Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
File:                     5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json)
Hash identifier:          Tgwp7ZHWoTIXClFFhXJVzWrHiYsiIYrYvLwWCZYBIRc=
Subject key identifier:   9D:11:F4:AA:E6:B8:34:9D:5B:EE:3B:8D:47:99:EA:D0:F6:2C:72:D0
Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60
Certificate issuer:       /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
Certificate serial:       02EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
Manifest number:          02E2
Signing time:             Mon 27 Jul 2026 02:27:05 +0000
Manifest this update:     Mon 27 Jul 2026 02:27:04 +0000
Manifest next update:     Mon 03 Aug 2026 02:27:04 +0000
Files and hashes:         1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: o+M3bO2WKW6gyko1K3Yt5k01MgkP8vjLLzMSvBK9oAY=)
                          2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: +rxJJCYqUTC1n9Vg6VPME8EdAjnNnPLt5eoyIH6NFFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl
                          rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746 (0x2ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
        Validity
            Not Before: Jul 27 02:27:04 2026 GMT
            Not After : Aug  3 02:27:04 2026 GMT
        Subject: CN=6a66c1f8-009b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:58:c4:54:00:94:44:39:dd:70:63:73:93:
                    ab:ed:1f:3d:a8:6b:d8:2c:36:5e:01:3b:80:03:2d:
                    af:20:75:a5:b7:7b:06:ea:d9:1d:8b:33:f6:a1:fc:
                    52:d5:18:c6:a8:66:3d:ca:4a:6f:c8:de:72:0a:14:
                    c9:c2:a0:ef:44:fd:62:66:b5:4c:2e:ed:a7:31:54:
                    95:e6:83:66:ea:8e:10:cf:06:14:19:95:a0:7c:12:
                    29:aa:87:59:84:d7:65:e5:06:e8:90:0c:c8:1f:eb:
                    11:fb:b1:58:cd:da:ab:5b:1a:2f:15:bd:b2:0a:0d:
                    3b:27:58:b3:e9:cc:ec:30:ef:59:01:d2:3c:18:e2:
                    ac:d0:5c:aa:53:d0:d3:0e:c4:82:9b:e4:54:27:76:
                    58:bd:bf:9c:50:38:33:25:54:a0:60:20:88:11:b3:
                    8e:ce:71:5f:f7:53:89:8b:30:d7:24:b9:16:17:27:
                    be:10:ff:e7:3f:2e:c8:e9:59:4e:b0:44:ec:91:5e:
                    88:f8:2b:2a:5f:bd:fe:a3:62:dd:ab:40:33:0d:3e:
                    d7:a5:eb:d2:63:7c:89:83:ba:f8:47:3b:e2:37:43:
                    72:17:d0:14:86:a2:ca:86:11:c4:6e:90:08:b0:c3:
                    e1:ce:80:93:b9:50:60:b1:a5:7b:5b:8b:92:bb:02:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:11:F4:AA:E6:B8:34:9D:5B:EE:3B:8D:47:99:EA:D0:F6:2C:72:D0
            X509v3 Authority Key Identifier:
                keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:ef:6c:78:9a:9c:0a:a8:f5:c3:0d:71:ad:3a:32:67:1b:
         d5:2b:fb:a4:89:d3:85:fd:9b:de:48:a0:eb:41:6d:a9:35:e6:
         b4:34:1a:cd:af:0f:a9:f6:e6:f0:b2:db:2a:19:10:84:5e:2c:
         51:07:61:33:c3:c2:71:16:86:69:ea:10:8f:e7:dd:35:a1:02:
         8c:15:92:0e:bc:3b:bf:2f:be:ce:99:0b:66:c2:8b:1c:2a:ea:
         fc:a9:cb:f7:19:e5:9a:af:62:50:cf:b2:e0:11:4c:e0:dc:21:
         ba:55:2e:70:cb:51:3b:54:f6:c4:00:48:af:2c:c2:7c:71:2f:
         90:07:0f:56:5e:79:dd:23:ee:73:81:da:d8:2a:15:40:ed:73:
         85:09:da:31:24:3e:8c:2f:30:b5:46:fa:a3:b1:fa:e0:a0:2c:
         b5:88:37:72:d5:0e:26:85:e4:f1:ca:f6:87:ed:af:c9:2f:f8:
         21:17:01:1c:4e:76:7e:49:8a:ac:2d:51:64:be:e8:7f:49:2c:
         04:f7:3d:22:04:c5:ab:31:1a:5d:7a:e7:59:7f:62:b9:39:d1:
         05:40:1f:f7:e6:c3:0d:20:06:dd:97:2b:49:ab:44:93:82:c6:
         7e:2e:de:76:bf:90:bd:b0:34:aa:29:43:93:33:7a:18:79:a0:
         a1:66:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:37 2026 by rpki-client