Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File:                     rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier:          4ihSO8nZ4k+RKbwEylLtU4CphrZSQpzHZdtbXkuD5oc=
Subject key identifier:   CF:C1:C8:A7:37:A1:82:1B:E6:9E:44:ED:10:B7:E7:2F:52:71:2B:6F
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number:          023A
Signing time:             Mon 27 Jul 2026 04:10:15 +0000
Manifest this update:     Mon 27 Jul 2026 04:10:15 +0000
Manifest next update:     Mon 03 Aug 2026 04:10:15 +0000
Files and hashes:         1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: El/uVsaM9v5vR/MW8JwrRN+a3X4cd2XwWmKzCqW3V9c=)
                          2: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: bc09Q0qDl4JRKTKdrE27msOGAJTz68IMapWBCLEOpeY=)
                          3: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: tr7WXU9f6CtqcovZLq0HIZHw7MPhtACp8RCBWvYQ4w8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Jul 27 04:10:15 2026 GMT
            Not After : Aug  3 04:10:15 2026 GMT
        Subject: CN=6a66da27-b92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:9f:3f:da:c2:56:2c:86:44:f1:56:ae:12:
                    75:93:53:b3:05:28:c7:98:93:2b:78:60:a2:be:28:
                    88:39:8a:59:c3:63:96:c7:18:63:51:ac:a0:d4:70:
                    f1:2e:8f:29:e1:f2:30:26:af:7e:13:54:76:d4:82:
                    ce:47:bb:7b:30:cb:39:bc:2c:47:c0:ac:62:ea:f7:
                    61:2f:a3:fc:72:dd:0d:1f:ec:1f:f5:46:3b:68:7d:
                    53:03:f9:0a:5a:78:cd:ea:10:1d:7a:05:8a:a7:2d:
                    c5:c6:7f:6c:5b:cd:f9:9c:89:e0:60:26:3f:76:12:
                    75:4d:6e:08:19:ae:6b:33:2c:12:98:f9:c9:cb:8d:
                    cb:e4:bc:b2:b1:d9:33:e0:fb:d6:46:2f:e5:5c:7c:
                    4a:3b:6f:e0:dc:bf:14:2b:75:14:a9:f9:85:cd:6c:
                    f9:73:55:a9:9c:b5:0d:0d:62:dd:5f:4f:5d:7a:23:
                    3c:64:8d:a1:da:73:6e:5f:c0:9e:6c:51:66:87:3f:
                    dc:ee:cc:58:4d:81:02:39:37:d2:a3:89:50:26:20:
                    3b:63:74:37:fb:21:3b:c8:5f:bf:10:d3:82:53:92:
                    71:25:57:de:4b:5e:9e:c0:73:4b:96:af:ee:de:8e:
                    1a:f8:f4:ff:95:cf:2b:52:78:7b:f6:88:f9:e1:87:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C1:C8:A7:37:A1:82:1B:E6:9E:44:ED:10:B7:E7:2F:52:71:2B:6F
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:68:3e:31:ef:24:9b:2d:f7:ed:0b:e4:c8:b1:36:a9:c5:
         80:20:63:35:44:56:2b:7a:01:be:ab:b7:32:2a:65:11:e4:15:
         f1:5e:f8:76:21:fb:e8:ba:7e:7e:85:46:56:6c:4e:dc:5a:ac:
         8a:c9:ae:6c:35:49:5b:e6:c6:e7:32:79:e1:14:8b:24:50:e0:
         9a:a4:2b:d4:05:fc:80:04:39:41:30:f4:67:47:bb:75:70:cc:
         fa:53:c1:24:37:f1:f4:b0:de:8d:c9:da:c4:4a:30:88:10:f0:
         a2:2e:88:91:d5:c3:08:cb:50:9b:5d:44:bf:a5:8a:0f:50:80:
         eb:32:c9:37:86:63:b2:b4:af:95:46:fa:de:69:9e:b8:39:62:
         42:29:d2:f1:1b:fd:ff:cc:6c:2f:e0:96:be:b0:63:92:c2:f9:
         1a:f4:85:d4:be:c1:ff:f6:60:b7:df:d5:52:47:9c:5c:b2:49:
         56:03:d7:2c:53:b0:07:2d:25:f1:90:36:f6:05:d0:5f:d1:13:
         57:da:b5:8c:98:83:1e:33:37:75:79:9c:47:4a:05:12:e1:0f:
         79:9c:e7:f1:2d:64:61:10:f4:d5:39:a5:90:ee:6f:91:52:0e:
         79:db:c2:bf:b5:c9:34:15:d5:07:26:02:60:a6:38:3c:51:55:
         8e:28:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:23 2026 by rpki-client