Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
File:                     pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json)
Hash identifier:          f9Ol4csRSebmeN7e0LysH1PqXd3DgyVkdQy/uZpoy00=
Subject key identifier:   6D:D6:28:BC:3B:27:5D:6A:0C:19:6C:0A:0E:94:82:09:4F:C7:FE:E4
Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
Certificate issuer:       /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Certificate serial:       0620
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
Manifest number:          0619
Signing time:             Wed 22 Jul 2026 23:32:06 +0000
Manifest this update:     Wed 22 Jul 2026 23:32:06 +0000
Manifest next update:     Wed 29 Jul 2026 23:32:06 +0000
Files and hashes:         1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: a4p5jUJI2/aKoTonFCtJ49wheD4xnmjZJb55wVuYoGo=)
                          2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: YDIYwh8IZsocldDrNfzej1ZrNQO57DlnoJZAAXQRlpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl
                          rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568 (0x620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
        Validity
            Not Before: Jul 22 23:32:06 2026 GMT
            Not After : Jul 29 23:32:06 2026 GMT
        Subject: CN=6a6152f6-8110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:19:8a:2c:c8:dd:eb:ed:f1:47:55:f5:ba:
                    ea:17:c8:b7:00:c7:c1:97:de:ff:94:3e:57:7b:bf:
                    6b:2c:03:42:82:1b:71:0f:af:88:54:4e:2e:dc:f7:
                    21:b3:0b:a8:5f:a1:61:f2:9f:02:01:55:1d:d1:7e:
                    a7:d7:96:97:7b:8a:a8:bf:1c:ec:ce:1d:9d:81:e6:
                    4b:d1:4e:e0:d6:4b:7e:f7:d1:94:62:76:ea:79:02:
                    4b:7e:ed:d5:d0:24:18:d1:e0:a5:99:25:f5:7d:24:
                    b9:84:71:9c:f8:2c:f1:5e:bf:9e:79:83:3c:05:37:
                    45:29:40:ab:5b:19:be:fe:67:a1:25:13:3b:b5:7f:
                    94:3e:2f:84:cf:cb:11:db:60:d7:2a:79:7c:e0:bb:
                    55:ca:7e:dc:73:b4:87:50:e2:42:11:e0:6e:1b:0c:
                    ff:4f:0d:20:c1:30:5a:68:e7:4f:21:b3:19:fa:6e:
                    7c:f5:af:fb:89:6a:da:ad:58:6f:96:7a:12:28:1e:
                    57:25:f9:ad:d1:ea:5b:69:15:ca:ad:7a:46:4f:32:
                    76:20:fa:ab:98:c4:f4:50:7b:3c:3e:40:38:12:68:
                    d6:59:0e:54:28:5c:b7:da:cd:70:ac:ed:f3:30:b7:
                    15:be:fc:35:b1:0b:eb:79:99:5e:33:37:ce:9a:39:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D6:28:BC:3B:27:5D:6A:0C:19:6C:0A:0E:94:82:09:4F:C7:FE:E4
            X509v3 Authority Key Identifier:
                keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c9:83:d6:cb:f6:93:ed:88:80:62:d0:a7:f5:25:c2:51:76:
         be:01:fb:98:db:b5:f9:6c:9e:65:18:77:bf:ca:10:e4:70:33:
         7b:f6:34:43:94:48:61:b4:e9:1c:a1:0d:4e:2f:94:48:f0:f9:
         42:a4:99:e2:4f:26:51:e2:10:19:84:8e:69:00:d5:bb:73:46:
         f1:6a:f8:54:68:db:5b:b5:6e:40:ed:07:dd:29:94:c5:06:b2:
         c7:aa:9c:d5:fc:3d:18:c8:19:86:8d:57:e8:58:20:4a:75:86:
         cd:f7:f8:d1:c5:c1:9f:1f:b5:15:05:ef:c7:b2:b5:97:3e:78:
         ba:c1:62:8f:75:0d:f8:8e:ac:fa:1b:b1:3c:a0:ea:1f:cf:b1:
         7d:a5:1e:49:90:bf:58:3e:08:39:6a:4b:c0:2f:b2:5a:c3:33:
         00:8b:54:bd:5c:cb:29:ca:95:af:f0:1a:4f:93:06:e6:a3:9a:
         27:60:c7:31:39:d0:2b:5a:01:2c:d5:e5:e8:71:d5:ea:da:83:
         06:d5:7c:6f:1b:79:f4:49:0d:6f:13:fa:c0:27:35:d2:28:11:
         4f:b6:b1:93:aa:ef:b6:6d:8a:0c:23:b6:29:5e:18:bc:5d:51:
         80:2b:57:83:9f:ed:06:53:7c:73:68:a7:d7:27:51:06:c4:6d:
         ba:dc:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:43 2026 by rpki-client