Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
File:                     m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json)
Hash identifier:          jZryNyf4xmA1N8MvA5JZk0u29d/7ys/OBRJFEEjlc/I=
Subject key identifier:   F8:05:0E:A9:9A:6D:2D:0F:7B:47:54:7C:83:8E:08:D1:27:EE:63:B7
Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
Certificate issuer:       /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Certificate serial:       0A5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
Manifest number:          0A53
Signing time:             Wed 22 Jul 2026 20:05:51 +0000
Manifest this update:     Wed 22 Jul 2026 20:05:51 +0000
Manifest next update:     Wed 29 Jul 2026 20:05:51 +0000
Files and hashes:         1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: tg8t8pPHOM+L5FChle4zhmzQZfaV0YPSiKgffPRvbnw=)
                          2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: p5tHceUGggVzp/JRsrpIxwd9XbhGqbw9afNYTWBImQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
                          rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652 (0xa5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
        Validity
            Not Before: Jul 22 20:05:51 2026 GMT
            Not After : Jul 29 20:05:51 2026 GMT
        Subject: CN=6a61229f-2931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:3c:03:c7:22:3f:37:95:f7:c4:29:d0:84:
                    2e:37:61:3b:87:29:8e:18:7b:90:b8:5b:27:4b:a3:
                    81:e1:50:56:d6:fd:c5:91:19:eb:a9:5b:2d:d3:52:
                    49:be:16:27:df:43:d7:5c:f4:4c:27:9c:9f:49:ee:
                    6d:2d:2d:6d:f5:50:6b:59:a6:5c:6d:1d:44:9a:89:
                    b0:a8:27:10:17:24:69:70:47:d0:bf:44:9f:f2:94:
                    39:47:76:77:30:e2:0f:f7:8c:81:1e:47:74:a4:e1:
                    d0:c2:a6:c5:b2:74:39:64:f5:28:69:ef:18:9e:a7:
                    94:dd:a0:42:23:f3:22:e5:ab:29:fe:3a:dd:f8:b8:
                    43:80:62:44:24:e8:1a:62:2f:40:93:cb:a2:9b:bd:
                    65:20:bd:cf:15:27:0d:4b:71:ff:ac:de:e8:1c:5f:
                    39:97:fe:36:12:11:b2:c7:84:79:d5:ac:b8:73:03:
                    0f:fb:5d:f3:ca:b8:78:b0:e1:b6:3f:76:7b:cf:83:
                    78:e6:87:58:91:c5:94:be:35:b4:ed:4a:0e:55:8a:
                    d4:84:1b:58:ec:88:b5:28:b4:d8:82:70:cb:dd:79:
                    51:ac:b5:26:ec:c9:58:50:24:69:37:f8:c2:e4:34:
                    17:58:58:d0:2e:b5:ae:23:fd:c2:f1:20:15:0a:4c:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:0E:A9:9A:6D:2D:0F:7B:47:54:7C:83:8E:08:D1:27:EE:63:B7
            X509v3 Authority Key Identifier:
                keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:7b:49:34:1e:73:90:4a:c4:62:b4:2d:42:18:f7:30:e4:
         30:ff:05:b0:22:1e:55:7e:6e:38:98:17:97:5c:8f:1f:46:78:
         70:ba:74:14:33:7c:7b:cb:6b:2d:4b:57:a4:59:8f:75:80:95:
         e8:0a:a6:e5:f6:f0:5e:bd:9a:d8:f7:a2:3c:ee:8e:39:43:5d:
         91:2b:55:ff:62:a6:c0:de:66:94:d2:5e:51:c4:3a:91:e8:8f:
         36:36:a3:1f:54:0b:4f:a8:19:f4:c0:0f:b9:73:be:95:a2:05:
         19:0d:44:73:10:2e:2f:3e:21:13:5a:82:17:f5:51:34:c0:33:
         65:ff:ea:44:b7:4d:3f:83:e3:1c:78:d1:c1:3b:d1:55:ca:16:
         12:87:66:aa:5c:e1:b6:7c:50:d6:bd:47:e2:a8:c2:bc:ee:a4:
         a6:68:a1:d6:a2:a0:19:43:68:f6:ea:43:94:e3:0e:8f:2c:d8:
         74:3e:72:70:e1:7d:8d:cb:2e:3c:0d:d3:e9:7f:8c:8d:84:d4:
         e2:aa:93:db:ef:22:46:75:1f:9b:a0:ed:30:91:68:78:76:c6:
         9b:33:ac:42:b0:14:8e:0f:c8:f2:8c:9a:61:a4:0e:2c:a4:dd:
         e2:5f:b7:b2:b7:45:2e:c8:0c:7b:8d:cc:7d:cc:a6:05:23:f9:
         0b:41:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:11 2026 by rpki-client