Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
File:                     -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json)
Hash identifier:          LyhHc6z9Cr7lWhXQA7Y5dxn8beggFQ0ubH52Wu2t1Gg=
Subject key identifier:   AC:F1:CF:17:DF:85:9E:F0:3A:7B:CA:97:46:2D:36:DE:8D:3A:F4:91
Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Certificate issuer:       /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
Manifest number:          01CE
Signing time:             Mon 27 Jul 2026 05:25:56 +0000
Manifest this update:     Mon 27 Jul 2026 05:25:55 +0000
Manifest next update:     Mon 03 Aug 2026 05:25:55 +0000
Files and hashes:         1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: 37Y2TZW5GRPOu8tuCh3K08HUVjtxE2JG5+mcyP0lr0s=)
                          2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
                          rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
        Validity
            Not Before: Jul 27 05:25:55 2026 GMT
            Not After : Aug  3 05:25:55 2026 GMT
        Subject: CN=6a66ebe4-3387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:1f:30:44:07:b8:f0:6c:1b:02:59:77:58:
                    55:d1:cf:a7:de:a5:06:60:ee:de:bb:f1:d6:cd:58:
                    ed:9c:e7:32:2f:80:0a:bc:f0:9c:a3:bb:92:97:07:
                    79:7f:0a:9c:27:01:15:2a:dd:6e:7e:06:3e:62:44:
                    07:08:f9:04:f3:93:52:eb:36:ba:18:6d:2e:85:65:
                    14:7e:84:97:ef:c3:13:8c:08:54:ae:39:37:79:ac:
                    25:ab:c4:c5:35:26:b2:ba:4a:1d:90:da:06:3f:ce:
                    14:f0:ce:29:eb:16:a2:c5:6f:5a:de:73:fe:49:f9:
                    ef:3b:4f:a1:a2:f2:63:72:49:82:53:b4:fb:e9:42:
                    c8:75:97:bf:56:56:6c:0c:79:48:6b:b0:d0:43:aa:
                    4b:ef:f9:e7:ae:a9:c8:98:5b:be:4d:45:69:54:84:
                    77:6b:65:97:21:c8:19:74:72:a8:b0:7e:47:d6:c2:
                    a5:52:f3:25:4b:c7:e6:d0:c8:a9:a4:d4:3f:2d:98:
                    1d:d4:08:88:da:cf:fb:fb:eb:81:1c:12:ea:4e:d7:
                    95:72:2a:24:70:8f:22:56:20:d4:1e:6e:6c:03:80:
                    09:11:06:e4:82:6e:c5:cc:a0:36:5d:38:b2:43:39:
                    de:0d:fb:35:dd:a6:b5:0e:3a:d8:30:21:22:fa:b6:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F1:CF:17:DF:85:9E:F0:3A:7B:CA:97:46:2D:36:DE:8D:3A:F4:91
            X509v3 Authority Key Identifier:
                keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:35:6d:f1:80:d0:c6:0a:c4:8a:3a:ba:82:99:5d:61:9e:
         ae:b7:ad:d0:ac:1c:2b:b3:ec:f7:bf:7b:0c:d7:5b:e1:53:60:
         c0:a6:db:f4:b3:b7:a4:3f:57:4c:03:10:f8:88:da:a3:e7:03:
         9c:02:45:f1:b8:47:21:90:85:4c:b0:3a:4b:a5:c8:7f:62:ed:
         d0:6b:16:35:c6:81:5b:7e:f9:7e:a0:5a:64:5d:a9:a6:85:ae:
         4e:52:99:6e:2b:d6:99:b7:61:f5:cb:c0:86:37:89:6b:66:c1:
         ee:3f:16:60:dc:e7:72:a8:94:05:99:74:c8:bd:59:ce:7f:b0:
         70:05:83:26:84:33:9f:dd:cd:00:1e:2a:e6:8e:2b:fd:56:b2:
         8d:38:c8:04:49:54:27:97:10:60:be:25:c9:8b:94:dd:dd:c7:
         89:97:be:1e:9c:d1:1b:fd:34:49:b7:88:59:ed:cd:fd:d9:c9:
         4e:07:41:d5:50:45:74:e6:8f:85:95:3d:9e:62:1e:40:28:f2:
         57:f3:b8:50:87:01:74:87:0c:bf:fa:c7:a5:ff:70:f3:df:8d:
         5f:ad:98:72:72:c3:ff:e4:0b:0c:d6:22:c9:39:ce:9c:e8:a1:
         dd:54:58:91:66:14:33:80:53:59:f7:94:68:ca:d1:f2:2d:9e:
         85:70:d5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:04 2026 by rpki-client