Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
File:                     jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json)
Hash identifier:          ZknphZwfOIr/fJX0KWnKuvJhtO+OD4jdwKbvxnY+C0o=
Subject key identifier:   31:D2:A7:A9:62:2A:1C:9E:86:B5:BD:7F:D9:5E:D7:50:38:C4:5A:FB
Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Certificate issuer:       /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Certificate serial:       21A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
Manifest number:          2199
Signing time:             Tue 28 Jul 2026 16:00:11 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:11 +0000
Manifest next update:     Tue 04 Aug 2026 16:00:11 +0000
Files and hashes:         1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: ACUyV4pDybFwKaMM9vqjlmIKwMjDr0DI5LIz9CWeHG0=)
                          2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: q6obv3XbPXxFh/9pkLqSgiabaqoDxZSpOGQbzF+b7F4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
                          rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8610 (0x21a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
        Validity
            Not Before: Jul 28 16:00:11 2026 GMT
            Not After : Aug  4 16:00:11 2026 GMT
        Subject: CN=6a68d20b-bcf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:84:08:b2:9d:09:12:d3:9a:0d:a5:be:7d:
                    6f:25:73:ea:e6:f2:4f:05:f6:d7:c2:3d:47:2b:00:
                    fb:1a:4d:6f:a1:c5:9b:5b:bd:8b:4c:4c:ec:d6:18:
                    fb:fb:25:7e:cc:a7:47:5e:da:8a:e5:17:b5:73:ca:
                    44:31:52:07:72:f8:65:8a:51:56:9a:25:c6:f1:d5:
                    29:7d:2c:db:0f:9f:e5:7b:b2:04:f0:01:c8:9b:8a:
                    14:2d:5b:61:5b:eb:08:7c:bc:79:5e:10:02:1f:c5:
                    c7:66:e3:9a:06:2c:76:52:49:fb:68:ee:6e:1c:c5:
                    e2:1f:06:5d:b4:dc:87:3b:c1:8e:cb:f7:3f:e4:50:
                    02:2d:30:de:9c:19:fa:01:f5:30:73:bb:8b:4e:ac:
                    b4:89:74:51:39:dd:0c:f3:4d:9d:40:20:76:15:73:
                    70:fc:b9:0f:92:be:43:19:ef:1d:bd:c1:8f:d2:0c:
                    1d:98:30:b8:2d:36:9c:bb:40:76:af:82:b5:0c:89:
                    a8:b1:f7:81:65:2b:ba:30:78:0c:04:ca:81:bc:ce:
                    72:6b:a1:2d:4c:fd:71:41:c7:57:81:a2:83:42:74:
                    d6:2f:d8:ac:ea:ba:5e:31:c2:23:aa:5f:07:62:a3:
                    71:70:3c:97:15:7b:cb:69:68:26:d5:74:4d:91:5c:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D2:A7:A9:62:2A:1C:9E:86:B5:BD:7F:D9:5E:D7:50:38:C4:5A:FB
            X509v3 Authority Key Identifier:
                keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:06:c6:2e:03:3e:79:05:2b:0f:d4:27:e7:a4:b1:a5:42:47:
         65:5c:50:6c:95:d5:ca:de:52:f2:d4:d9:ed:de:ce:40:c1:87:
         35:2b:bc:33:17:73:ba:65:e8:d1:61:19:de:49:7d:78:94:e4:
         12:c5:80:5d:64:66:88:86:89:f5:ce:b4:a5:9b:2f:ec:f5:e3:
         77:26:42:e1:95:c9:ab:a6:e6:aa:f6:10:53:7a:a5:98:eb:24:
         96:f8:43:41:c7:b4:a0:ea:d1:c7:4a:cc:8d:a6:9f:73:74:41:
         0d:2d:7b:a8:0e:51:34:53:4b:f7:ff:b4:16:e0:1a:3e:3e:1e:
         b1:8e:8f:cd:15:27:d3:19:9b:76:ef:d1:9a:88:22:df:49:a5:
         b7:69:60:84:b5:c2:7c:bd:06:d9:68:c3:94:21:9e:7a:2e:e0:
         c7:eb:e2:35:a6:ea:17:3d:44:97:77:44:c0:18:58:a5:2b:d9:
         42:e3:76:8d:9f:d9:5b:7c:f0:29:f0:9e:13:be:90:95:52:e8:
         71:cd:48:13:d2:05:85:1a:65:59:2d:ac:07:c9:dd:92:4a:ae:
         ce:a6:06:9c:16:80:fe:6d:31:07:dd:44:0c:5f:82:5c:11:a7:
         ef:5b:42:db:30:e4:bd:29:b3:c4:4e:5f:54:d2:0a:73:96:cc:
         bd:20:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:28 2026 by rpki-client