6c:a6:d2:c3:3a:99:cd:0d:de:ba:
         d2:53:30:d2:0f:35:ca:21:8f:f9:1e:d6:53:e7:84:17:f6:c1:
         92:16:49:29:ca:0b:96:27:4b:65:88:0c:18:07:ad:57:a3:19:
         8f:bf:f2:c9:27:5d:9a:0f:49:32:d7:68:2c:7e:2d:d1:51:d6:
         db:92:b8:ea:3d:e3:f3:e2:b1:7a:b8:b7:7b:0d:0f:d2:fe:45:
         c1:d8:01:9a:8b:6b:4b:1b:3c:de:fc:9a:03:85:7f:12:5a:c8:
         dd:70:fe:e4:18:73:01:ff:b2:f2:67:e8:60:4c:2f:03:a9:c9:
         16:a9:97:f0:06:2b:99:5a:5c:be:58:9c:65:35:ef:1d:05:e0:
         40:22:da:e0:0b:3b:5a:52:b1:a4:00:35:6b:ca:3b:96:b1:8e:
         04:28:2e:c8:b4:03:0c:7a:84:c5:2b:fe:d8:1c:fa:cd:6e:5c:
         44:22:d2:3b:0c:21:0e:9a:d4:10:b9:50:14:aa:f7:67:b5:52:
         76:77:02:4b:70:63:83:ca:80:f9:5e:10:3a:cb:d0:bd:9f:74:
         2f:a0:f7:f8:23:f7:2c:71:2c:50:25:24:ee:8e:2a:fb:6e:de:
         0f:9e:11:01:5e:32:01:10:50:8b:51:49:0d:a5:75:74:0a:19:
         9f:55:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:46 2026 by rpki-client