Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
File:                     v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json)
Hash identifier:          EMSxI9qObDfMNShS9gPDO08G3wTgZaW8tBTlxTqAlow=
Subject key identifier:   91:56:66:87:5D:3A:99:6B:43:99:83:F3:4B:1D:92:9A:D4:AE:D7:54
Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
Certificate issuer:       /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Certificate serial:       0B60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
Manifest number:          0B3A
Signing time:             Wed 22 Jul 2026 19:38:00 +0000
Manifest this update:     Wed 22 Jul 2026 19:38:00 +0000
Manifest next update:     Wed 29 Jul 2026 19:38:00 +0000
Files and hashes:         1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: BMN0HtIJwZTRuHtBIm1Dv0wP3DPjeDn/MoijZz/osRw=)
                          2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: XwrzlM0letqZh+/RvWS8GdyBop29NFs5TR8e33g5dvY=)
                          3: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: 7AD0EtO6OgTcq7iPrxEzW9VN1IAYjbMxwXVENNdHRmk=)
                          4: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: eo+fVmREjn0E/C8IX23s1pespE6vPSqglnEAEQntZB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
                          rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2912 (0xb60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
        Validity
            Not Before: Jul 22 19:38:00 2026 GMT
            Not After : Jul 29 19:38:00 2026 GMT
        Subject: CN=6a611c18-7fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:64:ef:3d:f7:e3:15:ea:50:9d:0e:a8:cb:
                    96:14:e8:f4:db:da:e5:55:b7:27:dc:88:9c:03:40:
                    8d:9b:ec:83:81:eb:3f:87:09:78:7e:f4:88:eb:20:
                    69:61:18:60:52:36:d1:f3:31:a4:a0:5c:42:60:70:
                    af:18:67:66:d9:6b:35:93:c4:66:de:73:cb:a1:01:
                    86:3c:63:3a:9d:9e:a7:fd:63:4a:14:d5:a8:4c:53:
                    33:2f:95:25:33:9a:88:52:a0:03:21:73:a0:40:d0:
                    6d:a3:05:3c:f1:fb:dc:54:b1:50:2f:36:bd:25:48:
                    44:66:11:df:4c:2b:31:f5:3d:6a:f4:05:aa:56:83:
                    23:12:fc:de:55:12:45:8a:8c:85:cd:c4:15:b8:57:
                    f0:be:3d:ca:fd:ba:a9:87:b3:45:4a:05:9e:18:76:
                    ce:2c:71:67:32:9d:a3:98:86:6c:7a:87:06:84:5f:
                    47:8c:8a:c9:63:08:fd:85:af:ea:eb:eb:75:a6:f9:
                    e2:25:a0:04:df:cb:25:a4:ba:05:d8:eb:70:40:5e:
                    f1:9e:d1:a6:26:33:3f:3c:ee:87:25:ba:19:31:be:
                    a9:7c:b3:81:99:30:58:33:44:fd:bf:1f:4d:a9:cc:
                    00:97:54:1d:42:59:5d:c4:2f:c6:c2:5a:9a:6b:f4:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:56:66:87:5D:3A:99:6B:43:99:83:F3:4B:1D:92:9A:D4:AE:D7:54
            X509v3 Authority Key Identifier:
                keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7a:1f:db:d4:96:be:bd:24:24:27:53:c1:6f:ea:29:00:1e:
         b7:63:01:d5:85:87:f0:f5:ba:3a:b7:b7:e5:65:73:12:b2:19:
         93:2f:e6:52:37:81:53:16:8f:24:c8:d6:4f:73:ff:b1:fd:df:
         1c:35:00:b1:16:ef:48:3b:d4:a4:71:c9:90:93:30:7a:a0:20:
         cd:51:4a:8c:9c:10:00:fe:56:f3:89:56:48:a5:fd:79:3b:9d:
         5e:1c:00:e6:3a:81:30:14:50:8d:57:f7:a9:f5:39:c9:ee:fd:
         83:75:d2:36:b5:e2:d9:0b:48:5d:97:d3:f1:68:80:33:0d:44:
         4c:ff:7a:af:5b:54:e8:8f:b6:44:b4:ac:9c:9e:04:ca:2a:b1:
         37:1a:0d:5e:e8:d8:c8:9c:4b:ce:b1:89:4e:67:f0:f8:24:b5:
         0f:ba:86:22:fb:e6:5e:4d:ed:21:3e:e4:b8:2d:7d:cf:97:7c:
         a2:d6:40:09:a5:08:db:d3:c5:61:0d:87:86:4d:84:c7:32:7a:
         1b:d3:ce:2c:c2:4e:11:36:e7:dc:c4:32:11:d2:ef:ab:a7:5e:
         d6:4d:55:2b:cb:78:07:6e:93:9f:98:e9:d8:00:b1:f5:ef:5c:
         c8:8c:f4:b7:49:be:3e:16:fd:fa:60:09:9a:29:b3:05:07:4e:
         ee:a5:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:29 2026 by rpki-client