Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
File:                     4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json)
Hash identifier:          5SWF9oy7zbNLHjLmhif+1+WsVulZFsIaLlYmfRsqNmg=
Subject key identifier:   C3:05:37:E5:EF:41:3A:41:72:94:CD:22:69:78:D6:EB:E5:5D:13:9E
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
Manifest number:          0207
Signing time:             Thu 23 Jul 2026 04:23:05 +0000
Manifest this update:     Thu 23 Jul 2026 04:23:05 +0000
Manifest next update:     Thu 30 Jul 2026 04:23:05 +0000
Files and hashes:         1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: HYuG0r1y/Ufzgp/5Ne5rLjwe+pf/KDZOwS8w0mhSpZM=)
                          2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: Uq2HpSv3F80zWwHJM5Iy2Qx5noXEmcrVO1BmBcMyXEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: Jul 23 04:23:05 2026 GMT
            Not After : Jul 30 04:23:05 2026 GMT
        Subject: CN=6a619729-3374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:59:95:55:60:ca:e9:1f:e8:8e:db:08:2e:
                    6b:88:76:35:fd:9a:f1:7a:37:45:ac:a2:59:e9:bf:
                    69:7f:bd:be:22:83:10:e6:c1:4e:a0:35:3f:f8:a7:
                    70:a8:24:34:fa:98:19:37:51:3f:af:64:f0:02:0e:
                    92:46:21:dd:6c:30:de:c9:63:17:c0:2e:ef:ac:6f:
                    7d:6e:c2:e8:93:94:9b:97:bd:05:7f:37:d2:3b:1c:
                    6d:b4:64:ce:09:d4:fd:ce:d8:74:fa:9d:f7:83:2b:
                    06:af:de:ee:3f:80:1c:0c:4e:a2:a0:f3:6a:44:63:
                    10:d0:15:2c:5e:71:88:94:e5:88:fc:81:26:a7:ce:
                    d2:3e:9d:f8:6d:86:34:f0:de:bb:ae:51:36:4f:7e:
                    b9:c2:18:04:33:a5:a2:3c:c7:e6:ca:98:54:bd:9e:
                    3f:36:1b:dc:08:54:01:1b:ff:8a:41:5d:86:3c:67:
                    c6:5a:8b:4b:a0:0e:a9:06:6e:49:5e:93:aa:ef:44:
                    38:eb:78:9f:e6:ef:04:6f:e9:4f:01:92:61:c4:98:
                    70:3a:4b:7c:f6:c9:de:a0:61:48:99:08:20:a1:92:
                    2f:76:8c:e6:fe:5d:ba:d8:96:53:2d:46:0e:ca:0f:
                    e8:99:7a:da:64:dd:c0:25:1a:bf:4c:0a:12:17:4c:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:05:37:E5:EF:41:3A:41:72:94:CD:22:69:78:D6:EB:E5:5D:13:9E
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:49:b9:df:74:4f:f9:64:2b:52:b0:2b:6f:47:81:fa:99:6d:
         a2:01:5d:d9:18:ca:40:bc:88:3a:42:a7:f7:e0:f8:e5:bb:6b:
         eb:bc:4e:e5:9f:e5:cb:7c:fa:93:37:0e:79:98:8e:65:b6:b9:
         86:29:88:26:74:24:eb:79:a0:66:dd:9f:e0:b0:c2:d2:55:bf:
         4e:f4:f8:e7:53:27:57:94:a5:87:b9:81:23:20:9e:a8:b0:20:
         5a:7c:c7:95:4f:88:fe:cd:77:96:01:82:48:43:9e:ff:b8:91:
         f8:2a:26:1a:b9:a6:36:a9:d1:d2:25:9c:98:27:16:a2:78:23:
         75:68:c4:86:81:95:45:43:71:0d:ac:2c:b4:66:2e:48:3d:69:
         d6:83:7c:87:8b:2b:9b:62:99:46:54:f9:89:d1:bb:8b:a2:9a:
         87:dc:bb:c1:c5:c1:3a:ea:3e:12:0d:20:8a:a8:13:80:a3:97:
         af:ee:06:9b:8c:7e:22:d1:6f:21:ce:a5:ae:1a:37:ae:08:ba:
         63:29:1d:4b:a1:9f:a1:7d:a8:e2:86:e3:b1:26:49:a6:59:7e:
         5a:e9:fa:d2:48:36:e5:bb:20:16:89:4c:2e:2f:78:4c:2f:df:
         1a:f0:28:2a:81:0f:c1:ee:b8:22:1e:df:dc:37:59:0a:2c:00:
         ee:ec:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:42 2026 by rpki-client