Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
File:                     fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json)
Hash identifier:          xvQBDM4yBEsQoZNwZosM+kg7weGWCU8rA6NbNi0r7qQ=
Subject key identifier:   7B:58:4D:82:0E:7B:03:ED:0A:59:02:75:FE:54:81:94:40:9F:DF:3F
Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
Certificate issuer:       /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
Manifest number:          01BA
Signing time:             Thu 23 Jul 2026 05:15:21 +0000
Manifest this update:     Thu 23 Jul 2026 05:15:21 +0000
Manifest next update:     Thu 30 Jul 2026 05:15:21 +0000
Files and hashes:         1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: 62knplMglsllmKwH2Ecy7frP1emdQcJ6jolLcfeLjM8=)
                          2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: jCjUHPVQsJaqVu7vufX+mmPVYe7rI/psWHiQFh1SNOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
                          rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
        Validity
            Not Before: Jul 23 05:15:21 2026 GMT
            Not After : Jul 30 05:15:21 2026 GMT
        Subject: CN=6a61a369-de38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:36:c6:0b:26:59:e8:fe:18:65:ee:4f:55:
                    8a:cc:6e:f8:07:fd:4e:7f:7f:94:fb:0d:28:f3:91:
                    e2:84:73:4d:21:4d:b6:d2:35:5d:eb:49:31:49:10:
                    ee:5b:b1:b9:08:d4:10:b3:27:2f:15:c4:3c:cb:5c:
                    b5:7b:c7:5b:1f:51:e3:63:f9:71:5e:25:67:cd:24:
                    be:70:53:7e:54:ba:85:e7:52:3a:b5:c4:0d:39:3b:
                    25:0f:2e:fc:09:14:38:f9:49:2b:19:10:d7:8c:69:
                    c5:c1:0e:a1:e8:73:f5:eb:61:bc:a2:67:f5:82:36:
                    01:9b:cc:ec:96:2e:de:15:39:ac:13:5a:0c:66:fd:
                    0f:51:3c:48:73:cd:af:d6:f1:47:6f:04:90:aa:40:
                    0e:07:19:df:7e:85:2d:bc:a8:c7:90:db:fe:fd:eb:
                    f9:88:fd:6c:96:37:5c:cc:7c:dd:59:5e:67:13:14:
                    9d:55:4f:04:bc:df:f4:63:fa:55:98:01:29:32:6d:
                    18:13:a5:40:da:67:95:ce:98:04:9f:48:66:50:88:
                    02:ef:52:3c:2d:ea:72:c1:90:2b:3c:cb:e7:3f:84:
                    df:ae:a9:d5:4e:c7:c1:b8:dc:0a:08:f9:c0:e2:87:
                    8a:9f:a8:01:23:37:41:48:25:22:c9:d7:8a:a6:fc:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:58:4D:82:0E:7B:03:ED:0A:59:02:75:FE:54:81:94:40:9F:DF:3F
            X509v3 Authority Key Identifier:
                keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:de:b7:9b:8e:d4:20:54:43:12:b2:1e:81:6a:28:88:f0:df:
         69:3c:2c:e8:58:fe:8b:96:3c:5d:8c:de:6c:cd:d0:63:2c:39:
         13:ea:e5:70:6d:a0:05:70:08:6f:43:61:42:d0:3a:94:85:f0:
         e2:7f:bc:8a:32:64:61:8f:5b:28:82:cb:41:9f:3b:ca:f5:17:
         03:4e:70:fa:8c:53:b3:81:ce:df:e9:12:f9:ad:38:6e:9f:ce:
         5c:1d:08:52:55:f3:73:cd:39:c6:d9:41:d5:04:f2:39:94:c3:
         8e:13:5e:b3:09:33:18:68:81:3b:73:c1:3d:2e:ba:9e:9b:b5:
         8b:11:80:ad:53:60:ee:66:61:00:78:8c:88:a8:ed:6e:0a:ce:
         19:66:3e:b6:7b:2e:4d:81:e2:80:4c:e6:a2:3b:9a:1a:03:04:
         ff:13:e3:13:3d:87:7e:d2:27:d6:b6:a4:1a:18:4c:e9:db:70:
         47:03:cb:9b:2d:d1:bd:ae:9c:72:91:c8:f9:8c:44:d0:90:4a:
         15:69:8a:8d:8b:37:49:80:7f:6d:95:4d:51:94:7d:40:47:00:
         34:3b:2e:43:71:99:1a:8b:85:60:ed:6f:9a:ea:b8:67:83:1c:
         a7:ac:54:26:48:2d:24:18:39:65:d8:74:7d:56:d6:ed:2e:f6:
         32:bf:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:34 2026 by rpki-client