Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
File:                     1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json)
Hash identifier:          qiMap0blP3gsaPib03gtt4VCaILokawHH9dRZGYa0ns=
Subject key identifier:   3B:9E:65:8D:23:83:12:A7:33:53:B4:64:0D:36:83:6C:4E:41:74:27
Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
Certificate issuer:       /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
Manifest number:          9C
Signing time:             Thu 23 Jul 2026 09:12:26 +0000
Manifest this update:     Thu 23 Jul 2026 09:12:25 +0000
Manifest next update:     Thu 30 Jul 2026 09:12:25 +0000
Files and hashes:         1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: ATV/tGwKsO27cJ0+eWj6yiAGz5oO7rrmiXs9tO+Msxo=)
                          2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Pc2Gm0El6C7yNRFdvtcnQRtp9swqk0Qn5OUm8Fjkbqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
                          rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
        Validity
            Not Before: Jul 23 09:12:25 2026 GMT
            Not After : Jul 30 09:12:25 2026 GMT
        Subject: CN=6a61daf9-0f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:a8:3d:73:00:41:b7:a1:f4:f8:a4:89:f6:
                    1e:e8:21:16:be:c5:0e:54:f1:9d:ef:47:df:3e:f7:
                    35:7b:33:47:ed:16:bc:8e:43:bb:fc:a7:27:b2:9b:
                    d0:14:01:40:fb:b0:de:73:23:4d:d3:15:34:c8:65:
                    79:0e:3d:11:f2:42:60:69:c9:ec:4b:86:a0:b7:8d:
                    43:04:e7:6d:eb:5e:f8:ae:39:8a:db:ef:58:11:de:
                    b0:7a:1a:9d:e7:38:ab:86:84:8f:ac:b8:7c:b9:c8:
                    e5:5c:ab:dc:39:b8:27:c8:56:42:74:c7:7b:a8:ac:
                    72:ce:b3:6f:9d:67:d4:c8:59:cc:13:d8:50:f4:45:
                    c0:33:51:84:ca:5a:9d:8a:99:f8:3c:47:7c:1f:50:
                    06:56:62:e0:c9:12:b4:91:5a:9a:be:d0:e6:1d:31:
                    e3:78:93:a8:1a:3a:67:6b:81:01:44:b3:fd:2a:33:
                    30:fc:f7:6e:0d:2e:ae:4a:ec:66:54:89:26:95:73:
                    59:91:b3:3e:bd:6e:6a:41:3d:77:d0:c9:10:27:d3:
                    aa:54:e4:26:ab:c6:a9:66:c0:43:5a:44:dc:25:b9:
                    66:d2:1e:a0:9f:1f:50:76:0c:12:a6:0c:4a:c5:37:
                    13:af:98:78:c0:c5:1b:ad:1b:29:a5:b0:16:b2:d7:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9E:65:8D:23:83:12:A7:33:53:B4:64:0D:36:83:6C:4E:41:74:27
            X509v3 Authority Key Identifier:
                keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:b4:ec:13:b7:d4:6e:6f:81:f4:d3:a4:18:7a:d0:81:64:
         bb:04:92:48:b5:c9:d1:a9:ff:de:19:fd:45:be:84:f3:06:bb:
         0e:8a:83:02:ea:2b:af:9f:7d:d7:5d:46:69:4e:bf:60:6d:33:
         d7:85:d8:2c:18:8a:cc:ed:87:4c:dc:2c:a1:71:64:29:ed:ea:
         a9:a9:46:fa:29:86:db:03:95:59:f8:a2:33:0f:32:09:8b:db:
         25:84:26:e9:a8:af:b2:e3:48:4a:e3:bd:f3:70:33:40:95:f1:
         8a:e2:ea:bf:9d:01:09:cc:58:ae:33:a1:57:ca:61:92:12:d3:
         40:26:50:67:a6:d0:ef:b6:ad:ed:d1:bf:69:38:ce:c5:ed:2a:
         1d:d4:de:77:78:68:8a:b9:63:94:57:1e:e7:5f:c8:26:c9:f1:
         60:48:f0:4e:92:c2:69:9f:6c:2f:85:23:76:d8:aa:a7:85:74:
         80:35:b1:fe:55:55:37:5f:95:ed:e8:16:29:cb:35:f2:21:04:
         7f:73:84:ff:af:f9:5b:c7:12:db:80:5b:d8:e2:7d:64:7f:d4:
         df:d5:b5:41:06:d4:11:9c:1d:14:5c:40:38:00:4d:de:2d:2b:
         f8:1f:18:ba:d0:b0:fc:ff:6f:b8:87:a8:11:8f:d5:7e:35:d9:
         39:17:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:06 2026 by rpki-client