Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File:                     ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier:          ciw9OAaJOzUGmWotS9ysXXdwj7uqgcJfY1CrxMIcogQ=
Subject key identifier:   5B:17:4E:0A:A0:55:80:82:31:70:73:36:A9:A0:37:14:D8:73:12:BE
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer:       /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial:       0C93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number:          0C7F
Signing time:             Tue 28 Jul 2026 18:53:12 +0000
Manifest this update:     Tue 28 Jul 2026 18:53:12 +0000
Manifest next update:     Tue 04 Aug 2026 18:53:12 +0000
Files and hashes:         1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: u/ldSy1tOlS43N6GWwVcEhL/qW7H3jiLVm0CtcMkSv8=)
                          2: 7AC6992E655411F088401528C4F9AE02.roa (hash: pTt0bboHk4i5KvWhd2IOroHa91kNethIzbOKv9fQupQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
                          rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3219 (0xc93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
        Validity
            Not Before: Jul 28 18:53:12 2026 GMT
            Not After : Aug  4 18:53:12 2026 GMT
        Subject: CN=6a68fa98-ccbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:c7:b8:46:02:cb:24:b4:b9:08:90:8b:26:
                    f4:db:ab:f3:99:2b:60:5b:56:cb:37:48:2e:3b:41:
                    d2:e3:26:e0:c8:4e:47:de:bf:fe:45:43:5d:b8:ab:
                    4f:22:23:1f:9f:94:b7:d5:f9:76:da:9b:24:1a:f8:
                    4d:96:a3:60:c0:98:44:36:00:19:60:e1:ea:65:99:
                    b8:df:fd:a5:1b:02:af:49:69:88:d2:2d:40:36:01:
                    99:a3:81:05:de:bb:1a:be:90:7b:24:ba:58:87:83:
                    c4:03:ee:f5:fe:fe:28:07:b7:ac:39:b5:5d:02:29:
                    9c:21:e1:3f:8d:11:1f:d4:7e:2a:f1:43:45:dc:f7:
                    c6:4a:42:1f:83:ba:50:e5:47:9e:d8:08:5f:1a:24:
                    89:32:ab:ad:60:c4:af:88:31:4d:97:e8:54:e2:c2:
                    7f:ff:54:7c:a7:f3:f9:6f:b3:96:95:71:31:1b:09:
                    37:c5:b3:c6:3c:25:ea:6f:5b:0e:4b:a8:93:73:0e:
                    fd:20:32:b7:5b:bf:a7:92:c5:4b:a1:f8:90:27:a3:
                    e6:70:fb:24:1a:7f:e5:a6:91:19:d0:d4:65:af:20:
                    4b:00:71:f6:80:8f:21:d6:99:23:23:e5:4a:fe:6d:
                    2e:31:14:b9:f0:40:1d:1d:25:e9:a0:dc:1e:f3:d9:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:17:4E:0A:A0:55:80:82:31:70:73:36:A9:A0:37:14:D8:73:12:BE
            X509v3 Authority Key Identifier:
                keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:42:a1:9b:d9:31:9c:47:f3:0e:0f:95:9c:e5:77:c6:9d:e5:
         2c:44:32:f4:ac:ca:3c:d0:73:8d:87:3b:0c:b9:30:ed:f7:b1:
         93:2c:a7:a2:c1:5d:a7:1c:59:b2:3a:0f:ff:b0:d6:5b:4f:11:
         8c:f7:ee:00:74:11:9a:f1:06:ee:b5:53:b1:70:b9:77:f4:37:
         f3:45:0b:90:c2:24:31:f7:c8:2e:26:ac:c2:14:bc:8c:ea:5b:
         31:ef:51:6f:85:1a:f4:30:aa:b6:ec:73:01:36:a2:5c:1d:9c:
         cc:b2:e4:57:71:18:55:9e:cd:82:4a:25:67:fc:b0:0f:1b:37:
         0c:63:a5:75:7a:08:d0:ce:e6:53:4f:95:a6:c0:8f:3a:ab:40:
         d9:56:ce:4e:f2:4a:73:ce:9f:26:b2:c4:09:da:6f:38:ec:cb:
         e8:f6:e5:68:09:e8:5d:bf:9e:92:ee:aa:45:82:51:c1:56:ef:
         cf:02:b0:c4:7f:1d:2c:6f:fc:6b:87:f4:ff:9f:fd:aa:66:11:
         73:c1:a4:30:78:56:7e:4e:99:b6:95:3d:57:04:ed:7a:bd:2b:
         e1:e9:7d:35:7d:19:52:10:cf:3e:d8:59:c5:9f:a4:69:e3:b5:
         49:ce:46:24:58:83:f1:eb:73:a6:1d:b9:00:de:3d:07:51:9e:
         47:4f:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:38:54 2026 by rpki-client