Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File:                     fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier:          YTp3+tdqvMcMq1bURYZB1+tSUXKTusCKtLOObTT808s=
Subject key identifier:   4C:EC:A7:45:32:30:9D:D6:43:57:2C:1C:91:62:70:70:56:34:51:09
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer:       /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial:       06CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number:          06C4
Signing time:             Wed 22 Jul 2026 23:00:48 +0000
Manifest this update:     Wed 22 Jul 2026 23:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:48 +0000
Files and hashes:         1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: vmCUGVkL7elPAAHG/3BQnoLNFpo47uhYBnIv8ePgnc4=)
                          2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: BveT190IYa4IZx/c6x7to7FKf5iRH7eeNb+xgKFxkXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
                          rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
        Validity
            Not Before: Jul 22 23:00:48 2026 GMT
            Not After : Jul 29 23:00:48 2026 GMT
        Subject: CN=6a614ba0-9af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:e9:93:b5:ea:71:12:36:27:85:a3:5d:44:
                    34:d3:e0:7c:5a:9a:bc:e2:fd:2f:68:b8:80:40:35:
                    97:ba:29:92:44:89:05:10:2e:c3:09:0e:55:b1:15:
                    49:d7:7f:a2:f4:05:f9:8f:cb:dd:f9:06:63:59:ca:
                    82:e8:a6:36:5c:e7:eb:f5:3f:f0:e8:3d:5a:b2:6c:
                    4e:8c:1a:f7:d7:68:d7:4c:1c:ac:09:fa:df:91:d5:
                    e0:83:df:aa:14:27:e8:51:fc:3e:8b:b6:87:99:e5:
                    a9:a6:a7:1b:6b:09:e4:c0:c6:e8:80:bc:1f:10:f3:
                    b5:9f:a9:fe:5d:5c:a3:d7:b4:5b:be:e9:c5:b7:67:
                    0c:b0:cc:76:b0:8c:42:a1:af:61:32:10:4b:4b:0c:
                    9c:35:de:a9:39:44:a5:00:e7:1e:c2:25:d8:b4:d5:
                    51:d4:1e:b7:03:ac:4c:e8:5f:3e:d1:00:3d:40:46:
                    24:70:14:7a:d2:a3:14:c5:ad:a0:4a:af:25:ad:89:
                    d5:b8:2a:c1:2d:f9:8d:6e:aa:9c:b4:29:ec:85:b5:
                    ab:8a:36:c1:7d:56:11:c7:36:cc:eb:de:36:f6:ef:
                    c7:42:3f:6b:cb:88:56:6b:e1:8a:ee:aa:03:6a:46:
                    80:a2:97:65:be:67:ec:0e:3f:fe:a1:a7:27:6b:da:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EC:A7:45:32:30:9D:D6:43:57:2C:1C:91:62:70:70:56:34:51:09
            X509v3 Authority Key Identifier:
                keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:01:a8:ec:c8:dc:08:8c:9a:87:62:6e:07:60:9b:cf:e3:ff:
         35:de:ff:cd:79:df:fa:1a:65:6d:48:5e:27:db:50:24:ef:f9:
         87:3b:d1:c3:47:2a:6e:13:69:9c:18:e5:a0:60:c8:80:2c:87:
         53:2f:88:7a:d1:80:77:b9:0b:0a:36:f5:76:a0:7a:a5:5a:c4:
         ef:f6:3f:c6:9a:27:d6:ff:cb:8b:69:9d:c5:bc:3c:e2:90:32:
         6d:f2:91:5b:29:a6:5a:af:36:28:0f:94:57:56:e2:08:73:73:
         c1:99:41:b1:42:31:07:e4:12:b1:18:96:fb:a1:fb:6a:20:5e:
         29:b1:2a:c2:95:45:90:97:dd:15:fc:4c:f3:17:3f:6e:0a:6a:
         8a:7a:c7:99:d5:12:61:bd:60:d6:a8:66:de:6b:7f:e2:7f:ce:
         e3:5d:21:46:87:4f:1f:72:d6:ec:f9:8e:5e:77:14:2c:6e:a6:
         fb:88:0f:91:c2:01:81:37:5e:3c:2b:1d:4a:57:eb:84:f3:7a:
         10:9d:c7:d1:4f:09:8d:3f:32:08:2c:80:8c:10:8c:12:db:35:
         dc:39:d5:3a:13:07:f6:44:01:3b:f2:08:fe:81:e7:9f:d7:b6:
         ec:54:47:f8:ca:21:d1:e6:59:6f:a6:79:67:9c:ff:a8:42:23:
         bf:36:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:26 2026 by rpki-client