Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
File:                     J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json)
Hash identifier:          6eBq1xXwLlbm/ylmutxcduq1KM0Bs1Sp4loTXscT9jc=
Subject key identifier:   D4:4A:B2:5E:D8:53:59:A1:F4:44:C7:2D:F4:03:B5:D9:A4:50:FC:73
Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB
Certificate issuer:       /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
Certificate serial:       073B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
Manifest number:          0732
Signing time:             Sun 26 Jul 2026 22:39:48 +0000
Manifest this update:     Sun 26 Jul 2026 22:39:47 +0000
Manifest next update:     Sun 02 Aug 2026 22:39:47 +0000
Files and hashes:         1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: ZPRagiUaVfVgfk+eIMAI0RClSWnC3Q6OWEHRipQXO+c=)
                          2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: smcKZZnkMoei6zhQPadbstenrV1to2stgzo+Uy+BIDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl
                          rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851 (0x73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189261, serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
        Validity
            Not Before: Jul 26 22:39:47 2026 GMT
            Not After : Aug  2 22:39:47 2026 GMT
        Subject: CN=6a668cb4-6dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:63:16:c9:75:0f:60:48:2d:4b:36:11:fd:
                    fa:1c:68:4a:b9:29:0f:df:46:b0:8e:0c:c6:c4:44:
                    11:9f:58:eb:bf:96:d4:2f:be:98:a5:5f:ba:19:f6:
                    68:29:bf:eb:4a:30:07:30:8c:11:ea:94:55:a7:27:
                    2f:11:39:22:d6:f8:5f:09:74:ff:66:5e:e7:16:90:
                    f1:bc:c4:03:0f:56:a3:ef:df:cf:d2:2c:5b:fa:ee:
                    6f:97:5b:ae:19:4c:4d:20:29:89:d8:64:0c:8f:aa:
                    1d:66:6f:c9:dd:d0:1d:d9:34:ff:1f:fb:e2:e0:97:
                    8f:f7:6f:10:6b:e0:68:44:bc:bb:d4:26:c2:4b:63:
                    e9:de:e1:ab:6b:8d:22:70:c0:8c:df:b7:ff:13:a6:
                    e2:ba:87:62:94:97:e4:c9:86:c8:c7:3e:25:86:de:
                    74:4c:99:26:a5:92:37:1c:d0:c3:bc:66:62:f9:fa:
                    c1:32:6b:f2:c8:fd:3c:dc:05:fc:a2:c3:9d:f7:32:
                    80:92:c2:18:11:0a:96:72:84:3d:49:7d:4b:cd:38:
                    14:2c:4a:9e:87:93:0d:01:c2:28:97:48:75:76:43:
                    c5:32:88:31:df:8f:74:da:2d:0a:df:ca:17:74:4d:
                    dd:30:17:e3:53:46:8f:6c:1e:b8:01:a9:60:3d:f4:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4A:B2:5E:D8:53:59:A1:F4:44:C7:2D:F4:03:B5:D9:A4:50:FC:73
            X509v3 Authority Key Identifier:
                keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:58:aa:57:3f:80:d4:74:cc:48:1e:d2:e2:81:6f:6b:c3:e7:
         4d:91:4e:cd:2b:14:db:a1:9c:5f:84:a9:02:30:14:22:ca:dd:
         01:da:2b:40:de:6c:72:a1:43:81:63:30:ec:91:21:1d:cd:bd:
         d8:fa:50:4c:a4:74:85:c2:bc:10:c1:1e:e5:e6:b2:e0:20:f4:
         61:fd:51:bb:26:17:7d:cb:67:a8:70:66:f0:d5:66:45:b4:be:
         3d:41:68:30:5e:f8:7b:1e:bf:63:d3:4d:c5:d4:7b:e4:82:0b:
         e9:52:4e:ab:40:65:e8:9b:1d:2f:35:a7:34:9d:2f:9f:4a:1b:
         f1:fd:36:48:bc:7f:65:74:d8:1e:45:13:9c:0d:49:14:70:cf:
         51:a2:3b:8a:21:6a:c3:a2:20:cf:1a:d5:2f:ab:45:5a:54:12:
         0f:41:4e:2e:04:ee:24:bf:8e:4f:07:0c:35:9a:5a:30:94:99:
         17:9b:fc:22:df:c1:62:bd:59:c8:23:5b:2e:2a:7d:56:fd:d2:
         27:7b:4e:cf:2e:a3:19:3b:e6:a9:45:01:b5:86:b4:12:c6:bd:
         76:2d:0d:2f:f6:f9:7c:d0:f0:85:c8:5d:c2:09:34:08:29:18:
         53:6c:4e:6b:3e:d1:c0:2e:72:88:e8:78:dc:23:bb:dc:40:49:
         2b:09:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:41 2026 by rpki-client