Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
File:                     9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json)
Hash identifier:          1yJZAMEDQtvO+74nRICqjE/9vfsFo3l6ATO6xjpBWsk=
Subject key identifier:   E6:28:A4:29:1E:5D:5D:59:8B:F7:2A:0D:D7:39:DF:09:E4:7D:78:25
Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Certificate issuer:       /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
Manifest number:          DD
Signing time:             Thu 23 Jul 2026 08:20:15 +0000
Manifest this update:     Thu 23 Jul 2026 08:20:15 +0000
Manifest next update:     Thu 30 Jul 2026 08:20:15 +0000
Files and hashes:         1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: 3CXOZu1nEEaBBjI5hNiZo0mkASa12qgtKPcMNoccM7w=)
                          2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: cVYUwns5T54IoB72QKZ0CGvpMEfMrfhrzm1qDa/aQyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
                          rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
        Validity
            Not Before: Jul 23 08:20:15 2026 GMT
            Not After : Jul 30 08:20:15 2026 GMT
        Subject: CN=6a61cebf-c69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:16:7b:08:cc:c4:3e:67:0f:3f:7d:b4:3f:
                    25:2d:2c:ab:9d:c6:c2:ad:bf:09:61:b5:ce:80:80:
                    f0:e5:6a:d2:df:f0:15:24:cd:22:a2:58:f7:44:78:
                    e6:ec:b1:26:66:9e:82:cf:f5:08:63:91:73:da:c4:
                    d8:ae:32:6d:7e:a3:c9:2d:d2:91:03:84:3c:6f:36:
                    75:ed:d6:31:96:53:12:8d:a7:c1:c2:f5:ac:27:48:
                    6c:21:60:7a:30:b0:7e:89:f0:0b:f7:01:88:c0:45:
                    81:ef:9a:92:cf:fc:59:aa:42:85:8a:4f:ac:56:5b:
                    da:1b:21:02:87:be:fd:b8:4f:7f:9f:ca:fb:4b:e8:
                    ac:fb:f8:f9:c0:e6:1f:83:01:6e:53:5f:54:6d:5c:
                    92:df:3f:5f:f2:b3:63:99:91:c5:67:97:b3:27:32:
                    3a:f6:18:02:a3:71:0b:64:c3:af:63:46:c7:92:86:
                    1d:32:a1:51:e1:06:b6:ed:c4:f2:da:7d:4e:17:17:
                    36:42:93:41:06:17:10:8d:92:f7:5b:f1:12:f5:80:
                    de:8a:af:18:1c:d3:b0:79:cb:5e:61:e1:e5:b0:f5:
                    fc:35:21:0f:ff:28:bc:ee:52:12:62:08:a0:4e:c0:
                    fb:9c:c7:20:a2:8a:09:8e:a5:29:ac:10:57:89:89:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:28:A4:29:1E:5D:5D:59:8B:F7:2A:0D:D7:39:DF:09:E4:7D:78:25
            X509v3 Authority Key Identifier:
                keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:51:2c:29:e7:d7:c7:a6:be:5e:c3:9e:74:45:ad:b6:e4:
         67:8e:da:04:fe:05:25:c6:66:76:50:ed:da:bb:87:c1:35:35:
         d6:a9:11:b9:5c:1f:66:5f:3d:ec:4b:8b:e4:91:80:70:18:56:
         77:e2:f2:22:1f:e3:2d:db:df:62:a3:d7:99:ed:6a:12:e2:b7:
         6b:82:64:fb:66:37:31:80:9a:f5:7c:39:b8:82:49:2f:79:41:
         80:f6:a4:53:93:84:f2:29:2a:69:96:52:cb:85:14:f3:95:f8:
         fb:9c:77:a5:e4:13:6c:83:f3:56:d0:58:fb:25:03:5c:9a:d1:
         41:c7:99:b0:fd:e5:c1:45:01:9b:9b:2a:3a:36:3c:53:e9:14:
         8a:4e:d2:dd:10:90:7a:17:e3:06:79:8f:5e:53:2c:14:67:16:
         f0:89:c6:68:bf:6e:1f:53:82:01:8f:d8:2d:e7:5e:7c:13:44:
         7a:fd:c7:61:90:59:c1:fd:a9:bc:44:7e:49:58:d7:d3:80:d6:
         c0:a9:74:1e:62:ab:b2:4b:e1:c9:ee:fe:d7:fc:62:ee:a1:08:
         4f:6e:7e:f5:14:d7:d0:15:d0:c1:85:bf:a1:df:5e:37:d4:53:
         a9:01:6c:bd:5c:04:a0:1a:9d:6e:e1:5b:3e:7a:84:f1:ae:cb:
         53:fd:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:29 2026 by rpki-client