Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File:                     Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier:          hDrEJ2t0IG2Fpnkdo/1fJJ3q8vuJ7Dz7nrHVDInLwXE=
Subject key identifier:   69:81:79:28:DD:8F:29:53:37:97:96:84:80:CF:F9:69:DE:94:E2:24
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer:       /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial:       35F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number:          35B8
Signing time:             Tue 28 Jul 2026 14:56:01 +0000
Manifest this update:     Tue 28 Jul 2026 14:56:00 +0000
Manifest next update:     Tue 04 Aug 2026 14:56:00 +0000
Files and hashes:         1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: H10v1p1M1ojWDO+tA6K5FEc6e5cg946NKug/jsqYT90=)
                          2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: 3dwH9a/utiC4SfLWlkTfOUAPg5RQr8BVu3u7eFbig/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
                          rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13813 (0x35f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
        Validity
            Not Before: Jul 28 14:56:00 2026 GMT
            Not After : Aug  4 14:56:00 2026 GMT
        Subject: CN=6a68c300-33ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:53:63:2d:76:19:83:26:fe:61:60:c4:52:8d:
                    94:e1:09:ce:43:be:bf:39:65:1e:ca:c1:dd:e6:d7:
                    a2:f7:25:20:f0:0e:01:fc:48:df:3a:a9:b1:a7:0e:
                    06:0a:15:38:34:d0:f8:63:a8:5f:3d:0a:8a:1e:b4:
                    5f:42:56:72:6b:5e:cb:98:ab:86:3d:3c:d0:a2:fe:
                    6b:84:77:e3:05:c8:99:91:92:13:f5:af:12:ab:fe:
                    ee:4a:06:1d:2f:c7:d5:64:b6:05:89:16:52:c8:d7:
                    92:7a:b6:55:03:85:2b:97:9b:b6:b2:18:c3:e7:46:
                    fa:ad:8d:b6:d1:3b:68:d0:69:6c:a9:9b:61:da:eb:
                    44:24:01:ae:2d:f0:77:3e:42:0c:1a:b2:ee:4b:3c:
                    43:02:b4:2d:6d:88:d1:aa:1b:01:38:34:3c:f7:47:
                    d3:7c:d1:1b:3c:de:32:01:42:26:b8:8d:2f:65:a0:
                    84:6d:3d:ad:6f:3a:e7:9b:68:09:8a:ed:e2:cb:9e:
                    42:12:0d:60:27:67:46:34:f3:93:ae:ae:c1:b0:16:
                    ef:c8:ea:6f:8d:46:06:fa:06:26:b7:d9:d3:8c:60:
                    13:e6:43:ee:e6:7f:58:cc:ee:f9:10:de:93:c3:7b:
                    7b:5d:c1:cc:c1:08:6d:21:b1:0c:13:fb:04:35:7a:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:81:79:28:DD:8F:29:53:37:97:96:84:80:CF:F9:69:DE:94:E2:24
            X509v3 Authority Key Identifier:
                keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:cf:b5:52:68:27:c8:d5:b0:9b:2f:7b:0e:f8:76:e9:48:
         da:1c:f9:41:69:60:e1:1c:d7:31:76:f1:98:17:54:f1:34:b9:
         19:ce:18:94:55:1d:0a:0b:c2:4d:7f:9e:a8:d0:1b:58:ff:72:
         26:8b:66:78:af:2b:7c:a1:9a:ea:0b:a6:a8:28:b7:36:83:67:
         0c:93:9a:ca:3f:19:80:9f:2c:f0:22:a8:39:dd:63:00:21:5a:
         4b:5d:da:17:aa:73:75:32:af:cf:52:f8:29:8d:68:ed:18:9c:
         a1:44:64:b4:17:ef:f6:04:bb:3a:50:13:8c:03:c6:df:fc:e7:
         28:74:bc:e6:52:97:e7:44:25:58:77:7e:80:eb:3a:84:e4:18:
         e2:c5:82:1e:3e:3e:71:35:5a:f5:5c:49:bb:2f:dd:61:65:0d:
         00:b3:77:3f:70:1e:85:47:69:8c:81:98:d3:be:a6:61:d2:ab:
         ed:ab:c5:8d:57:d1:c3:a9:73:a2:52:19:f2:01:47:a2:7d:0b:
         a7:d0:49:32:80:1c:93:3b:04:e1:e1:9f:50:a9:34:7b:55:44:
         b5:b6:1a:bc:5c:eb:b6:71:9b:f1:76:c5:66:a2:4c:b6:09:d4:
         38:e5:0f:53:a9:14:d0:e9:3a:c6:83:12:d2:db:93:b4:ca:fb:
         4c:f9:79:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMyODExMTAvBgNVBAUTKDEzMTc2OEEzNkIzMDM0NkUzREJFQkVCRjg3Qjg0ODFC
QUFCRTNFRUIwHhcNMjYwNzI4MTQ1NjAwWhcNMjYwODA0MTQ1NjAwWjAYMRYwFAYD
VQQDEw02YTY4YzMwMC0zM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4FNjLXYZgyb+YWDEUo2U4QnOQ76/OWUeysHd5tei9yUg8A4B/EjfOqmxpw4G
ChU4NND4Y6hfPQqKHrRfQlZya17LmKuGPTzQov5rhHfjBciZkZIT9a8Sq/7uSgYd
L8fVZLYFiRZSyNeSerZVA4Url5u2shjD50b6rY220Tto0GlsqZth2utEJAGuLfB3
PkIMGrLuSzxDArQtbYjRqhsBODQ890fTfNEbPN4yAUImuI0vZaCEbT2tbzrnm2gJ
iu3iy55CEg1gJ2dGNPOTrq7BsBbvyOpvjUYG+gYmt9nTjGAT5kPu5n9YzO75EN6T
w3t7XcHMwQhtIbEME/sENXoRfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmBeSjd
jylTN5eWhIDP+WnelOIkMB8GA1UdIwQYMBaAFBMXaKNrMDRuPb6+v4e4SBuqvj7r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzI4MS8wMDIwMTM0NjFE
OTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05HNDl2cjZfaDdoSUc2cS1Q
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V4ZG9vMnN3Tkc0OXZyNl9oN2hJRzZxLVB1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzI4MS8wMDIwMTM0NjFEOTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05H
NDl2cjZfaDdoSUc2cS1QdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATCnPtVJoJ8jVsJsvew74dulI2hz5QWlg4RzXMXbxmBdU8TS5Gc4YlFUdCgvC
TX+eqNAbWP9yJotmeK8rfKGa6gumqCi3NoNnDJOayj8ZgJ8s8CKoOd1jACFaS13a
F6pzdTKvz1L4KY1o7RicoURktBfv9gS7OlATjAPG3/znKHS85lKX50QlWHd+gOs6
hOQY4sWCHj4+cTVa9VxJuy/dYWUNALN3P3AehUdpjIGY076mYdKr7avFjVfRw6lz
olIZ8gFHon0Lp9BJMoAckzsE4eGfUKk0e1VEtbYavFzrtnGb8XbFZqJMtgnUOOUP
U6kU0Ok6xoMS0tuTtMr7TPl5LA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:47 2026 by rpki-client