Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
File:                     r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json)
Hash identifier:          tDQDN4OE0uomiJ6Q+GfftS7hmFegVaOSNve7wYXml80=
Subject key identifier:   D8:56:03:77:D1:51:3C:F4:6E:4A:2D:32:BE:F1:11:5E:DE:D8:90:59
Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48
Certificate issuer:       /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
Certificate serial:       0816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
Manifest number:          080E
Signing time:             Tue 28 Jul 2026 21:38:57 +0000
Manifest this update:     Tue 28 Jul 2026 21:38:56 +0000
Manifest next update:     Tue 04 Aug 2026 21:38:56 +0000
Files and hashes:         1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: R60PUsjiwkXgTSY7ZmfbyJ/29Y+hCCDss371/9Sh3JQ=)
                          2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: s+Jl83N9Gae1QXY9bBMMTJJz80QnAkoP6fzOKwbkryc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl
                          rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
        Validity
            Not Before: Jul 28 21:38:56 2026 GMT
            Not After : Aug  4 21:38:56 2026 GMT
        Subject: CN=6a692171-c5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:84:5d:b0:bd:7d:f6:07:3c:8e:3e:13:13:
                    94:6f:58:d4:80:96:98:0a:a9:17:04:20:f5:83:f7:
                    77:d5:de:e3:ca:01:ee:66:4d:55:ac:52:8f:46:5f:
                    e2:8a:dc:81:0a:94:df:6a:8b:83:d3:08:1e:47:40:
                    ec:67:7d:e5:02:ad:6c:a2:1e:23:d1:c5:35:aa:a1:
                    f3:8f:52:31:f3:72:fe:9e:1f:47:62:b5:c5:d3:1d:
                    dd:6f:42:19:19:cc:f3:56:28:7e:76:85:37:11:bb:
                    ee:f0:eb:8d:64:af:ce:3e:d6:6f:25:ca:ff:5c:fa:
                    10:e4:c4:a0:db:4a:36:3f:13:ec:4d:cf:2f:b4:16:
                    23:c4:d5:b8:be:0d:ca:66:e3:67:6b:e6:a7:a8:74:
                    37:23:ab:1b:c9:16:ba:cd:2c:af:6a:7a:52:9c:3a:
                    f6:35:f1:3d:d8:25:58:e5:41:13:5d:db:bb:54:74:
                    e4:db:b2:a0:48:7e:ed:6b:13:c7:25:a9:4f:bf:9a:
                    b3:6b:67:9d:38:67:fc:ed:94:eb:d8:28:bf:07:6b:
                    b4:1a:55:88:c3:8e:a2:de:7d:0e:f3:d9:a2:84:04:
                    67:d2:9f:1b:1b:b0:d4:29:7f:18:6a:c4:d3:ae:23:
                    85:fe:58:23:a7:81:2b:42:ab:81:5b:46:e8:90:38:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:56:03:77:D1:51:3C:F4:6E:4A:2D:32:BE:F1:11:5E:DE:D8:90:59
            X509v3 Authority Key Identifier:
                keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:c6:07:41:ac:9b:f2:28:e0:ea:62:96:43:77:13:5f:42:df:
         7a:e0:3f:67:b6:ea:1b:38:1d:8c:64:a0:52:2b:aa:ab:ca:5f:
         55:80:27:12:5c:e6:d2:71:f8:f4:0d:b7:dd:90:dc:4e:a3:2e:
         dc:30:39:15:64:9a:0b:63:33:0c:17:f3:09:cb:73:a4:c9:cf:
         47:54:96:a8:20:f9:57:0f:2a:30:9b:b8:fd:83:74:0b:73:44:
         7c:bb:73:84:b3:71:21:cb:85:7d:e3:63:c1:eb:8f:c2:ef:ad:
         01:d9:62:79:93:c0:9c:1e:e4:61:45:a3:d4:21:b0:e7:56:22:
         ea:26:e2:a0:71:8c:0a:c9:a6:21:e6:20:c4:73:b7:6a:ff:56:
         9d:5b:f1:13:7d:16:16:73:5e:1b:5c:e1:75:bd:82:22:9d:2e:
         3f:86:ed:a4:9f:e0:35:25:99:99:22:ef:dd:25:cb:a1:cd:43:
         ba:ae:4d:fe:b7:8f:8f:52:61:af:72:e0:42:40:f1:b7:1c:7b:
         0a:d2:9e:81:4f:76:35:0c:a3:e2:26:27:4f:8a:ea:96:1f:49:
         98:ce:7c:38:7d:2c:6a:84:df:52:0d:cc:4a:12:7b:1a:0e:eb:
         16:a8:37:2a:08:32:0c:e3:a9:44:69:51:95:3f:96:df:80:f3:
         61:ee:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:34 2026 by rpki-client