Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
File:                     cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json)
Hash identifier:          OGvmu1KjNdool6T0+k9PMkiIfyn27C3rDmY3haIxbjg=
Subject key identifier:   93:75:C1:B3:B2:16:5C:EB:B0:4C:92:E7:80:CC:31:A3:C4:79:F1:D6
Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Certificate issuer:       /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
Manifest number:          03EC
Signing time:             Mon 27 Jul 2026 01:35:18 +0000
Manifest this update:     Mon 27 Jul 2026 01:35:17 +0000
Manifest next update:     Mon 03 Aug 2026 01:35:17 +0000
Files and hashes:         1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: LszecKvhVlGegivXZN7mvVZSp3hBlz/KHa9pRIYUF50=)
                          2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: D8m13spLSM0y5GB/4qATdHzlSdpaWUvX2eUbzxTPsS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
                          rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
        Validity
            Not Before: Jul 27 01:35:17 2026 GMT
            Not After : Aug  3 01:35:17 2026 GMT
        Subject: CN=6a66b5d5-207c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:5e:42:67:bc:27:37:b1:d7:6d:ce:bb:72:
                    d2:13:a2:a4:50:83:6c:f7:1c:a2:eb:da:92:ed:f6:
                    dd:13:35:8d:c9:fa:8e:60:95:65:18:34:14:9f:ef:
                    8a:fb:60:d4:85:54:11:10:74:74:4a:82:e2:28:2e:
                    17:51:48:0a:92:e4:3c:ca:b8:b7:dd:bb:6a:e4:0e:
                    eb:fd:8f:a4:ed:8b:2c:fa:c0:ce:d4:91:8b:c2:52:
                    d8:dd:ea:89:34:6a:d4:0a:35:ea:c7:6a:46:0c:42:
                    2e:b5:ff:89:55:4c:96:7c:ad:12:bc:5d:32:2d:15:
                    db:c2:75:25:4f:be:e4:73:bf:24:d3:f7:fe:98:52:
                    10:7f:fb:d8:7d:0a:f3:3b:8b:17:b6:e4:89:62:54:
                    6e:53:a0:ea:44:4f:be:77:89:c2:94:d8:76:f3:65:
                    c8:8e:0c:ca:74:4b:9f:e5:dc:2c:56:34:2b:ec:4a:
                    82:7b:f0:d8:60:61:83:48:bf:4b:d8:7b:24:18:fb:
                    fc:90:19:df:a0:e5:27:87:d6:70:ed:29:f0:bf:bb:
                    ad:c9:13:aa:cf:9b:88:ba:3a:ac:29:68:c0:f8:53:
                    3c:df:72:88:e2:31:c1:dd:9b:17:d1:34:2d:27:7d:
                    05:4e:74:00:1f:28:48:c6:d1:6d:43:2c:c3:33:f8:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:75:C1:B3:B2:16:5C:EB:B0:4C:92:E7:80:CC:31:A3:C4:79:F1:D6
            X509v3 Authority Key Identifier:
                keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ef:2f:0b:66:67:da:4d:bb:df:c9:fc:89:5a:50:bd:7b:da:
         01:9f:68:1e:95:0d:c0:71:ef:eb:b1:20:e5:1e:bb:0c:17:55:
         d3:f2:e0:1c:3b:2f:83:40:23:f0:e1:c9:ae:4a:40:70:72:a9:
         76:ab:26:ac:b3:85:a2:ca:d3:d3:a6:fe:28:0a:08:8b:af:df:
         22:f5:c7:36:1c:73:f5:37:37:33:b9:4e:3c:9d:99:24:cb:fd:
         0d:50:ac:96:22:ac:4b:7a:6b:5e:f6:6a:ac:a7:f2:88:31:97:
         9d:35:61:e8:1f:47:f8:21:5a:29:0c:6c:2a:26:8e:25:be:4b:
         46:72:89:ef:f0:31:63:52:75:f9:3e:45:a6:d3:5e:db:67:12:
         59:ee:dc:ee:a5:78:c4:d1:5f:e7:14:42:b9:f5:78:03:fd:3f:
         49:a4:40:4e:69:a1:c3:07:21:2f:a0:f9:5a:e0:20:6b:c5:7f:
         10:62:fe:4a:7d:b0:35:8b:98:df:f9:34:78:8a:5a:fc:c8:f8:
         f6:b0:3f:b1:07:54:0b:cc:a7:dd:2d:3b:9b:af:28:f8:17:c4:
         22:22:0c:26:68:c0:10:2c:d5:8c:aa:d6:29:2f:42:38:e6:72:
         6a:7c:4e:8e:3e:04:4f:1c:69:35:9e:fd:39:d8:8f:86:7a:5c:
         17:04:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:27 2026 by rpki-client