Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
File:                     R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json)
Hash identifier:          pCdn6JWjZvc9OnXRSVLxfWaij9Qba/Ofr2CX+Cla03Y=
Subject key identifier:   95:65:24:8F:51:F7:A7:42:64:94:D4:FC:CF:B0:42:E9:5D:35:F0:5B
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Certificate issuer:       /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial:       124A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
Manifest number:          1235
Signing time:             Wed 22 Jul 2026 17:14:49 +0000
Manifest this update:     Wed 22 Jul 2026 17:14:49 +0000
Manifest next update:     Wed 29 Jul 2026 17:14:49 +0000
Files and hashes:         1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: UXN9opcIoySoOv6oGfWZWmfRqi2RdZkadghcwAr0ntQ=)
                          2: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: OlyIY7R0t7UmXYws0QWQQU3lNAFUrjDepPqWUn8CEMM=)
                          3: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: QDOv/k1/6QwFO3v9/oK9m5KqC6iM+gtzDTOnLCwkAkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
                          rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4682 (0x124a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
        Validity
            Not Before: Jul 22 17:14:49 2026 GMT
            Not After : Jul 29 17:14:49 2026 GMT
        Subject: CN=6a60fa89-28c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:45:f6:7f:6f:ec:25:15:3e:98:c0:a6:4d:
                    18:b9:3d:fe:b7:b3:70:bd:c8:6b:98:6e:a4:da:36:
                    06:b0:0a:42:d7:33:e1:3b:81:98:0d:f0:a9:0c:df:
                    f9:c0:5d:f5:8e:25:e4:4c:2b:65:0f:dc:26:9c:56:
                    45:cf:8d:71:3b:fc:d6:e7:25:1a:da:cf:85:5f:86:
                    41:2f:7a:3e:66:77:31:47:f6:3b:da:a9:16:f7:7a:
                    1d:dc:7f:3a:03:90:46:2c:98:28:c0:23:af:12:02:
                    97:8e:48:42:2f:47:e2:7d:6b:c0:27:24:4b:96:dc:
                    27:85:c2:e5:60:eb:9e:9b:ce:dd:2c:6f:be:3c:53:
                    3a:2b:e4:56:7e:46:54:ec:65:46:e8:a7:4a:95:ca:
                    ea:1f:d8:28:77:e5:a6:e7:1b:7b:5f:30:b6:fe:c4:
                    3b:58:50:29:0d:70:f7:b5:34:e9:83:98:3b:3f:02:
                    f9:a3:4d:37:04:a5:50:1f:9d:96:23:73:36:14:18:
                    7d:41:4b:c8:56:f2:c1:8d:c8:62:a9:93:2c:34:0d:
                    2a:d4:95:b8:d8:ca:23:50:b8:8f:8a:1b:e2:b3:b2:
                    5b:ac:c0:ca:5b:41:18:9a:f8:5e:00:e6:84:00:41:
                    c0:91:1d:77:91:ef:e6:55:1b:8f:00:a9:92:52:fa:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:24:8F:51:F7:A7:42:64:94:D4:FC:CF:B0:42:E9:5D:35:F0:5B
            X509v3 Authority Key Identifier:
                keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:08:e6:ef:c2:d9:d7:3c:94:9a:4d:24:e6:09:41:4f:a6:
         72:bc:6b:a1:ef:4d:6a:e4:1d:9b:52:8a:ce:36:99:5f:c8:a7:
         4b:3f:1b:17:7e:af:24:be:c2:27:0c:71:7c:fd:df:51:92:b7:
         c5:07:02:2d:f7:40:7f:70:ad:3e:d9:67:72:6e:54:8e:9d:f2:
         26:12:bd:3e:1e:42:37:09:91:fa:ed:d9:a3:ef:9b:e8:d9:03:
         b2:45:2e:9f:b4:a2:39:5e:68:f0:53:c5:53:41:6c:fb:77:6b:
         14:d2:43:33:77:0b:a9:f4:bf:91:cd:a2:03:d8:f5:0e:6c:f2:
         96:5a:b3:d4:9c:d2:81:f2:21:2f:27:51:04:d0:e6:1c:0e:9d:
         c2:2c:5c:ee:91:9d:7e:ae:8d:57:75:bf:ec:72:06:9c:b4:8a:
         e0:5f:85:b7:5f:e5:41:8b:8f:f4:bf:08:1d:8b:aa:9b:53:a3:
         70:c5:fe:e0:c4:f5:de:fa:53:1d:81:0e:b1:2e:a1:c5:02:c5:
         ec:95:0e:98:9a:3e:75:59:e3:c4:47:7b:8e:05:66:4e:d7:89:
         1f:a6:bc:c8:f4:87:fd:7a:30:74:82:61:95:bd:19:de:34:18:
         34:13:ff:a7:50:b9:8c:f3:b9:77:aa:1a:10:6a:69:85:d0:28:
         c7:ce:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:36 2026 by rpki-client