Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
File:                     3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json)
Hash identifier:          rYNiTSqInhD4HsPNI+Skmw8e1Tanv1HJ/stod9LEVGQ=
Subject key identifier:   1F:58:2B:C2:9E:4C:81:D7:9C:16:17:5B:F3:59:00:2D:6E:23:20:0E
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Certificate issuer:       /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
Manifest number:          0223
Signing time:             Mon 27 Jul 2026 04:18:33 +0000
Manifest this update:     Mon 27 Jul 2026 04:18:32 +0000
Manifest next update:     Mon 03 Aug 2026 04:18:32 +0000
Files and hashes:         1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: I7RtVbsfmuxrhbq+8U/7btEpowu/eMO111i0AUHMwU4=)
                          2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: z/CeXg1zE451kjdiV+L83Kbr1l7Vh3IeBEWeCzKi+60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
                          rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
        Validity
            Not Before: Jul 27 04:18:32 2026 GMT
            Not After : Aug  3 04:18:32 2026 GMT
        Subject: CN=6a66dc19-7f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:ad:a1:8a:48:9b:e5:75:39:8f:ff:26:f3:
                    56:62:1a:22:3e:42:a0:ee:c2:c6:54:77:ca:e6:63:
                    e7:82:1f:e2:be:51:7c:90:70:ea:ef:af:26:6a:fe:
                    31:bb:e0:6d:8f:95:67:aa:de:2e:a5:f2:64:93:85:
                    67:2e:8a:5e:ed:20:2b:0d:0a:90:dd:0f:40:b2:e3:
                    f6:a4:f1:d3:d8:86:b5:5f:70:d3:f2:d4:cc:c7:93:
                    9a:e6:14:cc:d1:2a:64:7c:aa:a9:90:8f:7f:62:d1:
                    4d:0b:b9:aa:ce:91:6a:d5:7f:bb:96:01:cd:16:31:
                    bb:b2:f0:e7:67:db:d8:e9:fb:f5:4f:36:0f:ac:d2:
                    ef:c6:90:a0:62:57:fc:da:f5:e6:5b:00:30:bb:5d:
                    27:ef:eb:45:5e:37:87:c6:32:f7:82:b1:ef:b2:22:
                    18:24:b9:2a:8b:73:85:35:8f:29:13:b5:dc:38:5c:
                    79:d6:70:b2:4a:bb:47:18:13:49:71:05:e7:c4:81:
                    1e:10:fd:ba:1d:dd:18:8b:44:5c:94:f6:1e:cc:1b:
                    f7:26:4e:c8:b3:50:23:e3:c6:50:2a:bc:1d:3b:ee:
                    c3:d9:31:09:3f:ab:74:28:b7:5d:9a:f0:89:24:07:
                    f9:60:26:58:5f:04:3f:36:7d:41:8f:2c:40:71:1a:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:2B:C2:9E:4C:81:D7:9C:16:17:5B:F3:59:00:2D:6E:23:20:0E
            X509v3 Authority Key Identifier:
                keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a4:52:75:de:9f:0e:93:ff:b3:29:37:61:7d:d5:32:3e:1c:
         89:98:d9:f9:9d:91:05:8e:16:66:fc:d3:ee:ce:95:98:73:cf:
         42:71:db:6d:f1:27:a1:0b:bb:a3:34:f8:d7:a2:3c:61:44:44:
         5d:6a:95:83:87:7e:91:0d:bd:94:d4:d0:2d:9f:2e:f6:0c:c8:
         40:1b:04:a5:b7:94:47:74:9e:3d:1e:87:fc:ed:3d:c3:26:66:
         8a:26:33:cb:8e:c3:46:c3:b4:c6:6a:2f:5a:ac:44:2f:e2:a2:
         61:67:d6:dd:11:aa:87:05:37:c3:f7:a7:1e:07:2c:fb:c2:95:
         7f:8a:ed:8f:d1:ad:19:48:7e:f3:4a:c1:85:f4:3f:e6:6e:6b:
         13:6c:9a:5e:6b:99:a1:ad:e3:f2:0a:32:58:e1:bc:80:ae:3b:
         df:e7:56:a6:aa:aa:3c:39:cb:e8:34:c1:be:6a:9a:e4:06:83:
         73:c0:a9:d0:7a:12:f5:c7:55:3e:3c:15:15:d9:23:6b:36:32:
         d5:c4:c3:47:0b:2a:86:21:00:70:df:2e:cf:f0:c0:74:8e:7d:
         b9:d7:97:ed:47:ed:62:5e:1e:01:4a:c9:97:41:81:98:72:79:
         5c:dd:1b:b3:76:06:ce:67:ec:ed:99:85:b8:ea:bc:cc:ed:52:
         7b:9f:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:06 2026 by rpki-client