Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
File:                     r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json)
Hash identifier:          9yJJSG6i1SRFrnC5iFAUFLzyg9iU5dGteSbCHRQ3OXw=
Subject key identifier:   15:DB:CD:15:4E:19:F4:F0:47:13:BC:12:D8:87:BD:08:4A:6C:15:2E
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
Manifest number:          9B
Signing time:             Thu 23 Jul 2026 09:19:29 +0000
Manifest this update:     Thu 23 Jul 2026 09:19:28 +0000
Manifest next update:     Thu 30 Jul 2026 09:19:28 +0000
Files and hashes:         1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: qDwz42QrpS0ys3vk+mxmmch6MzK++nT8Fzw185oJyK4=)
                          2: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=)
                          3: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: sHZWg+rU11rfUXJ4Q8l6qWY6glFT+3CM23A66tmDljo=)
                          4: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Jul 23 09:19:28 2026 GMT
            Not After : Jul 30 09:19:28 2026 GMT
        Subject: CN=6a61dca0-0094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:c3:a2:18:93:bf:16:e5:6a:7e:0f:57:83:
                    33:bd:ca:a5:09:5f:da:69:1d:ef:4f:93:0b:d6:14:
                    4a:ec:a4:63:af:10:79:51:c6:f6:b3:8a:b4:35:b5:
                    21:11:83:a4:0b:28:e6:a7:e7:7b:47:a3:e3:82:52:
                    b9:79:18:8a:ed:18:50:ab:d0:8c:15:a7:21:3e:9d:
                    c5:75:37:20:7c:c7:21:6a:05:f0:a8:8d:55:25:00:
                    51:0d:a3:69:43:61:80:5e:ab:56:09:e3:75:0d:26:
                    ab:65:be:03:00:b6:32:ab:fd:02:be:76:79:9b:37:
                    0f:63:54:93:ff:f1:53:45:2c:16:68:5b:4c:63:36:
                    0e:31:51:26:82:c2:6e:e5:be:9c:99:e3:e1:4b:74:
                    3e:98:b7:8e:c7:e5:f0:18:5b:ec:d2:a3:7d:d7:96:
                    c7:22:9c:83:35:76:68:b3:87:ad:20:78:68:90:94:
                    1e:a8:52:13:97:0b:e9:35:5a:52:68:c7:11:c8:9f:
                    a1:71:94:cd:c0:a7:04:5f:cd:47:1f:bc:ea:9f:ab:
                    83:48:b2:c4:35:74:d8:4d:c7:26:5f:73:cf:87:81:
                    55:f3:fd:ca:b3:9f:94:bc:9c:4c:1d:9d:49:18:d6:
                    7b:e2:e9:b1:cb:86:c2:0c:59:0d:aa:6e:56:69:dd:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:CD:15:4E:19:F4:F0:47:13:BC:12:D8:87:BD:08:4A:6C:15:2E
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b6:6b:fa:ea:77:3e:93:6e:49:1a:4c:11:0b:48:77:1d:c8:
         99:a9:c2:85:e9:b5:db:dd:c9:83:3c:13:1a:b3:cf:74:80:25:
         e5:23:49:31:36:cf:f1:50:4a:b3:70:16:31:25:17:a4:cf:57:
         28:02:84:6e:cf:7e:18:7b:70:f2:5e:ed:82:19:4b:5e:04:8f:
         33:df:44:43:74:31:7e:0e:23:9f:b5:16:6d:8a:f1:d5:fb:b9:
         25:2d:db:55:e8:38:7f:fe:05:21:fc:f6:6b:9c:4d:ae:d1:83:
         7e:03:c7:58:af:45:55:50:51:e6:3a:60:f1:3f:08:21:62:04:
         da:ac:2d:cf:3c:c6:85:dc:c6:b9:4e:e9:22:94:11:07:ec:63:
         6b:cf:6c:39:14:03:68:77:7f:c1:0a:8a:49:85:fe:a0:43:fb:
         d9:bb:d0:14:40:77:b4:62:5e:5b:2b:69:dd:e9:4c:1c:05:86:
         77:67:f4:23:79:12:bf:90:e1:76:5f:af:cb:32:bc:e9:12:87:
         78:26:bf:e2:09:55:c7:b1:b0:2d:1f:99:62:f4:d2:fc:45:e5:
         94:4b:3c:26:f7:53:58:cf:ce:81:69:af:f8:bd:5a:cb:6e:82:
         04:32:47:51:19:49:70:60:1a:7d:c0:40:d7:2d:81:8f:63:a7:
         f2:1e:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:53 2026 by rpki-client