Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
File:                     X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json)
Hash identifier:          DdIp1kHyamkMT+CGk8jHxNOQ1QD0vlDcEOodvrNXy2k=
Subject key identifier:   03:6D:74:64:A4:EE:35:1B:36:16:C2:81:88:19:BF:47:6C:D1:22:27
Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
Certificate issuer:       /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Certificate serial:       08CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
Manifest number:          08C2
Signing time:             Tue 28 Jul 2026 20:51:43 +0000
Manifest this update:     Tue 28 Jul 2026 20:51:42 +0000
Manifest next update:     Tue 04 Aug 2026 20:51:42 +0000
Files and hashes:         1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: Qp1Mk8HTPQDUurI1+qfJLXYbnKkv75+nVP/OOUdvYqA=)
                          2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
                          rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253 (0x8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
        Validity
            Not Before: Jul 28 20:51:42 2026 GMT
            Not After : Aug  4 20:51:42 2026 GMT
        Subject: CN=6a69165f-d01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:0e:f4:23:df:dd:d9:32:6f:20:55:f4:04:
                    93:df:cb:4c:ca:a9:50:f4:6d:f3:68:47:d6:59:28:
                    64:db:a2:7b:cc:e4:07:14:9d:a0:2a:a5:40:41:b3:
                    4f:6d:55:93:d5:a5:5e:59:d1:a2:22:e1:4b:eb:45:
                    5d:d7:5c:22:d8:d7:75:ca:1d:76:15:00:7b:d3:31:
                    b4:dd:78:39:09:75:15:93:7f:f9:3f:d9:0a:60:4e:
                    d7:b6:d4:83:35:8d:14:34:c9:f2:c9:a0:58:fe:64:
                    c4:bd:2d:c9:7a:62:c8:dc:1b:ed:6a:8a:d4:b2:19:
                    42:0b:0f:b7:29:7f:e0:29:b5:c0:ab:f7:7d:07:0f:
                    2f:aa:a3:45:41:a3:39:78:73:ef:fb:c5:38:44:e1:
                    a7:64:ee:4c:63:5a:97:32:20:0b:3d:df:31:40:62:
                    7e:8e:9c:18:38:f7:2a:4a:1c:9a:2e:e0:e7:8b:c6:
                    77:26:57:44:65:1f:ef:c6:70:cf:7d:11:51:72:81:
                    b6:11:ee:3f:a6:40:1f:c5:47:ab:95:af:68:af:f7:
                    92:5c:b3:df:9c:39:63:d3:fa:85:3c:93:e7:c4:71:
                    89:34:b9:be:88:a9:2d:4f:36:7d:22:bc:a5:25:e9:
                    c9:c2:42:40:34:70:f3:d2:56:90:b3:10:47:a8:29:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6D:74:64:A4:EE:35:1B:36:16:C2:81:88:19:BF:47:6C:D1:22:27
            X509v3 Authority Key Identifier:
                keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:30:01:48:a2:0a:10:61:69:64:ce:92:b5:d0:d3:c5:e2:ca:
         ed:42:bd:42:9d:2c:0c:21:44:b3:2e:2d:eb:62:dd:cf:87:98:
         bd:1a:13:60:60:db:8c:5e:11:ab:42:cf:04:c2:6b:1f:a6:b6:
         7a:96:ae:e8:28:fe:f7:37:71:22:63:e8:73:4d:4a:3a:da:88:
         d8:e3:49:4b:fb:32:30:00:ec:8d:46:75:d7:46:ed:36:ff:bb:
         96:f9:84:ff:85:43:61:ba:a0:c2:a8:66:8d:22:37:99:f4:95:
         b1:21:e6:51:57:61:4c:d5:bb:d1:d7:24:c1:90:08:77:cd:a5:
         91:08:eb:6c:92:cd:96:10:50:97:1c:c3:22:9e:16:44:b9:f7:
         97:b7:29:3f:21:af:d6:9f:f2:67:8e:e7:e8:0a:3e:4a:9c:d7:
         ec:f8:ef:83:d3:67:33:4c:c4:57:9e:28:30:ee:b7:48:70:f8:
         19:15:b6:26:19:cc:b5:6e:65:a5:9d:ab:f8:1c:ab:ab:b8:3d:
         be:21:52:58:f2:7b:de:64:6b:e5:ad:c6:ea:4e:26:4e:dc:34:
         19:77:cf:fa:2c:e7:40:97:49:ab:a1:c0:5d:dd:db:b0:35:c8:
         2b:63:13:2e:c8:51:39:a9:9c:b4:83:87:32:b0:c7:29:60:7a:
         c9:52:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:37 2026 by rpki-client