Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
File:                     0ewZe9sNlRk40e71SWoRrMoCiO8.mft (raw, json)
Hash identifier:          jGt56ee3f0JokwaMUoZxOR9ZN6kYNl0ZnIOtzYyUUvc=
Subject key identifier:   B1:DE:6A:8B:57:A5:E2:F9:67:7C:2D:FB:DB:EA:AF:46:8E:23:D4:4B
Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
Certificate issuer:       /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
Manifest number:          BC
Signing time:             Mon 27 Jul 2026 09:08:57 +0000
Manifest this update:     Mon 27 Jul 2026 09:08:57 +0000
Manifest next update:     Mon 03 Aug 2026 09:08:57 +0000
Files and hashes:         1: 0ewZe9sNlRk40e71SWoRrMoCiO8.crl (hash: NPoZeBJNLP1pu4ON6NFOXYuwaTk+aZbAKF9E7lCmybg=)
                          2: ACFE803469E911F0A7D42F68C4F9AE02.roa (hash: +DP6MilESaiHYhOyYqOuZcz5QFs57aj6iwKoYbBinoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
                          rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
        Validity
            Not Before: Jul 27 09:08:57 2026 GMT
            Not After : Aug  3 09:08:57 2026 GMT
        Subject: CN=6a672029-3569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:d6:8a:40:14:9a:f0:cb:aa:58:c5:08:13:
                    dc:e7:a5:56:90:51:11:16:b1:84:99:68:ce:01:27:
                    b5:ed:06:78:e9:27:5a:01:5f:6d:40:92:63:fe:4b:
                    60:16:e2:67:fc:db:99:48:d1:b2:56:d9:6d:f7:d5:
                    13:39:3e:0b:0d:31:c7:65:8c:ed:f5:d4:97:84:dc:
                    e5:6d:4f:a5:87:0f:cd:f8:fe:c9:b8:1a:a1:0b:c4:
                    ab:42:a7:5b:92:a3:e6:2f:46:08:b5:a1:f5:c8:53:
                    35:da:81:f7:f4:17:8f:03:31:84:2c:4d:63:87:9d:
                    e3:9d:3f:9f:48:72:0c:9b:df:47:a8:bc:c1:3c:a9:
                    9d:2b:46:a2:a2:93:1f:db:cf:69:6b:ea:c6:14:7c:
                    d6:d8:41:dc:9b:e4:ac:bb:9d:42:09:23:a2:c0:cb:
                    14:96:4b:a0:a3:17:4f:88:58:a7:97:d8:14:9e:58:
                    46:55:fd:f7:87:ce:49:15:90:9d:b1:ca:4b:ad:00:
                    aa:b0:41:a3:2d:b9:a8:2e:9e:63:3e:d8:8c:d0:47:
                    7c:03:97:cb:5c:5b:7e:b0:94:18:92:50:45:93:ce:
                    d1:11:d6:f0:c2:c6:58:95:2c:01:63:da:be:a8:6a:
                    5f:26:68:86:dc:bd:d3:1e:2b:c7:49:2a:01:da:03:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DE:6A:8B:57:A5:E2:F9:67:7C:2D:FB:DB:EA:AF:46:8E:23:D4:4B
            X509v3 Authority Key Identifier:
                keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:2b:ff:9d:28:13:68:e2:a9:03:c5:26:cf:81:d2:c6:e9:
         31:f2:c5:8b:46:8d:fa:0f:d0:a6:38:84:9c:6b:cd:71:d4:1e:
         75:7e:de:a6:75:b3:16:3b:da:13:bb:d4:49:d8:72:92:29:5f:
         0a:d8:15:a0:dc:c8:81:a0:1c:cb:ac:8f:16:0f:24:c1:12:fe:
         bf:ca:7d:fe:1b:c4:c5:0c:1a:9f:d1:f2:63:bb:0a:b6:d1:bd:
         a4:05:85:79:97:79:fd:d2:e1:db:01:60:bf:87:fe:dd:69:1b:
         72:ee:6b:29:01:b9:05:21:13:14:4f:05:06:10:09:d2:6a:96:
         88:40:f4:e0:8e:9d:9c:2f:c0:21:bb:26:89:24:cf:7a:49:0d:
         4c:44:1f:6f:d5:cf:2c:b5:57:3a:6c:41:c8:7d:14:e2:82:1a:
         47:6b:23:06:2c:0a:b9:68:38:83:aa:1a:6d:ba:b9:19:b3:0f:
         70:4e:c8:82:ea:1d:b0:b5:23:0d:2e:a9:f8:07:ad:a4:e2:a5:
         60:9a:ea:8f:80:3b:28:2b:4f:e9:d4:6d:c3:d9:4a:ff:2e:f6:
         11:a1:f4:2a:6d:7b:4f:53:3b:fd:da:96:17:f5:4e:d4:0a:54:
         9e:6d:7a:fd:b8:e8:ac:08:ac:51:a1:3f:ca:1d:3f:61:10:d2:
         f7:a4:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:02 2026 by rpki-client