Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File:                     r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier:          ZdoH3MCxz7RdYvEScYprs1lIqcyl3xc1Y2dGyBaLH08=
Subject key identifier:   A3:4B:49:FA:FC:B5:F3:CC:CD:9F:C3:9B:2A:F0:12:72:7D:89:10:A5
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer:       /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number:          0851
Signing time:             Wed 22 Jul 2026 16:00:07 +0000
Manifest this update:     Wed 22 Jul 2026 16:00:06 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:06 +0000
Files and hashes:         1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: FFA2kyAzn+xXptB7YLu6S05Km8PbqJ8EzIdhBzI5COg=)
                          2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: zMVM5XvHUSFuCWzCvYIz2LcqG9igaxxQSY0E3/h4FG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
        Validity
            Not Before: Jul 22 16:00:06 2026 GMT
            Not After : Jul 29 16:00:06 2026 GMT
        Subject: CN=6a60e907-00e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:27:cc:15:7f:be:69:cb:29:c8:7e:5f:9d:
                    81:3c:09:06:e7:fa:49:7f:6c:0d:41:68:72:1e:6d:
                    20:71:83:36:76:c9:6e:ee:02:d6:93:d5:e8:e0:e6:
                    84:f4:b8:1d:0c:a9:29:ec:7e:d0:9a:16:9c:4f:5e:
                    94:de:5d:88:80:78:5d:85:56:bb:7f:b4:51:81:d5:
                    21:28:68:f7:fb:c6:3b:19:ab:0e:63:cc:00:70:4d:
                    b2:73:d0:4e:fc:4e:12:a2:0d:7e:ea:a1:44:78:63:
                    7a:a7:c2:db:f1:a0:2a:68:c6:2a:28:f8:33:36:4f:
                    19:a4:6a:c5:3d:a2:76:f6:f3:fe:64:52:82:45:18:
                    d0:46:3c:38:d7:e4:78:e0:11:cd:17:68:74:79:48:
                    cd:0a:b9:6c:89:d3:b3:ea:6c:de:28:ef:3e:71:84:
                    f7:f1:a2:d2:60:2f:f6:ca:6b:1f:95:01:6b:31:de:
                    bc:f9:18:2b:c6:23:ef:de:64:1c:f8:17:74:91:b4:
                    18:f8:d2:1e:61:8a:59:ce:2d:ea:33:ee:3f:7d:97:
                    0c:0e:26:7a:a7:ff:06:3c:9f:a9:8b:d8:f3:12:29:
                    f7:83:a2:c1:37:07:07:3d:76:ad:53:90:e5:88:1f:
                    cb:b7:71:82:6f:39:09:d7:19:45:33:4f:f4:82:df:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4B:49:FA:FC:B5:F3:CC:CD:9F:C3:9B:2A:F0:12:72:7D:89:10:A5
            X509v3 Authority Key Identifier:
                keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:22:e0:a7:22:7a:1c:fa:63:27:59:95:ec:e8:b5:7f:49:
         04:aa:61:69:7e:50:a9:a6:f1:62:31:60:74:1b:aa:34:1f:f2:
         14:5a:44:b7:47:f7:99:fd:6a:69:29:89:84:4f:af:d8:99:9c:
         f0:7a:cc:4c:15:7a:0a:ed:64:ee:8f:32:91:5c:da:c9:d1:23:
         98:3f:94:b7:fc:24:a2:41:6e:1a:3a:18:1b:51:8c:05:0e:2d:
         80:5b:30:16:a7:3d:90:ae:3f:fb:26:7e:11:d7:f0:38:4e:64:
         dc:a1:87:fc:af:5c:8f:e8:11:42:4e:d4:04:d3:59:43:7b:e0:
         29:c3:5b:91:80:33:a0:2f:8c:f9:3c:12:5e:7a:03:21:f0:81:
         c9:74:48:78:45:d0:9e:b8:11:06:59:5f:0e:77:26:6e:97:13:
         21:76:98:11:0e:26:b7:7d:1f:6a:c9:97:d1:3c:86:c8:8f:c3:
         20:a0:f7:00:ed:9b:70:ad:78:39:c1:97:5d:cd:dd:62:e1:3c:
         18:8b:3a:1c:59:b3:a1:01:d3:41:9f:f5:a1:fc:cb:a3:7a:27:
         ea:0a:0d:ac:82:9f:37:7b:6f:88:2f:aa:dd:6f:d0:71:27:27:
         4a:eb:c1:f9:7a:9f:e7:85:9f:3c:38:18:94:7d:85:a3:3c:93:
         e9:84:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:07 2026 by rpki-client