Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File:                     cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier:          87sSHpxOzcoM7KVN354M5l9R1JE0wKXWDO43O4VQlo8=
Subject key identifier:   66:34:5E:8F:A5:10:06:A4:28:18:E7:7E:AC:DD:98:3F:AA:D6:73:FE
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer:       /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number:          0144
Signing time:             Wed 29 Jul 2026 06:39:33 +0000
Manifest this update:     Wed 29 Jul 2026 06:39:33 +0000
Manifest next update:     Wed 05 Aug 2026 06:39:33 +0000
Files and hashes:         1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: M02xfSqVVP46Hylgi9/n0g2g+6gmeqiV69ZZ1cLfIag=)
                          2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
        Validity
            Not Before: Jul 29 06:39:33 2026 GMT
            Not After : Aug  5 06:39:33 2026 GMT
        Subject: CN=6a69a025-1ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:c2:9a:19:5a:9e:0a:3a:57:db:15:44:8f:
                    f8:1c:b1:2d:55:78:12:7d:97:95:ed:47:c5:5f:b4:
                    03:40:09:2b:1c:ce:9d:2f:31:68:c5:c8:7a:fc:41:
                    2c:ab:5e:2e:17:9b:dd:d9:09:ff:b6:66:f1:b2:4d:
                    0d:5f:62:3b:f1:11:6d:f0:81:2b:77:ce:e7:82:bf:
                    97:96:5b:00:b8:e2:cd:1a:54:31:49:c5:37:b0:85:
                    0c:5e:a7:a7:35:95:fd:7c:6f:23:f4:06:37:32:6e:
                    a8:be:0b:51:89:d1:97:c5:22:2b:19:a8:22:fb:8b:
                    51:81:20:bb:0a:a9:02:c6:99:b8:b1:06:98:29:d2:
                    bd:f5:85:c0:68:ac:aa:82:fc:6c:12:32:33:7d:80:
                    e3:b4:64:d6:ea:92:77:a8:57:3e:0c:09:99:37:a8:
                    8b:b8:a5:b7:69:5f:ea:4c:e4:0e:03:4a:7b:87:f7:
                    1a:9d:b1:49:eb:1c:69:b4:49:80:66:4b:91:16:82:
                    3c:36:d7:be:56:4c:79:29:fe:e6:44:1e:52:35:3b:
                    46:f8:f8:b1:7a:75:76:04:db:e9:fd:36:87:27:53:
                    63:ce:84:07:59:55:f3:67:0e:5c:96:a5:24:b6:7d:
                    4e:d2:c5:30:36:c2:2e:d7:15:89:93:95:9b:b3:48:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:34:5E:8F:A5:10:06:A4:28:18:E7:7E:AC:DD:98:3F:AA:D6:73:FE
            X509v3 Authority Key Identifier:
                keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:36:1d:a2:64:92:fa:2b:2b:66:8b:9a:c8:4f:7d:e5:44:
         b0:dd:25:c5:63:33:13:6a:26:0d:f9:5e:f3:73:e2:c4:4a:78:
         21:9a:4b:6c:d3:0b:8c:ba:b2:b7:94:60:a8:9d:8d:61:79:59:
         05:96:c2:8e:c7:a2:af:50:c4:c4:63:98:e3:a4:47:b8:e1:96:
         9d:ca:53:44:f2:da:39:d9:17:4d:bb:80:08:4f:5f:43:07:80:
         15:11:89:41:0f:db:77:51:62:99:48:f8:89:d3:dc:4d:6d:26:
         90:d1:66:6f:43:10:a6:d9:a4:ae:9d:21:22:62:21:17:db:76:
         e8:53:57:51:f3:f8:9f:c0:a5:08:1f:c7:ea:b5:eb:31:fe:af:
         30:7d:6c:be:9c:87:62:1b:a1:0b:0a:27:36:c5:bd:fa:83:2e:
         ef:93:de:77:8a:b4:26:d3:cc:c6:d0:b4:8b:51:16:b5:6a:de:
         37:e1:2f:b9:ef:3f:1b:d1:de:13:9a:2e:99:63:0d:43:a3:d7:
         03:b6:12:6f:cc:a4:fa:66:b1:d1:db:18:41:bf:74:3e:75:cc:
         82:e2:d9:60:77:33:23:17:62:c6:ca:17:a4:e8:8d:1d:18:56:
         1f:82:21:df:72:32:21:78:fe:72:4d:96:8b:92:c7:96:75:b2:
         0f:c7:4d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:08 2026 by rpki-client