Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File:                     ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier:          //BdkQ2/ZKeng+C3uucN52FJ7mA0CcrmJV55hIOh5Nw=
Subject key identifier:   C9:E0:3E:CF:F4:DE:1A:E3:5E:D7:BC:20:42:2B:B6:D9:F3:67:C3:41
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer:       /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial:       06A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number:          069D
Signing time:             Wed 22 Jul 2026 23:09:57 +0000
Manifest this update:     Wed 22 Jul 2026 23:09:57 +0000
Manifest next update:     Wed 29 Jul 2026 23:09:57 +0000
Files and hashes:         1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: ehD54Jk/UfR5vB8tHOJFHW9znMU5RbR94Zh7jYA8OtU=)
                          2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: 5NPwjGLnfzyS4v9CY8BfwcjN4RI/Bjk1Spnk+XfA3ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
                          rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
        Validity
            Not Before: Jul 22 23:09:57 2026 GMT
            Not After : Jul 29 23:09:57 2026 GMT
        Subject: CN=6a614dc5-8f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:17:43:1b:87:ff:8c:6e:0a:5d:6a:18:8a:11:
                    c3:f5:a7:60:6e:e0:23:21:58:15:8b:d3:2a:d5:7b:
                    38:9f:48:f1:54:02:a4:7a:90:13:25:1d:00:1f:9a:
                    a1:3f:85:60:7f:12:57:c1:39:33:f0:b7:e5:51:86:
                    27:da:31:56:d4:0f:b7:b1:cc:a7:60:7b:af:77:14:
                    c9:96:61:ad:3c:81:e6:1c:a0:72:0f:3d:18:44:16:
                    a0:3c:58:64:e5:80:14:50:b3:2d:15:fa:83:e8:a0:
                    a9:8e:b3:61:e5:57:01:04:b8:b1:1c:6e:58:a5:14:
                    7a:40:64:6a:dc:aa:b3:1d:06:14:2e:c9:88:15:14:
                    6b:19:b2:b7:bc:98:1e:6d:ff:a7:ad:d2:5d:7a:f8:
                    29:30:7a:cc:5c:bd:1b:16:bd:73:ad:7c:9f:c3:76:
                    8e:4d:24:84:d0:cc:da:6f:1d:62:88:f7:41:f2:86:
                    cc:a1:3a:b3:5a:5f:63:bb:d3:82:40:fb:88:ce:19:
                    d2:c8:bf:ba:8b:39:cb:6e:a9:3b:82:83:0d:eb:ce:
                    6c:55:32:a0:11:a3:c7:d8:fe:23:d0:32:40:83:4d:
                    d3:44:35:50:0f:a3:20:6a:f8:25:47:ef:8c:9a:25:
                    f6:ef:ca:85:08:06:71:cf:ab:41:2f:d1:7d:23:91:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:3E:CF:F4:DE:1A:E3:5E:D7:BC:20:42:2B:B6:D9:F3:67:C3:41
            X509v3 Authority Key Identifier:
                keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:98:23:7f:33:ee:c3:87:8a:96:80:c6:0f:75:e5:6c:40:1b:
         14:92:ac:99:06:65:c3:c7:8a:93:01:20:da:71:fa:b3:2a:9e:
         40:6e:b5:75:6f:09:de:43:7f:33:87:22:53:10:e5:e5:3a:a4:
         0c:8b:12:c0:88:4c:6f:33:c3:26:4a:cc:4f:de:81:ff:ad:08:
         15:41:45:f6:99:ef:b9:f0:bf:92:4a:7a:ac:2b:68:48:71:17:
         08:67:de:96:75:4d:3b:36:7e:6e:f4:36:e1:66:c7:f8:45:02:
         c7:e2:37:5d:a7:5c:09:81:aa:cc:47:35:a3:dd:8e:a4:ee:52:
         b8:a8:51:1b:42:09:d8:97:c9:0c:02:47:ea:d0:98:7a:88:40:
         c7:72:6f:60:94:17:25:6b:60:56:a7:29:1f:9a:f0:a7:58:59:
         e9:25:be:5a:b0:ea:f0:c8:51:5b:dc:09:80:3d:ac:d1:32:69:
         34:86:6b:da:76:87:81:38:6d:03:87:57:65:c4:18:43:98:d9:
         e1:55:6e:40:3a:db:0c:9c:24:8f:0a:10:74:0a:55:68:ae:b6:
         bd:f9:c8:fe:c7:48:d7:db:9d:5c:85:8d:bd:0f:d7:1c:a4:09:
         d2:61:51:63:84:44:22:33:18:60:e8:29:4c:ea:23:ff:75:b6:
         5d:7d:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:56 2026 by rpki-client