Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
File:                     D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json)
Hash identifier:          AhflKKVq2GclodIbAE1znVLOG41psY9EeiOmqU+tTpk=
Subject key identifier:   F9:2F:A0:A7:0B:B0:38:93:99:89:66:58:B4:45:84:88:5B:C9:1C:60
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Certificate issuer:       /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
Manifest number:          0137
Signing time:             Thu 23 Jul 2026 07:11:52 +0000
Manifest this update:     Thu 23 Jul 2026 07:11:52 +0000
Manifest next update:     Thu 30 Jul 2026 07:11:52 +0000
Files and hashes:         1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: /yG2tJ34PoZBbzSyRcpdD+MSl3yoqe8i+xNfD6suSqs=)
                          2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
                          rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
        Validity
            Not Before: Jul 23 07:11:52 2026 GMT
            Not After : Jul 30 07:11:52 2026 GMT
        Subject: CN=6a61beb8-b594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:01:cf:2d:f7:4d:ce:e2:12:e2:b7:6f:fb:
                    ff:e9:29:74:d5:2c:8a:0c:b5:8c:95:3e:3b:4d:ad:
                    36:f7:7a:84:18:63:46:2f:2f:d3:94:25:8e:4c:36:
                    8f:51:08:d5:2b:48:82:f6:9b:43:db:7a:78:50:0d:
                    61:0d:05:9a:bc:2e:80:e5:f3:39:b4:fc:0d:e8:b2:
                    d5:94:3d:83:98:90:b6:62:d4:33:1b:f3:68:0d:84:
                    7d:13:ae:b6:cb:2f:f9:6f:ed:44:3f:f1:7a:7e:e1:
                    e2:56:b2:56:36:01:a1:71:f6:f0:71:9a:11:73:23:
                    22:fa:65:ff:55:7f:61:10:cf:35:71:62:ff:31:ba:
                    12:41:f1:f8:47:88:d8:af:74:e5:af:d3:ff:18:94:
                    df:16:b7:f5:02:e5:7b:c3:8c:f8:33:23:32:a2:06:
                    85:d8:a2:d5:f7:e4:e1:ec:a6:1d:48:4c:b5:1e:47:
                    a0:14:44:b9:5d:0b:14:06:3e:1a:37:64:11:08:8a:
                    8d:fc:45:74:90:84:a7:fb:3c:5a:cc:50:60:58:6e:
                    bb:05:4d:73:19:93:d1:d6:6a:20:ef:84:55:19:09:
                    45:5d:1c:17:e1:35:72:52:1a:8f:db:6b:61:8f:cc:
                    f7:97:90:4d:08:12:3f:a0:cd:4b:92:1f:76:0f:42:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:A0:A7:0B:B0:38:93:99:89:66:58:B4:45:84:88:5B:C9:1C:60
            X509v3 Authority Key Identifier:
                keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d9:d4:bd:85:a1:6f:50:2b:ad:68:6a:89:f6:0e:dc:f1:2c:
         61:83:b4:07:bd:7c:e3:c2:d2:ef:a9:ce:c4:86:9a:1d:f5:75:
         fb:3d:6e:34:d8:38:51:06:53:60:ba:a4:04:01:f9:50:55:05:
         15:0f:39:dd:8b:71:c6:b6:29:b0:4a:e5:04:98:a5:b8:db:dc:
         de:ce:58:b8:fb:0a:c4:17:68:b2:bb:57:34:0c:b1:01:5d:8a:
         8b:a2:8a:0e:3d:b3:c0:60:98:dc:f5:d8:c0:2c:62:19:77:40:
         aa:d5:00:d0:2c:9b:04:c9:2e:44:70:34:fb:94:f4:32:c4:6d:
         aa:c9:c3:06:0f:92:00:6d:25:2d:aa:79:28:65:ac:0c:3a:66:
         e3:a8:94:d0:62:cb:39:62:fe:b3:82:b1:fc:fd:71:2e:fb:b9:
         1e:9b:73:a0:63:4c:0c:dd:58:6e:f1:da:14:b6:ff:60:49:2d:
         49:3b:7b:17:70:c0:76:dc:91:64:2a:a7:a2:db:06:ed:c2:b9:
         da:ff:02:cc:30:bf:78:53:25:87:e1:a3:ff:69:fe:f3:54:fb:
         be:3a:e4:f1:c7:c3:35:83:7f:ce:6a:36:72:5a:52:1e:16:28:
         85:72:56:60:0b:0e:7e:d7:ad:49:b6:9c:df:4e:82:95:18:c9:
         31:52:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:34 2026 by rpki-client