Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File:                     bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier:          xoChosJIwFiXKQma8qTZ0zTk1sjjrKjIESFoamamjEw=
Subject key identifier:   2F:BB:EC:8F:D6:D8:3B:09:C5:CE:12:4A:F5:7F:5B:FA:07:8F:F0:3A
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer:       /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number:          0219
Signing time:             Mon 27 Jul 2026 04:28:06 +0000
Manifest this update:     Mon 27 Jul 2026 04:28:05 +0000
Manifest next update:     Mon 03 Aug 2026 04:28:05 +0000
Files and hashes:         1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: 59ixEmbsFemlgTRStgX9Sm6FgGbS/WBqf965UHGsw60=)
                          2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
                          rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
        Validity
            Not Before: Jul 27 04:28:05 2026 GMT
            Not After : Aug  3 04:28:05 2026 GMT
        Subject: CN=6a66de55-7eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:95:d5:41:53:72:ca:43:00:b3:c5:bf:71:
                    ee:18:c8:4a:a2:bf:4a:17:19:d1:e0:38:3c:75:ee:
                    4a:ef:dd:b6:4b:d8:f5:68:d8:69:f7:3e:ee:ba:92:
                    cc:fb:b8:df:51:ea:da:49:74:23:78:85:eb:3b:87:
                    f0:cf:88:b6:e6:5c:a4:9b:dc:36:ef:79:36:21:77:
                    f0:6e:57:f4:23:8d:57:91:7c:f4:0c:91:60:1c:56:
                    6f:85:a5:41:03:45:b9:52:6c:64:19:56:1b:e1:d1:
                    b5:ee:38:dc:4e:71:44:2c:04:a2:e8:00:8c:f3:c6:
                    51:de:3c:f4:f0:a7:2a:61:8e:d3:a0:65:3e:1e:17:
                    ab:db:08:c2:81:97:b8:82:b4:23:92:45:f6:4b:60:
                    14:43:a6:f3:5d:89:fd:b0:8d:c1:fb:b8:ce:63:f8:
                    46:d5:36:ea:5f:e8:bb:c6:85:9c:48:84:21:19:94:
                    c8:70:9c:da:40:fd:e3:46:2c:e7:c9:7a:76:0d:2e:
                    c3:ff:d9:bd:06:e3:9e:5f:67:76:8f:5e:d8:fe:9e:
                    a9:75:78:49:89:85:ac:35:68:71:b6:c0:b3:03:c7:
                    7b:e2:32:76:7e:d5:90:1f:a5:d0:69:11:c0:df:f6:
                    2c:26:8f:f1:dd:c8:7d:7f:bd:31:86:89:e8:a2:6a:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:EC:8F:D6:D8:3B:09:C5:CE:12:4A:F5:7F:5B:FA:07:8F:F0:3A
            X509v3 Authority Key Identifier:
                keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:29:51:66:b5:3d:b7:3b:bf:78:7d:ff:d8:eb:be:c2:5e:
         1d:7b:73:f6:85:82:a9:d2:03:da:a1:80:12:16:41:9c:2f:46:
         4e:c1:90:87:97:42:34:50:5b:07:4b:30:5d:1f:b7:e1:26:58:
         c8:af:0e:15:25:dc:65:ff:30:d9:c5:05:b1:cf:aa:3f:fe:ce:
         ab:0e:e5:6b:49:fc:9d:0c:d2:47:20:e4:e8:7c:1f:f1:50:ec:
         32:f5:fc:bb:cb:a0:ad:07:5f:1d:ae:20:8f:e2:b3:4e:48:74:
         72:58:58:cd:a3:80:e5:df:fa:dc:da:09:21:05:0b:41:9a:2e:
         94:20:4b:6a:0a:fa:bb:4e:d7:31:34:c1:19:bf:ef:1d:9c:2d:
         0a:09:23:2c:36:f9:30:04:4b:e5:56:e9:9a:45:8e:26:13:04:
         ce:92:64:5a:10:ee:bc:fa:b6:27:8f:19:8b:8e:60:67:40:64:
         b8:7f:a9:dc:2c:8c:0e:dc:18:55:88:44:f9:ab:8a:6a:ca:31:
         14:b0:4d:a2:ca:d3:f7:ac:9c:8e:f9:23:3c:72:3d:8b:e2:2b:
         d4:51:0c:54:80:1b:a3:f2:2a:20:ec:dd:39:7b:a7:f2:50:a7:
         39:04:70:e5:ab:4d:7f:88:53:9b:18:48:29:b6:d9:ee:a3:16:
         a6:69:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:11 2026 by rpki-client