Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
File:                     xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json)
Hash identifier:          RkuYnCBONGxwP3wG3NFRel7vG5XRkYaViGzQnAK8DsY=
Subject key identifier:   C2:96:FB:1F:6C:36:F6:8F:32:6B:A1:22:A9:02:BC:A6:8A:A7:73:25
Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E
Certificate issuer:       /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E
Certificate serial:       0E82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
Manifest number:          0E6C
Signing time:             Tue 28 Jul 2026 17:52:43 +0000
Manifest this update:     Tue 28 Jul 2026 17:52:42 +0000
Manifest next update:     Tue 04 Aug 2026 17:52:42 +0000
Files and hashes:         1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: m8KkfBIc7UEHLOktzabpxXZkw0lrR5FT0wa9YpNmbRE=)
                          2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: zYy4S918px5uLTp6OwMmF2M8JIH9eVoyGMPCXX5c2Jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl
                          rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3714 (0xe82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E
        Validity
            Not Before: Jul 28 17:52:42 2026 GMT
            Not After : Aug  4 17:52:42 2026 GMT
        Subject: CN=6a68ec6b-0bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:ec:84:30:a4:6c:e7:7e:a7:44:62:6c:3c:
                    0c:59:35:1b:cc:ee:08:23:ce:ef:59:2a:3f:14:72:
                    47:f4:6c:e9:27:e2:a9:f1:d9:3a:ca:0b:5e:c8:4d:
                    44:bf:4a:63:bb:73:c0:a8:49:a3:f2:68:de:c2:1d:
                    c1:31:5e:9a:bf:c3:41:fa:b8:0f:15:67:a4:86:c1:
                    fd:12:ed:77:41:6c:c6:f3:64:e9:41:28:d2:20:5d:
                    0b:63:af:30:1f:dc:85:70:65:78:b3:2b:7d:74:8e:
                    c1:ef:7f:96:5a:79:24:6e:9b:df:15:36:0a:6b:6d:
                    4c:63:d4:8e:b0:09:ed:8d:34:ba:6a:d1:ee:cf:f8:
                    1b:0f:42:12:eb:72:95:43:5d:d0:27:92:47:3a:cc:
                    f4:73:7a:d6:00:ce:9c:0a:35:2c:db:b7:fe:5e:4d:
                    72:4d:cd:95:77:f1:0e:fe:f1:37:ec:ff:ee:8c:d1:
                    9d:e8:a0:6f:d1:d6:5e:0f:cc:1a:1e:4c:dd:c2:0c:
                    29:5c:3c:88:bd:e2:fa:9d:d9:ae:cd:b6:68:b6:38:
                    6a:fa:1d:33:14:c5:41:12:fa:2c:e1:6d:bb:71:fa:
                    db:77:7d:e2:d9:fc:d0:c3:35:c9:73:29:ea:e6:a0:
                    8a:fd:a1:75:d8:25:e0:54:b5:4a:c1:13:87:5a:92:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:FB:1F:6C:36:F6:8F:32:6B:A1:22:A9:02:BC:A6:8A:A7:73:25
            X509v3 Authority Key Identifier:
                keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c9:1c:98:2b:a9:85:78:02:23:e6:15:ed:ee:1c:96:1b:16:
         c7:25:d1:3a:81:a8:da:c8:76:27:d0:45:7f:a8:49:8f:c0:f8:
         95:37:a4:17:37:db:e5:9e:df:72:f8:24:4e:49:f4:50:89:29:
         97:e8:3e:2a:3c:5a:61:d5:4c:e6:18:2d:97:42:57:97:40:aa:
         f6:c7:1a:89:3b:d0:0b:83:11:4a:3f:5b:f5:fc:12:3e:37:52:
         f4:43:53:42:77:f8:90:d1:d2:c3:c8:17:49:11:45:c9:f5:d1:
         25:5c:9a:be:8f:f4:8f:de:22:3c:09:69:7c:0b:83:23:f9:c1:
         9d:35:d9:02:19:de:7d:49:8d:5b:e9:b6:57:84:d4:4d:69:40:
         66:a0:61:7f:80:94:ef:78:03:b0:71:5e:5f:71:2f:a5:04:d1:
         24:a2:10:59:56:4d:92:50:2a:c7:f0:da:c5:c8:4c:6b:35:b7:
         a4:39:56:31:6a:e2:87:7e:11:00:8c:f9:cd:2a:1e:e3:00:74:
         a9:29:dd:ca:c6:13:39:e9:41:2a:6d:31:07:91:2e:53:db:8b:
         1f:cb:44:73:99:93:49:19:32:c4:df:d0:63:79:fc:55:d1:6b:
         3f:e7:c0:19:fd:4f:ed:f0:2f:ae:73:b7:b0:b9:64:b9:57:71:
         ff:f6:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:16 2026 by rpki-client