Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
File:                     r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json)
Hash identifier:          ZgR8szroP2OUsgX904rljYT/eza84gFCNhTJGmGXmqk=
Subject key identifier:   43:1A:6B:09:41:9E:C4:E9:26:BA:0A:C7:86:4A:2F:98:0C:04:DE:C2
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Certificate issuer:       /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial:       02B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
Manifest number:          029F
Signing time:             Thu 23 Jul 2026 02:57:18 +0000
Manifest this update:     Thu 23 Jul 2026 02:57:18 +0000
Manifest next update:     Thu 30 Jul 2026 02:57:18 +0000
Files and hashes:         1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: Et8ra3/G1iMa7RyYE74WizduikgVp5hNq86dgERBD3U=)
                          2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: zL+0GILNq3N6RlaPpOmQcCTITpel7i2coFIgiZ3nFug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
                          rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
        Validity
            Not Before: Jul 23 02:57:18 2026 GMT
            Not After : Jul 30 02:57:18 2026 GMT
        Subject: CN=6a61830e-e21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:b6:ac:0d:a2:7b:ca:40:7e:f7:11:e8:b3:
                    54:a4:f9:ed:78:25:fb:87:95:37:12:43:4e:61:e7:
                    60:cd:d9:9c:75:dd:fc:b2:01:9d:d4:c3:d7:b8:b1:
                    7d:7f:b4:4a:22:77:57:be:83:98:84:ce:78:88:0f:
                    40:c8:59:f6:38:51:18:a9:b5:a1:48:5f:5e:bb:05:
                    71:13:e1:ee:c7:72:21:e1:99:05:28:a1:c2:65:06:
                    46:4c:fc:63:cc:68:ef:a0:b5:b8:b4:6e:08:1a:99:
                    d4:b2:84:ae:83:8c:22:4e:a7:8d:da:4e:01:e3:92:
                    24:0e:6a:f4:6e:af:f4:b9:b8:0e:ec:63:45:3f:e7:
                    4e:21:70:fc:0d:d6:9d:bd:8e:a9:0c:a7:00:dc:37:
                    5f:54:9b:1d:b9:40:de:62:61:8d:38:d1:94:59:c2:
                    02:2f:f4:32:11:e3:39:e9:39:d2:a0:2d:2d:ed:34:
                    6e:ee:a8:14:e8:aa:60:2a:61:d3:20:53:96:3d:b0:
                    2a:c4:dc:f9:21:20:c4:6f:cb:b1:7f:67:3e:a6:e6:
                    ab:6b:ca:e1:ce:af:25:d3:a9:13:12:b3:51:53:45:
                    09:bb:d8:73:ba:f3:e4:ac:a3:7d:8b:82:69:6d:55:
                    b4:4f:93:53:a9:75:c7:74:c5:0d:68:be:63:e3:57:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1A:6B:09:41:9E:C4:E9:26:BA:0A:C7:86:4A:2F:98:0C:04:DE:C2
            X509v3 Authority Key Identifier:
                keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:ab:9a:ad:b7:a1:a9:30:e3:81:b5:af:23:a4:60:80:69:
         31:81:9c:aa:1d:ab:69:10:24:96:86:c6:39:95:84:b9:7f:3c:
         ae:85:35:ba:fa:d2:f7:95:c6:c7:2f:96:ca:ff:84:39:e1:c6:
         04:c9:ba:17:fe:87:f7:04:e6:9e:a6:5f:f5:39:f8:e5:e8:f9:
         61:b8:84:7e:f8:1b:84:3d:2d:f5:77:9c:e6:72:d0:36:89:40:
         e8:44:0c:33:8f:3c:ef:16:ff:c9:22:45:64:a2:e5:de:a7:60:
         eb:21:75:30:6d:78:cd:ba:c3:95:9a:64:09:83:88:df:e1:fc:
         63:1d:99:0c:b3:f9:ac:89:2e:57:35:50:07:21:e2:f1:05:3d:
         f7:db:24:32:fa:b6:2b:bf:df:15:fb:cd:57:0a:31:8f:74:f0:
         35:b3:47:01:07:a9:8f:73:0e:b7:19:1b:ff:a7:62:53:31:8f:
         77:13:fb:b8:e3:a5:e3:91:a4:e8:a4:dc:7b:66:da:3f:03:5b:
         bf:4b:e9:cb:47:e3:b4:f3:14:bf:b7:72:29:3a:fd:84:bb:30:
         73:5d:24:41:2a:0e:82:19:06:c4:fa:b1:9b:47:dc:09:66:12:
         dc:0b:35:18:ff:79:c7:8f:6b:9b:b9:ec:98:2f:35:ca:2b:2c:
         6e:d0:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:28 2026 by rpki-client