Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
File:                     0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json)
Hash identifier:          Qz4ZbSulTH3jjKw4brbX8MHJDOyD2DLTtPDU41IdWhw=
Subject key identifier:   66:5F:5B:25:E7:0A:DD:0A:EE:8C:76:D3:8C:E9:E5:0F:6F:82:3A:6B
Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
Certificate issuer:       /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
Manifest number:          88
Signing time:             Thu 23 Jul 2026 09:27:54 +0000
Manifest this update:     Thu 23 Jul 2026 09:27:54 +0000
Manifest next update:     Thu 30 Jul 2026 09:27:54 +0000
Files and hashes:         1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: NcKvcpVQKA3DLTjdwAJXMHVf4D/rf0mHeKpW9YwvoP8=)
                          2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: SUT7Sext2CBmlq2r+uIBNlenhXwwgBzoi2hOww2+R8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
                          rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
        Validity
            Not Before: Jul 23 09:27:54 2026 GMT
            Not After : Jul 30 09:27:54 2026 GMT
        Subject: CN=6a61de9a-62ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:b8:a3:bd:5e:00:75:3f:84:61:40:c4:cb:
                    0f:24:d8:eb:8a:89:1c:04:76:f9:ff:f2:d1:a7:b8:
                    1c:4d:37:48:f5:d5:41:5a:23:1c:d4:26:b6:f8:36:
                    70:f1:5a:da:60:84:62:aa:4d:a6:15:b0:b4:66:60:
                    8b:5f:54:1d:79:7b:a2:bb:44:28:55:41:7c:71:94:
                    7e:a3:9b:2d:bd:cc:f0:b5:fa:60:e8:9c:fe:60:87:
                    07:3b:cc:e1:78:78:3b:7f:22:20:08:04:32:85:3b:
                    16:ca:27:a9:4a:32:63:19:0e:4e:88:8a:39:81:19:
                    45:d2:e7:f5:3e:47:ab:19:fc:4b:18:3f:af:28:e7:
                    81:f5:f7:69:ae:76:35:c5:9a:33:ea:65:c0:58:7d:
                    95:57:e9:29:87:73:6e:02:92:f2:a8:72:ed:cd:d4:
                    c6:b0:81:c6:8c:d8:55:09:91:56:ea:97:e8:93:e4:
                    ec:64:72:53:c8:72:02:54:c7:b5:48:39:bb:3d:54:
                    e8:e4:80:f5:15:c8:4f:0b:20:34:1b:67:a7:ff:f9:
                    85:fe:50:3e:04:da:d5:7e:40:48:98:e2:d7:3b:0b:
                    c5:1d:cd:32:c7:a0:e2:d0:54:78:01:1e:f6:0b:48:
                    8f:91:67:29:0d:0e:55:74:c3:6a:cd:9a:7d:1d:86:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5F:5B:25:E7:0A:DD:0A:EE:8C:76:D3:8C:E9:E5:0F:6F:82:3A:6B
            X509v3 Authority Key Identifier:
                keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:2a:eb:03:a5:99:4b:46:14:36:c3:23:38:c7:14:3e:38:e7:
         8d:64:d7:d2:fc:2e:c6:3e:e1:3e:6b:17:3b:f0:ae:49:4b:e3:
         5b:4b:5a:51:8f:4e:fc:d7:3c:cc:a0:42:1a:9a:fb:9d:47:ec:
         94:0b:8e:f0:b3:c0:73:e9:ee:5b:0e:4d:02:8f:37:ee:9e:71:
         8e:ed:19:76:6f:0b:dc:fe:84:39:3f:56:42:cf:1a:02:39:07:
         60:75:47:1a:15:9f:11:f9:5f:3f:4d:8f:b2:1d:24:5f:e6:62:
         60:bd:2a:ea:7d:6a:13:0a:ec:76:b1:01:82:73:d5:f8:81:55:
         72:cb:5c:1c:c7:56:b4:28:b9:59:e6:cf:e1:82:85:d5:b7:f2:
         24:67:7b:c1:2e:68:0d:ea:df:08:50:c0:24:75:e2:ae:89:aa:
         41:69:0d:27:f5:af:bf:cb:f6:58:85:35:f2:55:e8:49:96:e5:
         9c:6e:9b:a1:12:d9:47:67:13:f9:7f:6a:d1:4f:6f:09:d4:80:
         b1:78:0a:2c:07:9b:3a:05:24:3e:22:49:d2:c9:44:d5:86:17:
         45:c5:2c:14:0c:1d:ec:db:ae:f3:a8:4b:20:96:75:97:ea:45:
         c9:4c:04:1e:73:0b:22:83:af:04:27:8a:d5:06:a6:2d:ac:f1:
         c6:b1:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:57:29 2026 by rpki-client