Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
File:                     xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json)
Hash identifier:          /rtvnnwuJ14AucD3HhIz94JFG4o1VVo7WGt/op4jGBw=
Subject key identifier:   8E:3D:FA:AE:C6:9F:86:38:00:2A:74:88:0C:C9:C1:11:5B:32:93:67
Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01
Certificate issuer:       /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
Certificate serial:       02A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
Manifest number:          029A
Signing time:             Mon 27 Jul 2026 03:00:07 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:06 +0000
Manifest next update:     Mon 03 Aug 2026 03:00:06 +0000
Files and hashes:         1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: lD2WmqdLyAuzS7KGAMK4YHtmd8PGn95IEvBpX/cEQX0=)
                          2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: upbH9l4nlvROIzKcuBlWv04CWH78FYVY5Ubcgq09mgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl
                          rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
        Validity
            Not Before: Jul 27 03:00:06 2026 GMT
            Not After : Aug  3 03:00:06 2026 GMT
        Subject: CN=6a66c9b7-2fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:03:fe:55:a5:e5:7f:94:6b:58:f9:8b:62:
                    36:c7:6f:2d:32:00:85:a2:79:87:57:20:1c:b2:a3:
                    57:c8:4e:55:4c:be:54:79:bb:55:d6:36:8b:7f:01:
                    ee:22:c7:04:20:ba:da:35:5a:1e:fe:fa:0d:b5:08:
                    66:9f:19:42:fb:ec:5f:11:aa:71:08:3e:a9:23:86:
                    30:61:c5:b0:ba:3b:62:69:6b:4e:a0:64:51:ee:ca:
                    d4:db:71:ce:94:69:8e:bf:ca:7c:f7:52:83:67:08:
                    9d:78:36:0d:34:27:68:e9:a6:d9:44:7d:7a:cc:b1:
                    d3:6d:b6:8e:94:d8:21:94:98:fc:31:22:fa:7f:6e:
                    96:42:69:61:2f:c8:05:0d:b6:b4:b8:aa:cd:df:b8:
                    90:4a:90:8b:27:6d:52:8f:a3:e3:75:91:8f:e8:4f:
                    81:f4:e1:0d:17:fa:ce:c3:d2:c5:56:fe:7d:b4:de:
                    33:a5:a0:2c:fa:3e:97:69:0b:9a:08:89:e9:0d:e9:
                    d7:e7:0f:de:47:58:d2:c1:ca:81:83:88:1d:e5:09:
                    0a:05:65:60:bb:72:78:15:de:dd:4d:28:4f:a4:6e:
                    c4:1e:c0:e2:37:5c:98:45:b4:a0:c5:17:8d:8a:c2:
                    ae:e7:bb:97:09:97:0f:b8:c4:36:0c:9e:9f:8f:cd:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3D:FA:AE:C6:9F:86:38:00:2A:74:88:0C:C9:C1:11:5B:32:93:67
            X509v3 Authority Key Identifier:
                keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:16:23:74:b0:25:18:5c:8d:ab:5b:c3:7a:80:fc:e7:c2:b3:
         95:62:20:b7:95:ec:cf:ca:b3:26:df:fc:2d:a3:d7:d4:21:05:
         4e:c0:d4:b0:02:c7:72:44:e6:ca:d4:48:87:db:a3:ce:e8:61:
         47:88:e9:88:0f:b9:5c:04:43:79:c4:f7:39:0d:e5:ac:8b:a4:
         ae:74:2e:c1:db:7b:4f:5b:1b:c4:45:1f:54:07:17:e6:10:99:
         bf:39:b0:3d:fe:82:f6:41:ed:91:ca:ea:e1:9c:46:52:8b:a0:
         f5:f2:0c:f8:af:47:23:0f:cd:7e:2e:ff:af:fe:84:ad:a1:c4:
         95:34:ea:db:b7:71:b7:bf:70:6c:9b:55:8f:1b:77:09:5d:95:
         64:3c:93:6d:ab:b8:1b:54:d9:11:67:b6:76:6b:9b:ce:a3:58:
         5c:88:3d:e9:2e:d7:8a:b8:50:4d:94:69:ca:0f:13:c1:41:d1:
         4b:64:3f:97:a4:9b:fc:cf:7c:4e:b8:ac:51:45:36:03:b1:15:
         59:0f:3b:68:d1:a7:13:33:9e:0e:4c:c5:19:34:fe:ea:05:d7:
         cd:09:5e:66:f7:ed:43:c6:75:8e:da:d2:3f:6e:6f:be:56:98:
         56:a1:2a:85:d4:70:95:ba:ff:88:31:b7:f9:ad:53:1c:0f:a2:
         13:96:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:12 2026 by rpki-client