Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
File:                     pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json)
Hash identifier:          e2pM78TlwcZbg244TYxkCip586ZqiAtZ52fC8uK5asI=
Subject key identifier:   F6:33:3A:1F:81:B5:61:E7:2D:C5:BD:18:13:7B:4E:29:75:33:1F:21
Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
Certificate issuer:       /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Certificate serial:       03F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
Manifest number:          03EF
Signing time:             Wed 29 Jul 2026 01:15:24 +0000
Manifest this update:     Wed 29 Jul 2026 01:15:24 +0000
Manifest next update:     Wed 05 Aug 2026 01:15:24 +0000
Files and hashes:         1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: QzvAkhvEsqkkX2zBhTsGLQNU+MH8Bgt/iWPjhW0JYSo=)
                          2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: hAQl9H75BpKmN7Muu51VVyZ+oy7nwK9cCULcraz4/lY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
        Validity
            Not Before: Jul 29 01:15:24 2026 GMT
            Not After : Aug  5 01:15:24 2026 GMT
        Subject: CN=6a69542c-4f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:13:e6:3b:b0:0d:01:99:07:3c:8c:f5:62:
                    b1:ae:5e:6e:d1:38:99:28:e3:39:d0:60:b6:3f:4e:
                    0a:ac:59:d7:6b:05:93:79:3d:a7:7f:65:26:80:ec:
                    c0:90:15:60:1d:9c:d3:d7:f7:17:47:df:bb:84:dd:
                    b9:cc:bb:56:d1:3b:f9:6f:32:08:4a:00:a8:94:30:
                    0e:42:9e:58:cd:77:9b:5d:35:0b:37:7b:6a:26:1e:
                    b2:7c:27:95:77:78:44:02:ec:91:29:2b:4c:50:35:
                    48:d7:9c:16:c2:7b:b7:bf:2b:92:0e:ae:a6:35:bb:
                    6d:63:17:b7:e2:e7:17:cb:ae:b8:97:b8:f3:38:b1:
                    40:7d:81:c7:2e:43:0f:8b:0e:61:2b:44:89:5b:72:
                    36:2a:5d:4a:92:31:46:21:7a:ac:3b:81:c7:2d:c1:
                    13:05:d4:91:d6:07:af:3a:cd:bf:69:a3:17:da:f5:
                    a0:3b:64:ab:a7:47:24:35:9e:56:53:88:15:85:3e:
                    a0:94:7a:32:e6:c1:5f:32:5d:90:05:ee:c5:63:92:
                    e7:a2:70:11:9b:20:b4:2c:8b:f4:a6:de:83:ed:9c:
                    8c:db:b6:33:5b:fc:fe:34:cd:77:df:fa:ff:c6:7c:
                    d4:5a:bb:8c:fb:6c:dc:22:34:55:68:93:ae:9a:7c:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:33:3A:1F:81:B5:61:E7:2D:C5:BD:18:13:7B:4E:29:75:33:1F:21
            X509v3 Authority Key Identifier:
                keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:26:7d:6f:3b:05:dd:5c:12:fe:a0:d1:40:68:35:68:b9:a8:
         cf:74:fc:7d:ad:af:f7:d4:15:da:2a:bc:a8:85:d9:46:4c:4c:
         f1:a6:e4:83:a0:2d:8b:e0:e5:c5:f7:84:4b:d5:33:30:9a:5b:
         2e:ad:f0:18:af:e6:95:9f:13:f6:0d:37:e8:bf:8f:55:48:96:
         56:d3:e7:ea:8e:c8:f1:09:73:09:42:9a:76:b6:e9:2d:07:81:
         a9:7d:77:ce:2b:4f:2e:53:01:88:66:d9:d3:58:ee:f3:09:75:
         01:5c:88:fc:71:b5:da:19:dd:c0:b9:a8:76:92:eb:2d:01:f9:
         ed:eb:59:ac:ba:88:a5:30:31:65:15:df:18:41:86:ed:7c:89:
         48:1f:c2:34:09:d9:a2:33:26:91:93:e4:24:7a:c9:e1:5a:09:
         f0:13:0d:90:f0:9a:96:7b:ec:55:93:29:83:75:4e:dd:a5:10:
         91:34:36:79:a9:df:4e:7f:48:9f:44:bd:dc:0c:ad:a0:63:d8:
         b7:32:66:06:98:67:38:e5:1f:57:e3:a9:eb:dd:4c:91:51:a3:
         ac:ba:08:11:47:6f:a0:57:85:b2:f1:62:68:47:0d:2d:b8:e4:
         ef:e7:b8:f6:e7:42:ff:ee:90:bd:1a:24:1d:f0:9e:7c:92:0d:
         59:e5:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:19 2026 by rpki-client