Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File:                     ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier:          /ZsTH5MTjXPntzqqYlrZ3899sBzJ6XptuBIxd7MIung=
Subject key identifier:   CD:39:30:69:1D:FB:47:77:0E:24:25:31:63:53:A4:9B:07:BC:D2:DE
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer:       /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial:       0A6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number:          0A61
Signing time:             Tue 28 Jul 2026 19:59:23 +0000
Manifest this update:     Tue 28 Jul 2026 19:59:22 +0000
Manifest next update:     Tue 04 Aug 2026 19:59:22 +0000
Files and hashes:         1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: v6wRa8KahvsdDF7E65eirYdgy/joo5/u9vCJe/dScAA=)
                          2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
                          rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
        Validity
            Not Before: Jul 28 19:59:22 2026 GMT
            Not After : Aug  4 19:59:22 2026 GMT
        Subject: CN=6a690a1b-b46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:c6:4e:cc:96:74:75:85:df:ab:8b:92:70:
                    67:3c:54:ec:8c:b6:36:67:0e:65:3f:e6:63:71:9b:
                    57:0a:4d:e6:2f:aa:b1:b1:af:26:1d:73:ce:5c:ef:
                    dc:49:2d:fe:c2:c1:2a:9e:22:3e:89:2b:27:e9:f1:
                    f7:87:02:72:48:48:d3:89:d8:14:52:69:dd:1a:45:
                    99:c8:e9:b0:a8:75:db:20:51:a9:c6:07:79:fd:8a:
                    2e:5e:5c:5d:c8:02:53:31:0c:60:83:0f:05:e6:ad:
                    91:2b:ad:76:7d:a7:39:9b:73:31:6c:77:6f:56:da:
                    53:c2:33:8e:4e:d3:1a:25:1c:85:94:99:a2:b1:68:
                    d6:a7:da:ca:ce:bc:64:0f:76:69:0e:e5:79:cf:9e:
                    26:39:1e:57:5a:c5:11:76:58:a4:0b:3e:2a:72:f2:
                    9a:be:53:49:c0:62:9f:e7:7d:ea:46:8c:c1:f1:1d:
                    7b:f9:77:e8:a2:3c:91:57:68:76:07:c5:5c:d1:e5:
                    d2:73:bb:84:30:c6:cd:de:0f:88:e4:d8:fc:b2:9f:
                    34:d4:20:90:bb:dc:89:6e:85:63:66:18:09:de:90:
                    e3:d5:5b:20:ac:0f:cd:93:5a:2f:10:a7:fe:27:b7:
                    0e:64:da:ba:d7:5d:54:48:c3:96:61:23:ec:ef:11:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:39:30:69:1D:FB:47:77:0E:24:25:31:63:53:A4:9B:07:BC:D2:DE
            X509v3 Authority Key Identifier:
                keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1a:3c:ef:3d:59:96:1a:c0:49:28:1c:4a:7b:ae:7a:ca:69:
         5e:2a:10:65:6f:c7:e5:56:00:cd:0d:90:bf:1d:15:d3:69:a7:
         72:2d:42:21:95:99:89:01:23:69:a8:8f:0f:a4:c8:7a:d9:e1:
         a0:25:5e:d9:b3:b3:59:44:04:bc:69:ad:3d:e6:c1:8e:bb:2b:
         14:c4:27:c4:d4:0a:3d:2f:e9:91:01:eb:52:e0:ba:85:eb:d4:
         7f:bb:42:ff:38:d3:14:e6:c0:7b:19:7e:0c:2c:91:97:6b:f6:
         73:f5:71:3d:5e:24:94:34:7e:60:fb:f2:f4:d3:e7:59:1f:e0:
         0f:de:d4:d9:4c:4c:49:1e:20:c3:5e:fb:6f:d5:79:3d:60:0e:
         82:99:6b:73:8c:fe:b2:1e:81:42:c3:2f:ee:d9:21:2e:3c:7a:
         a5:cf:ba:84:f6:2f:bd:fd:cb:d0:0d:c6:dc:c3:6f:2e:db:46:
         c3:db:be:8d:c8:71:66:73:49:f4:52:d3:9e:a4:cf:54:18:69:
         b6:eb:81:f5:38:30:9e:65:97:ff:eb:87:c1:50:91:a9:bd:93:
         ca:4a:5e:47:ce:68:d2:b2:ba:6f:b3:2b:d9:49:a6:5a:81:04:
         8e:cf:89:ae:e0:a0:11:2d:58:2c:52:fe:7e:51:4b:75:ac:4b:
         0e:1a:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:30 2026 by rpki-client