Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
File:                     rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json)
Hash identifier:          q0grivav6WwVos+IWwi3C1Gk/6WCumK/CbezDVmKO7k=
Subject key identifier:   EC:96:D6:1D:A1:B1:7B:43:DC:0E:E5:38:7D:22:90:A5:47:9D:F2:61
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Certificate issuer:       /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial:       0360
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
Manifest number:          035A
Signing time:             Mon 27 Jul 2026 02:03:01 +0000
Manifest this update:     Mon 27 Jul 2026 02:03:00 +0000
Manifest next update:     Mon 03 Aug 2026 02:03:00 +0000
Files and hashes:         1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: fVjfogYO4kc0qmtghFmzb/bia7H3ZKVdD0vrcT6oYho=)
                          2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: UvlKwQqXfNX6TNtFAKTDpqec7TKizL2BqsLfAWubGJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
                          rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
        Validity
            Not Before: Jul 27 02:03:00 2026 GMT
            Not After : Aug  3 02:03:00 2026 GMT
        Subject: CN=6a66bc54-479e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:62:5d:60:65:6e:44:a1:73:da:9d:63:0b:
                    eb:cb:34:62:96:a5:6a:6d:2c:11:f8:9a:97:4a:4a:
                    6d:70:04:10:42:a4:0e:05:51:f6:c9:e2:48:00:7e:
                    2f:58:74:14:48:63:f3:37:c2:c5:62:23:7a:36:33:
                    ff:46:36:2f:dc:14:fd:d5:d1:de:e2:79:c5:72:70:
                    7a:2a:a6:d7:69:3b:2b:3a:05:af:e2:7e:c2:81:6a:
                    46:ec:7c:8e:49:65:f6:2e:e1:01:dd:6c:bb:ea:38:
                    06:4c:87:d1:04:c8:cc:f7:86:db:e0:86:77:82:be:
                    bf:10:fa:e2:2a:ce:37:53:43:75:e0:2d:09:9c:1c:
                    f1:ea:b2:7a:24:73:b5:cf:35:85:65:cf:d3:cd:92:
                    8a:38:72:49:ae:77:b0:e8:73:7c:74:b6:9d:e7:a0:
                    f3:f7:cd:00:e2:6f:8c:a7:b1:ea:1b:70:d6:d2:94:
                    83:4b:bf:fa:37:a4:0f:42:11:df:95:f4:c3:2d:5d:
                    19:68:0f:ec:ec:8b:05:dc:be:f6:e7:91:ea:f2:55:
                    4a:b9:23:a3:29:96:ba:39:17:08:aa:aa:be:ff:78:
                    64:e9:4d:14:9d:78:c8:a3:3d:8f:15:a5:92:74:c6:
                    a3:d3:7b:c8:e9:c9:9b:ad:b4:40:76:50:e8:61:b9:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:D6:1D:A1:B1:7B:43:DC:0E:E5:38:7D:22:90:A5:47:9D:F2:61
            X509v3 Authority Key Identifier:
                keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b3:30:38:cf:17:98:ea:25:26:6a:5d:9f:07:c6:bf:a8:32:
         63:9b:b3:e7:1c:8e:32:65:17:0f:50:3d:b2:08:4f:50:7d:ef:
         76:79:2e:bd:28:d5:cb:bf:09:f8:48:14:b3:57:61:d9:ae:2b:
         d7:39:8d:da:60:d7:97:ce:99:08:57:fe:b9:f3:67:84:5f:cb:
         ec:e1:50:e5:72:3b:a1:25:f5:a0:b2:85:07:93:4e:c9:f1:e1:
         4e:1b:a0:08:7d:61:ba:44:03:66:30:69:6a:28:e0:96:9c:af:
         87:e8:bd:a9:50:dc:73:cb:ad:2d:c0:3b:94:22:42:b8:55:20:
         30:9a:19:16:3d:77:56:69:a0:cc:77:7f:18:dd:2b:1d:27:98:
         5a:18:2c:1a:45:c2:3c:79:01:1a:50:c0:da:dc:06:00:43:da:
         c5:d0:d6:6d:4e:cb:a3:bc:ee:be:4d:18:a3:e6:8c:45:75:7b:
         01:43:fd:f7:24:fc:52:a9:fe:a0:3d:6e:e4:57:71:8d:e7:e9:
         5f:d2:e6:28:58:ea:d6:37:1a:96:df:66:cb:bf:15:b3:60:d1:
         29:c5:8a:1a:b2:16:49:c3:be:ba:f8:da:2d:ea:2e:f9:3a:01:
         ff:6d:63:df:9b:1d:f7:82:50:d5:64:14:67:ea:90:6f:2a:a7:
         50:81:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:40 2026 by rpki-client