Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
File:                     tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json)
Hash identifier:          Jq6b0W6dPm44qhtXyswycAHqXZrktjm/RKx49lI/EMo=
Subject key identifier:   E6:4F:BD:3A:14:8B:4A:44:2C:E9:A0:B3:E6:AA:3B:DF:46:9F:6F:D1
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Certificate issuer:       /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial:       0B50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
Manifest number:          0B3D
Signing time:             Wed 22 Jul 2026 19:37:32 +0000
Manifest this update:     Wed 22 Jul 2026 19:37:32 +0000
Manifest next update:     Wed 29 Jul 2026 19:37:32 +0000
Files and hashes:         1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: aqCbYwHzfObDKVqOhq4qPspX+CJsZTo6N94dpdEXs4o=)
                          2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: FCTA0G0uWrgDnGlcYqqrvYV0NmPe1FK7O4WuK+aX7qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
                          rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2896 (0xb50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
        Validity
            Not Before: Jul 22 19:37:32 2026 GMT
            Not After : Jul 29 19:37:32 2026 GMT
        Subject: CN=6a611bfc-d377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:1f:10:98:42:95:13:47:7b:16:16:fc:dd:
                    79:92:d5:f5:33:a6:57:9f:06:83:5e:a9:d5:ec:cf:
                    6b:69:d3:6f:d5:11:71:6b:2a:5f:38:44:06:d1:c9:
                    ed:85:55:66:f8:86:0f:5a:23:cd:e2:63:42:00:f4:
                    ed:8c:2b:ee:ed:f1:36:1b:0e:fe:d4:d2:8b:5b:63:
                    27:1a:d5:8d:33:3c:6a:a9:ee:f4:fa:2d:5b:19:26:
                    e7:1c:8a:d4:de:99:16:db:9f:9c:22:00:23:f4:86:
                    39:d1:75:5a:37:ad:9e:84:5e:6c:64:e7:fd:9f:15:
                    88:53:c4:6d:ff:92:fe:da:eb:53:80:99:45:c5:ff:
                    0d:8c:a8:6c:89:a4:74:fe:25:d1:00:e8:79:9c:1f:
                    37:65:f0:27:73:9e:08:8d:33:c9:52:ee:60:cf:04:
                    e2:d3:52:96:ad:f3:76:36:eb:3a:59:2b:b4:ef:a8:
                    b4:81:b1:f5:e1:db:bc:6f:12:51:75:d8:5d:97:3d:
                    4e:1f:ac:58:84:5f:d5:69:eb:68:79:5d:a9:e4:13:
                    81:5e:e8:6a:bc:bd:bc:a1:f9:c4:ec:f8:53:da:a9:
                    68:6c:12:a7:cf:56:f5:57:ea:06:70:c2:b4:42:6a:
                    e0:1d:9e:44:9e:5c:2c:7e:19:ad:15:8a:dc:30:9a:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4F:BD:3A:14:8B:4A:44:2C:E9:A0:B3:E6:AA:3B:DF:46:9F:6F:D1
            X509v3 Authority Key Identifier:
                keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7d:32:e1:32:b0:60:6e:a8:81:55:e7:ea:b0:ec:e2:fd:f2:
         bf:32:87:3e:0b:9b:b7:37:a1:32:15:b5:19:08:d0:4d:84:0d:
         bd:6d:23:81:17:d5:58:57:b6:a8:bf:f7:c7:29:53:52:46:6f:
         ea:5b:14:eb:bc:c3:a6:aa:ea:04:73:b6:18:f4:4f:8b:a9:59:
         1a:3a:e5:24:b7:fd:79:fb:a3:4d:97:3e:fb:55:a1:56:11:f1:
         94:98:f8:15:d8:1e:21:36:ae:5e:20:6b:47:20:ba:4a:7a:bd:
         12:39:7f:33:4d:af:12:8d:16:4b:65:10:0a:51:51:0c:88:87:
         c3:6b:a1:4e:a0:76:b3:27:30:f7:22:5b:7d:55:d1:61:54:66:
         5f:5b:21:36:2e:91:c1:5a:fb:7c:83:29:6e:13:b3:6e:57:81:
         d6:4b:e3:77:9e:8b:79:56:19:5a:5c:da:87:41:e5:41:af:d4:
         b5:61:d0:2f:fe:1d:23:a4:6e:77:fc:e9:31:37:f6:a5:c7:ea:
         fa:7e:5b:50:b0:d1:81:46:6e:bc:8c:3d:28:39:d9:58:1a:c0:
         31:e6:31:e1:88:01:3a:90:65:a1:0c:48:3f:24:91:34:62:3a:
         6a:fe:d7:17:6e:15:80:c1:a4:e7:9f:e6:8f:3f:c0:43:50:13:
         6c:8a:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:34 2026 by rpki-client