Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
File:                     0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json)
Hash identifier:          aHSjR9vh6smuEfsd7S0f+KLvLzcf+1LvNfQ1oDXXQOA=
Subject key identifier:   B1:7E:F7:DF:D9:64:05:6B:54:10:7B:3D:F9:57:B9:50:8D:70:BB:FF
Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
Certificate issuer:       /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Certificate serial:       0B91
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
Manifest number:          0B8D
Signing time:             Fri 24 Jul 2026 16:44:50 +0000
Manifest this update:     Fri 24 Jul 2026 16:44:49 +0000
Manifest next update:     Fri 31 Jul 2026 16:44:49 +0000
Files and hashes:         1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: St1pU0QYZDOcoLiI+rV9GlhkzcrRw6bOwlUxzt7YUkU=)
                          2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: EesMUM6OTKAdEg0mYRmy7VycLGp32k1mGYc0u42kdzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
                          rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
        Validity
            Not Before: Jul 24 16:44:49 2026 GMT
            Not After : Jul 31 16:44:49 2026 GMT
        Subject: CN=6a639681-add2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:f8:54:80:be:a5:50:f8:ec:61:26:0d:e3:
                    c0:8c:7e:f7:34:db:ad:18:1c:94:27:fc:34:0a:80:
                    51:0d:91:53:96:ac:e3:38:d0:0b:7c:be:f0:24:4e:
                    a7:45:61:8a:8d:ca:b4:2f:7e:43:65:24:9c:9c:a9:
                    ce:f2:a0:f2:d3:62:9b:96:0e:2d:1d:e1:65:f6:b3:
                    8c:db:4c:6b:6d:a1:8c:a2:f6:21:bf:ce:70:90:ce:
                    0a:98:5c:ff:99:33:7f:3f:6b:ea:5e:8a:45:83:d5:
                    1e:5c:00:a9:52:19:df:c0:5b:0e:a7:96:b1:96:41:
                    13:38:82:55:ef:a4:d2:59:58:90:97:f7:f0:b5:42:
                    48:a5:3b:f5:f0:bc:1d:79:5d:14:6a:9f:2c:8f:cd:
                    62:ba:24:06:16:7f:a9:2e:01:e8:1d:1d:9f:6d:5a:
                    c9:f1:d8:88:23:5c:ae:ee:b2:16:c5:7e:47:21:d1:
                    df:d7:e6:d1:34:8a:ca:20:3b:a1:1d:26:4f:84:63:
                    3b:cf:fa:1a:e1:4d:36:f0:cd:a7:db:6f:bb:7e:66:
                    18:ff:27:53:25:d0:91:8b:51:ab:e0:35:5b:29:0e:
                    89:7a:9d:02:d5:72:37:4b:26:6c:e7:e0:fb:2e:17:
                    37:03:86:c6:92:d9:da:98:aa:68:23:ed:58:f8:2a:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7E:F7:DF:D9:64:05:6B:54:10:7B:3D:F9:57:B9:50:8D:70:BB:FF
            X509v3 Authority Key Identifier:
                keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:4f:60:f0:df:1d:df:8a:c8:1e:94:23:f1:a1:43:64:d8:
         00:3d:d3:80:0f:3f:82:0d:5e:4b:92:62:87:d2:c4:17:0b:4e:
         29:63:e9:22:e0:8e:ec:d7:e4:f0:9d:d8:a9:bd:6d:a1:31:d4:
         92:2a:4f:d1:3f:c8:e5:1b:b3:1e:6e:da:ca:8d:c7:9e:82:88:
         e1:e1:a5:d9:29:82:27:8c:42:f8:0c:f6:9a:1f:f7:7c:61:0d:
         4d:fb:9a:40:38:7d:96:e3:af:42:67:3b:1f:24:26:4d:b2:61:
         b9:e5:ed:79:f4:22:fc:d3:df:16:9d:59:75:6a:96:da:10:b1:
         4e:f9:61:94:fa:99:e6:37:b3:c6:7c:2f:3b:ac:7d:34:b0:a2:
         75:10:1c:8c:d8:29:a6:31:12:ae:7e:cd:4b:7f:e9:88:a8:3e:
         2c:5a:7d:3d:d3:e1:69:cf:a6:68:c6:d6:64:b1:45:cd:0e:80:
         6a:e1:42:b9:99:e4:19:e7:dd:60:72:fa:73:59:4b:68:71:25:
         4f:93:be:e2:99:f6:fe:68:3f:91:0c:14:3e:c8:f9:51:6c:82:
         bd:5b:c5:c3:23:21:04:1a:d0:11:b1:fe:2c:32:26:55:bb:1c:
         23:1e:8c:0f:20:92:a3:0d:a6:40:c1:13:2f:32:89:7f:2c:04:
         a3:4c:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:09:27 2026 by rpki-client