Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
File:                     B2qM_AnS8rcX4jyBAokXiMq1UT4.mft (raw, json)
Hash identifier:          nKNEWSoEdewvrHP/zRxwlY7pubC6NlvrKMwVKpFGfdo=
Subject key identifier:   9C:76:C6:A7:C4:EB:A4:A0:0D:9D:3F:A3:B4:6C:BD:50:75:06:9F:DC
Authority key identifier: 07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
Certificate issuer:       /CN=A914C9CD/serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
Manifest number:          05
Signing time:             Thu 23 Jul 2026 06:31:41 +0000
Manifest this update:     Thu 23 Jul 2026 06:31:40 +0000
Manifest next update:     Thu 30 Jul 2026 06:31:40 +0000
Files and hashes:         1: B2qM_AnS8rcX4jyBAokXiMq1UT4.crl (hash: n9SWVnLcW1Jr9BTBfmnJkuHMoFUU4X1bw9AK/67x9Bc=)
                          2: 4F2C0476865E11F19C092B2C95A30FBC.roa (hash: egifpNM5XF4+DHAIdWtYVVii3Yk/k7piv94MdlcO3yE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.crl
                          rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C9CD, serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
        Validity
            Not Before: Jul 23 06:31:40 2026 GMT
            Not After : Jul 30 06:31:40 2026 GMT
        Subject: CN=6a61b54d-a0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:01:58:f9:94:fa:a1:45:98:e0:5b:34:b0:
                    6c:07:e7:22:d3:75:0b:a1:12:1d:8c:ba:31:e5:a3:
                    52:a9:2e:96:b6:37:75:2e:2d:81:b9:54:8a:f8:26:
                    55:c7:2a:50:a2:b9:9f:49:02:40:82:83:bc:ff:65:
                    71:b2:89:e9:c4:93:9a:b1:49:f1:4c:a9:fd:28:39:
                    6f:d2:bf:92:83:cf:42:79:06:75:a4:ff:a4:eb:f9:
                    b3:be:ec:e5:49:ce:a6:00:62:96:41:ec:6f:27:08:
                    f5:c4:d4:b4:62:e9:24:f0:d0:6f:a4:4e:56:d1:b2:
                    c4:48:3a:22:d3:a1:f5:d7:40:c2:21:01:61:02:8b:
                    de:f4:fb:51:b0:5a:47:42:55:c5:5b:f6:a9:ab:18:
                    35:39:3c:89:2f:45:4b:41:6b:6a:d4:9f:96:07:96:
                    5c:e5:9f:bf:57:c0:f1:58:de:e1:cb:b8:f6:47:86:
                    51:d6:81:0a:15:2e:60:40:7e:16:23:8b:dc:18:5a:
                    4b:01:02:4c:26:8d:13:ac:d1:55:2a:10:95:20:3f:
                    47:07:df:8d:e7:0d:ba:cc:e1:4f:ba:0d:e7:af:14:
                    ca:59:8b:0a:23:15:c9:0a:9f:6d:a6:4c:fb:5e:28:
                    1d:17:e6:56:c5:b6:1b:b0:04:0f:92:65:00:4a:ae:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:76:C6:A7:C4:EB:A4:A0:0D:9D:3F:A3:B4:6C:BD:50:75:06:9F:DC
            X509v3 Authority Key Identifier:
                keyid:07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:d9:65:bf:2e:f8:77:77:87:18:d0:19:33:9b:28:8c:37:30:
         8c:e2:2f:85:20:7c:e2:2c:c5:f2:01:5d:81:ad:8f:0f:45:c1:
         96:52:db:e5:d9:75:fd:fa:66:09:82:cd:77:19:bc:cc:14:ce:
         e9:97:8f:17:95:b2:54:df:fa:6c:69:02:60:af:8b:2e:dc:ab:
         2d:e3:bf:ef:40:15:bf:84:97:28:69:80:af:67:ff:f3:c7:ba:
         3e:97:59:5c:28:7b:90:09:e2:24:7e:85:e6:bc:bb:9a:8c:de:
         98:56:cb:b5:74:de:60:2e:04:33:ab:e9:70:8f:5b:6b:a7:16:
         47:46:0f:f6:98:05:d8:53:60:51:f9:eb:3f:ac:86:6f:7c:85:
         74:08:3b:67:03:da:83:fc:9a:7b:e2:a7:17:91:4a:22:d9:35:
         0b:7f:14:4c:b6:47:81:c8:21:45:8d:e1:20:d5:0f:8d:a6:58:
         d3:52:8a:7a:03:81:45:4b:02:c2:53:db:1f:35:a2:ca:7f:3b:
         ea:13:4f:5b:03:b5:d7:75:f9:18:48:c4:c3:b1:c1:84:9e:c4:
         07:5e:a0:54:90:38:9e:57:23:12:c9:28:04:92:f5:d5:cc:40:
         e7:b4:a1:8f:66:dc:e5:72:8d:12:f5:1d:75:67:53:df:91:65:
         90:09:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:24 2026 by rpki-client