Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File:                     G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier:          1SJHUMnPobo3sg+8mtaVImcDZu6RsQ4Y6yCvJWL+r6s=
Subject key identifier:   32:36:9D:45:12:58:BA:DD:49:36:01:38:BB:1A:04:B6:69:C1:D1:B6
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer:       /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial:       1C83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number:          1C6E
Signing time:             Wed 22 Jul 2026 16:17:19 +0000
Manifest this update:     Wed 22 Jul 2026 16:17:18 +0000
Manifest next update:     Wed 29 Jul 2026 16:17:18 +0000
Files and hashes:         1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: OiU96KTY+yrEQJhClOUsnL564DO4bWp4jxw4q9+ispY=)
                          2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
                          rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7299 (0x1c83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
        Validity
            Not Before: Jul 22 16:17:18 2026 GMT
            Not After : Jul 29 16:17:18 2026 GMT
        Subject: CN=6a60ed0f-6e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:7a:99:1d:c2:be:16:93:a8:a2:a0:af:fa:
                    40:32:8f:c1:ee:cc:f1:6c:94:37:ee:93:15:ae:2f:
                    02:30:17:79:18:d2:bc:55:4a:0b:29:84:8a:b1:b3:
                    49:a1:4e:62:b2:e3:e3:3f:c9:76:bd:26:02:7e:12:
                    dd:ab:58:5b:d2:10:a6:ce:fb:be:3b:f4:41:f9:1d:
                    f6:84:4e:c7:2b:32:ad:43:a0:c4:81:93:ac:42:99:
                    a6:a4:99:1a:10:1a:d0:e0:06:5d:52:44:22:e6:18:
                    18:86:47:8b:c9:92:f8:b7:41:31:54:49:c7:de:f4:
                    b2:20:8f:81:c3:bc:c5:e2:ae:76:37:a7:95:51:4d:
                    c3:67:87:65:d8:0d:e1:cb:3b:f6:23:0b:cc:9a:15:
                    cd:8e:8f:2d:77:4b:4f:b1:b4:1e:21:0a:5e:55:7e:
                    d1:9f:9a:70:cd:01:e2:9c:29:10:f7:b6:8c:5f:f0:
                    73:2a:9e:66:d6:e3:84:5c:36:13:1c:f2:d4:4e:a2:
                    a4:46:c1:e9:61:b3:3c:6f:01:6b:ae:59:2d:27:e7:
                    90:f0:7f:f9:54:27:6a:4e:1b:26:a4:59:64:9a:f3:
                    94:f4:ae:9c:60:be:10:a6:49:6e:11:a3:ef:ca:12:
                    7b:7f:12:61:32:4b:83:0d:12:f0:54:08:c7:6d:13:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:36:9D:45:12:58:BA:DD:49:36:01:38:BB:1A:04:B6:69:C1:D1:B6
            X509v3 Authority Key Identifier:
                keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:15:2a:4f:b5:09:ee:80:1c:80:9b:a5:02:e4:95:5a:72:7f:
         75:85:23:e0:9d:09:68:e3:5b:82:e3:99:e1:d9:62:ba:c0:14:
         28:28:2a:73:b1:8f:6d:5f:b2:6c:21:6e:9e:5c:20:4b:d4:01:
         81:fd:66:fe:a7:fd:d1:af:c5:ca:1d:51:02:af:8a:5c:50:80:
         47:1f:40:1d:18:50:75:15:42:d6:cb:96:34:af:91:26:ab:00:
         f2:98:f2:62:be:dc:62:4b:94:1f:4b:0b:59:0b:c7:86:67:53:
         f5:7c:cf:39:13:0f:5f:a8:30:d6:d8:c2:d6:e5:c6:f1:f5:61:
         7d:c5:c1:5c:56:84:ea:29:52:8f:00:4d:25:7c:c4:b9:62:d7:
         13:f7:8a:eb:de:7d:85:49:00:4b:26:0a:5a:84:c4:b6:b4:ee:
         95:3c:8c:cd:17:85:65:1f:74:7b:ac:0d:42:db:f7:b4:64:0b:
         da:8a:e9:5d:fa:4c:cf:ab:5d:33:35:ee:b0:14:85:ca:fc:c6:
         21:79:d2:14:c6:b2:6f:2f:09:85:bc:65:38:4b:c5:51:9c:30:
         d9:f3:9d:1e:c7:64:0b:38:4c:3e:22:6c:dc:28:ee:41:32:7f:
         7a:b2:24:9b:be:49:03:f2:b8:22:cb:77:ce:54:a7:42:6b:80:
         53:1d:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:32 2026 by rpki-client