Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
File:                     _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json)
Hash identifier:          u3058Koi8R9k8v6A9Xxvp6bY3IjyH6l7weJb52axP6Q=
Subject key identifier:   D5:9B:52:DE:0D:45:3A:1B:77:6A:C8:69:10:2D:DA:23:32:78:61:05
Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
Certificate issuer:       /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
Certificate serial:       0BEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
Manifest number:          0BE1
Signing time:             Wed 22 Jul 2026 19:16:04 +0000
Manifest this update:     Wed 22 Jul 2026 19:16:03 +0000
Manifest next update:     Wed 29 Jul 2026 19:16:03 +0000
Files and hashes:         1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: bKVGk3L6CyPiO0ykWFsLzRYLebyGVDZ9+wWx4GkBhbY=)
                          2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: tgDOCbKwmjyp6bvMW7YcW8XxCX4tWOYG/agYINdY5ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl
                          rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3052 (0xbec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
        Validity
            Not Before: Jul 22 19:16:03 2026 GMT
            Not After : Jul 29 19:16:03 2026 GMT
        Subject: CN=6a6116f4-fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:eb:40:b2:2f:f7:cd:c2:3a:64:68:b9:2b:
                    4c:84:6b:83:6f:9b:7d:4a:4f:d4:8e:f2:4c:e0:d7:
                    5b:50:14:97:50:02:e0:f2:41:e9:95:06:29:86:ab:
                    96:9a:8b:a6:c4:c5:a2:ea:00:47:37:fb:32:1b:94:
                    18:23:f9:d3:3c:91:c9:a3:54:d4:dc:c9:54:e9:0d:
                    97:a6:75:ca:fc:44:f0:a6:fa:35:94:dc:a4:7e:e9:
                    79:50:78:ce:17:68:87:e5:c6:3e:31:95:1f:1e:f6:
                    a6:8d:ed:49:59:45:4c:34:00:47:12:45:37:49:c0:
                    63:2f:fb:15:c5:45:f6:73:bf:df:eb:89:85:88:8f:
                    b2:d8:26:65:de:60:57:23:48:75:d1:c6:80:a9:6d:
                    e4:ca:c5:9f:78:0a:18:5f:90:ae:fa:74:20:c8:ba:
                    5c:18:79:1d:94:ce:e8:9b:f9:88:63:ce:bd:80:9c:
                    2b:81:ce:d1:1f:b3:55:63:c4:95:ae:94:e5:f4:9a:
                    7e:d6:95:e1:e1:34:9e:3a:6a:84:f6:0a:33:56:88:
                    52:cc:fd:36:e7:a5:dd:d0:0e:d6:d1:77:2a:b1:bf:
                    61:7d:35:a1:ee:5e:2a:e6:fa:0d:3b:62:18:b7:71:
                    6c:a3:8a:bb:56:b9:09:50:bd:eb:7a:3e:cd:f5:dc:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9B:52:DE:0D:45:3A:1B:77:6A:C8:69:10:2D:DA:23:32:78:61:05
            X509v3 Authority Key Identifier:
                keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:a2:18:ee:8a:db:51:01:4d:a1:b2:19:82:44:0b:2d:1a:
         43:58:76:39:5f:6d:41:99:20:39:37:9d:60:43:a4:d6:b6:64:
         06:56:ff:1c:ba:0b:18:50:6f:36:6b:e5:3e:86:f0:71:94:36:
         e3:96:0b:47:9d:28:68:81:18:f4:8f:bb:b1:fd:1e:3a:42:bc:
         26:91:62:38:9a:fd:37:ac:5c:68:44:ce:f2:d8:80:40:62:dc:
         d8:2f:11:83:47:89:97:0b:6b:19:d0:2b:25:1f:d1:be:8e:84:
         d1:82:77:a2:e7:1b:6b:16:d2:9d:8e:0d:5a:6d:ea:90:08:c0:
         bd:1b:af:58:30:78:82:bf:27:c1:c8:c5:ab:82:e5:c8:64:53:
         91:7a:b8:77:fa:d8:cc:c2:b8:1b:b8:2f:60:03:d7:0c:16:2c:
         bb:ce:43:4b:d5:44:ad:70:2d:10:f8:e8:e6:04:e5:71:8e:c1:
         eb:a3:65:ae:fa:d0:5d:0b:67:17:d8:00:db:ee:35:c5:84:45:
         fd:28:4a:d8:4a:99:c9:b1:04:d7:20:ce:93:7c:91:c8:de:55:
         c7:39:9e:08:c1:80:62:76:ea:9b:4e:72:ac:89:a4:7d:74:2c:
         21:cc:a6:fa:67:62:de:fa:1d:bb:1d:0b:fa:a7:d6:6f:34:7e:
         9c:45:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:44 2026 by rpki-client