Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
File:                     H2wzTrxkYqJkUoZ6u1-E72itwCw.mft (raw, json)
Hash identifier:          R62JDPqFlPiXF1pyB0fEN7sRtAuNhngbAHtUctE6QL0=
Subject key identifier:   9A:AB:3B:56:76:42:DC:02:00:5A:92:89:5D:89:D0:9E:43:13:3D:D4
Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Certificate issuer:       /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Certificate serial:       09C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
Manifest number:          09B6
Signing time:             Wed 22 Jul 2026 20:23:45 +0000
Manifest this update:     Wed 22 Jul 2026 20:23:44 +0000
Manifest next update:     Wed 29 Jul 2026 20:23:44 +0000
Files and hashes:         1: H2wzTrxkYqJkUoZ6u1-E72itwCw.crl (hash: Rh7DgaAuxleUTb1TPQcrcyzhKQALT2BDtXafk2g5q14=)
                          2: 46F4E81842B611F1BDBC0B88BD833773.roa (hash: bjvoF+HUltCMZqOM/EeOs1/NfOSmFvhkJtwfMjdbJBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl
                          rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2504 (0x9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
        Validity
            Not Before: Jul 22 20:23:44 2026 GMT
            Not After : Jul 29 20:23:44 2026 GMT
        Subject: CN=6a6126d0-4868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:b3:bc:02:52:09:bb:bf:65:88:f4:51:21:
                    e8:4c:b1:c0:1e:0c:b1:c9:ff:94:2f:43:d8:ec:19:
                    e2:98:a0:86:21:8e:31:6b:33:35:de:33:ef:2b:ff:
                    1f:0e:7d:1f:c2:87:da:82:14:0a:49:a6:0f:02:12:
                    67:83:43:8a:de:55:05:8b:1e:cb:d1:60:fc:db:a3:
                    00:c3:f1:42:c3:26:23:41:40:92:96:35:de:e7:96:
                    c2:ca:d0:89:aa:a6:8d:2e:d1:26:59:fc:84:14:67:
                    74:9e:36:31:e4:de:41:39:90:10:20:c2:cc:16:c7:
                    47:8c:ea:db:01:7d:d4:2f:f1:b0:09:43:eb:1a:0d:
                    c2:2d:d3:91:d4:98:99:e9:cd:e6:df:33:cf:12:72:
                    de:8b:a2:dc:64:e8:00:dd:14:2c:8c:57:a1:85:4e:
                    0e:c3:7e:dc:65:a3:f7:d0:65:d2:9f:65:a1:32:77:
                    4f:d5:f7:78:f5:69:0c:99:c9:e4:b2:da:6d:f0:08:
                    d4:e1:cf:4d:b6:8a:ae:0c:5b:6b:1c:31:bb:03:c2:
                    d9:f2:5d:0f:78:2c:48:98:96:dc:ee:e6:11:c1:8d:
                    90:35:f9:29:3e:bb:87:31:8f:15:95:0a:bd:17:9b:
                    a6:0c:b8:0d:b6:c0:82:dd:c1:27:89:1f:a3:0c:d6:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AB:3B:56:76:42:DC:02:00:5A:92:89:5D:89:D0:9E:43:13:3D:D4
            X509v3 Authority Key Identifier:
                keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:88:b3:34:fe:e6:be:53:62:a1:59:96:66:ae:32:dc:61:
         0d:a0:3b:16:18:c8:61:89:49:22:96:52:57:e3:c2:b5:18:44:
         09:69:35:c4:f9:62:42:8c:7f:f2:9f:f6:5f:49:05:a1:b6:f5:
         4c:16:f7:ad:36:df:d6:17:e3:0d:20:0a:60:8f:38:ad:3f:2f:
         84:bf:91:7a:66:b2:89:31:4b:00:b2:ca:b2:37:90:70:d7:de:
         54:6c:67:dc:81:25:6a:be:27:f9:cf:04:02:7f:e5:4f:18:7e:
         83:a1:b9:10:fe:8e:a0:96:64:ca:95:08:72:48:d9:83:95:f3:
         00:8d:67:a8:80:47:61:b4:60:c4:f4:eb:d4:e2:1f:1d:6b:2a:
         4d:79:81:3a:20:9b:eb:c3:83:a0:53:09:95:67:33:36:c4:a9:
         4d:ed:d3:f2:0b:dc:f1:05:b2:f4:a7:72:2d:a0:3d:0a:77:f2:
         58:0d:6f:07:52:3e:37:b9:d8:06:d7:49:5a:54:d6:dc:08:d0:
         a0:4b:0e:aa:cf:b4:23:b6:d6:d9:6f:11:a6:a0:dd:09:73:fb:
         23:85:ae:aa:c7:5c:63:f5:e5:06:dd:7c:40:cd:97:b9:15:d5:
         0a:72:5a:f6:54:85:15:8e:94:05:e5:cd:e1:0e:87:55:1f:f1:
         01:09:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:52 2026 by rpki-client