Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File:                     9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier:          yX+0umeVT4wbO2cClT6Apas1IX4c+hd3LJnLXG0PlYQ=
Subject key identifier:   E4:C4:1A:D5:15:6B:6A:EF:90:D9:8F:4C:4E:4B:CC:08:00:80:CF:53
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number:          02C1
Signing time:             Thu 23 Jul 2026 02:28:03 +0000
Manifest this update:     Thu 23 Jul 2026 02:28:03 +0000
Manifest next update:     Thu 30 Jul 2026 02:28:03 +0000
Files and hashes:         1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: 9r8dbUvjnbNmVJ8pe2h/DT3WjANz1o80nRTvJt23RHg=)
                          2: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: k4ktbvDzNMFlZcj8AA2wIV1+SLib12XIvSfJT6zbmGg=)
                          3: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: BaPq5hdUUw6M/UYNr2TfdFGU9d7sgsjjuYBYSErSa0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Jul 23 02:28:03 2026 GMT
            Not After : Jul 30 02:28:03 2026 GMT
        Subject: CN=6a617c33-d0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:58:6d:45:72:a2:cc:d0:55:e9:ea:ba:1a:
                    fa:17:8c:f5:8d:a5:4f:95:12:7b:f0:7a:96:03:b4:
                    7c:c5:f9:7e:30:36:d6:fb:7a:3a:7c:be:52:82:22:
                    cb:3f:bd:a3:99:a8:f5:22:5f:f0:c1:b4:35:39:8a:
                    cd:16:7f:ef:31:9c:70:5f:db:6e:ca:a2:b7:72:47:
                    eb:38:30:d2:d9:e8:f2:f8:14:c5:ef:a0:85:56:52:
                    2d:e2:26:54:18:1d:21:a5:3f:b4:8a:03:a6:13:19:
                    41:b6:58:4d:22:67:1b:99:e1:41:51:35:60:d2:5c:
                    83:f0:93:27:76:10:0c:1f:5d:2a:4f:ce:2a:b6:5a:
                    6c:83:b9:17:a9:06:72:26:28:dc:13:4e:74:8e:4b:
                    d0:6a:45:af:4e:23:f1:dc:81:53:29:40:ae:d4:72:
                    76:0b:01:4f:3a:8c:52:60:0c:b5:c3:16:32:56:35:
                    ec:c2:22:4a:ef:dc:11:87:4f:b9:30:1e:84:95:5a:
                    16:4f:0b:a5:1c:02:2a:85:ed:72:ff:49:86:e3:4a:
                    25:e5:5f:bd:6a:d6:5b:f6:f7:58:69:11:44:76:78:
                    20:61:1a:ab:29:39:ed:6e:9b:88:c9:15:00:1e:95:
                    7a:be:12:8b:a8:92:31:07:ef:a4:43:60:a3:dc:09:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:1A:D5:15:6B:6A:EF:90:D9:8F:4C:4E:4B:CC:08:00:80:CF:53
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a6:7d:9e:6c:6e:81:10:d9:f7:39:e8:e2:ff:b5:d5:eb:2c:
         60:e2:13:ac:7b:2c:a5:3e:f1:1b:4a:73:c1:d1:b5:28:57:f6:
         13:84:4d:eb:3f:1b:e9:89:07:f2:30:dc:19:f1:f9:12:c1:7f:
         28:3f:46:e0:1a:e8:04:3e:4f:cc:ac:ce:02:3c:f9:f4:36:81:
         88:fc:e3:f6:a7:39:52:79:74:45:d7:23:0e:c4:6c:f0:17:b7:
         16:ba:37:65:6d:67:2d:01:9a:14:89:32:91:7e:e6:c2:f0:5d:
         08:55:48:33:14:0a:59:23:dc:b2:a6:d0:0e:76:3c:74:6d:36:
         16:34:21:c8:f4:26:45:9c:34:ca:b6:81:60:d4:da:df:ca:c8:
         bc:39:1a:da:5e:b3:52:d9:77:fb:74:69:19:a1:62:bd:bf:25:
         ea:e6:4e:45:89:f3:43:ea:ee:fd:a3:d6:7b:12:5f:93:75:75:
         47:fa:09:f4:92:e6:f7:0c:65:82:d1:3a:76:24:b1:b8:80:d3:
         5c:5d:d3:a1:79:66:a9:73:b1:a7:9f:e1:bb:70:88:97:72:69:
         0d:61:ec:2f:c0:58:4b:65:94:9d:a9:91:76:21:7f:c0:b9:83:
         7c:d0:08:4d:b0:d2:72:3b:3e:27:07:bd:1f:c9:11:0d:e8:e2:
         b1:66:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:16:47 2026 by rpki-client