Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File:                     BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier:          vGmwqEKee3a40h0HIY9dp7AUfRrJmbq2YkhLMAozcC4=
Subject key identifier:   14:A2:1C:EB:25:A1:24:3A:31:FB:C1:19:25:AA:6C:51:F5:A0:FC:D2
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer:       /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number:          0151
Signing time:             Thu 23 Jul 2026 06:43:18 +0000
Manifest this update:     Thu 23 Jul 2026 06:43:17 +0000
Manifest next update:     Thu 30 Jul 2026 06:43:17 +0000
Files and hashes:         1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: 2zQZE7QmnyACNXBcafOaimvKQ0WD8LbeDkmVgrL3kv4=)
                          2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: B2RbKCpr/Pny6dSwJCiprlikwDlatrxJu+oMb/gtlQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
                          rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
        Validity
            Not Before: Jul 23 06:43:17 2026 GMT
            Not After : Jul 30 06:43:17 2026 GMT
        Subject: CN=6a61b806-ae16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:39:6a:e3:44:d4:0b:6b:f7:1c:d9:2f:ba:
                    a2:32:c8:7f:a6:0f:52:92:78:6f:95:52:d2:4a:7b:
                    1b:b1:d1:63:60:47:a4:19:81:15:fd:14:9b:f7:3e:
                    b4:96:17:80:b1:0f:fc:46:50:c2:26:fb:2f:f8:59:
                    0f:94:42:2e:e2:66:d0:c9:2c:22:0b:98:e0:bf:f5:
                    c0:ee:90:8b:e4:73:9b:e3:72:10:00:1c:20:9b:b5:
                    cc:27:ea:9f:17:5c:64:23:2b:8c:8f:e3:e7:29:ef:
                    63:3d:4f:02:ae:53:a6:85:43:f8:79:f6:ec:0a:ce:
                    6a:f6:6c:53:cc:ee:0e:44:39:2c:d5:ae:0b:d4:22:
                    0e:30:4e:54:09:d9:19:7d:94:33:51:f7:43:20:67:
                    ce:54:cb:25:c0:85:05:5c:3c:03:88:e4:1b:05:27:
                    23:57:c5:a0:ec:94:ae:ac:e6:46:66:94:9d:8e:bb:
                    50:9e:73:8f:28:c4:84:35:09:9c:cd:d0:75:e7:ff:
                    90:4e:eb:a1:f8:d2:37:e6:b5:d9:86:8e:35:98:f3:
                    92:d0:ce:cc:7e:83:10:54:c2:dc:e3:58:4c:8f:49:
                    c2:20:65:49:4f:19:e9:c7:ed:75:7c:e0:2d:da:4c:
                    32:5d:17:d7:92:3e:83:4f:7f:d0:5f:6e:90:00:3c:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A2:1C:EB:25:A1:24:3A:31:FB:C1:19:25:AA:6C:51:F5:A0:FC:D2
            X509v3 Authority Key Identifier:
                keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ff:31:a5:bc:92:df:91:a6:70:04:59:32:bc:84:f8:56:cb:
         08:32:32:c5:e9:fa:21:e4:a7:69:0d:bd:bf:05:87:94:f4:50:
         86:63:fe:d9:c5:af:38:b1:3a:46:a8:89:f4:a4:0d:a7:d7:05:
         21:e3:7e:99:f2:2b:9e:bf:59:c1:7d:86:cb:49:27:f2:d9:33:
         65:7b:98:18:86:e1:73:c1:34:71:74:ed:6c:5b:77:0d:ff:3e:
         27:49:de:26:e6:79:f1:e3:2c:5f:5e:0f:f3:2b:01:e1:14:d1:
         c2:6d:67:ad:92:46:09:a0:82:12:48:3d:a0:b5:c1:dd:ff:71:
         7c:44:a0:34:dc:8d:ae:36:86:55:00:fb:a6:92:22:0b:cf:ad:
         fa:be:6c:89:d2:65:7f:c5:13:62:27:11:cd:4c:b5:74:e3:61:
         f0:03:67:0c:3c:75:18:af:e3:02:0d:a9:b6:00:cb:39:c4:4e:
         11:50:63:61:55:45:ae:11:ac:bd:49:ff:fc:5b:f8:d8:7f:93:
         43:b8:d9:cb:d2:64:b4:8e:5a:9b:02:b0:c2:0f:09:db:e0:98:
         77:3d:57:3e:0f:66:c4:8e:f3:b7:6e:16:de:ee:5e:ab:4e:4a:
         c0:4d:5c:a3:41:57:eb:f0:83:d4:84:dc:c5:af:49:8b:fd:37:
         6a:58:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:41 2026 by rpki-client