Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
File:                     cA9SATINxKfw-nMFyVWhmUwYJgA.mft (raw, json)
Hash identifier:          LRDEUnHl8Yb6W+bnRkZ4Cwz7sl4R1IFjT1McBKhMQfY=
Subject key identifier:   BC:43:24:FA:B0:DD:F9:24:12:BA:02:4D:D4:F7:8E:71:A4:AD:E5:6B
Authority key identifier: 70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00
Certificate issuer:       /CN=A9151290/serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
Manifest number:          66
Signing time:             Thu 23 Jul 2026 10:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 10:01:19 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:19 +0000
Files and hashes:         1: cA9SATINxKfw-nMFyVWhmUwYJgA.crl (hash: +KSmttI8+b472R01HdEbeIDIHRXjNjiG1IPkw7vv8eE=)
                          2: 90360F96F35D11F08865480C646F56BC.roa (hash: +hYht0+VhMqie7zs0TemkZjgGj97GrUe4MXcjgwo+x8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl
                          rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151290, serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600
        Validity
            Not Before: Jul 23 10:01:19 2026 GMT
            Not After : Jul 30 10:01:19 2026 GMT
        Subject: CN=6a61e66f-5dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:ca:e6:0b:4d:d9:76:ed:29:54:f1:21:23:
                    ad:73:f2:dc:0f:4b:56:96:44:8d:54:84:6d:bc:67:
                    4c:f3:f2:53:ee:6a:ca:0a:b9:ee:56:95:9c:28:84:
                    ab:01:b8:ba:91:54:d6:99:4f:99:31:93:b7:44:e9:
                    00:9a:67:db:eb:79:fa:6b:f8:2d:fd:18:33:72:ff:
                    1f:32:91:70:36:fe:dd:4e:d3:81:3c:99:94:33:ff:
                    a9:7f:33:6d:95:08:1c:6e:4b:79:c2:75:79:ce:69:
                    fd:8b:6c:00:40:46:1e:57:9c:bc:c0:9e:71:db:b1:
                    45:6a:20:a0:ad:72:36:c7:4b:04:f3:aa:ee:91:bc:
                    48:30:5c:f6:ae:d8:64:eb:61:5b:61:c5:f0:0c:63:
                    c5:da:52:ad:97:e0:cc:9d:29:a3:47:b8:ca:8c:e2:
                    eb:c0:16:60:95:30:c9:72:76:b8:61:3f:f4:d1:47:
                    20:ee:68:d6:1a:11:15:67:ab:9e:bf:35:e2:13:7f:
                    5d:b9:f9:02:f7:ff:a0:33:d4:a6:5c:2e:af:36:02:
                    61:1b:78:66:1f:47:e4:bb:38:77:d4:2b:b5:8a:d9:
                    7e:17:b4:f8:21:84:04:93:74:54:df:f0:85:26:77:
                    55:5e:9b:58:c3:9f:ef:fd:6b:99:28:34:6a:d1:36:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:24:FA:B0:DD:F9:24:12:BA:02:4D:D4:F7:8E:71:A4:AD:E5:6B
            X509v3 Authority Key Identifier:
                keyid:70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:75:58:71:14:51:85:76:ce:51:73:47:91:5e:4c:77:5f:
         19:b9:9a:1f:47:c4:7b:a1:06:11:16:62:3a:16:55:91:c4:07:
         35:d1:0e:ae:73:9f:10:7a:cf:f6:87:95:33:c0:38:25:22:a0:
         89:5c:84:42:2f:41:7b:9d:5f:89:d5:78:ac:dd:3a:41:2f:1a:
         8e:df:dc:83:4d:f1:5c:ef:0d:9b:6c:b7:83:2b:68:79:31:a5:
         67:08:56:b0:63:dd:57:f1:c2:42:58:0f:b7:1c:7a:73:58:60:
         43:5f:df:95:fb:2d:de:9c:48:bd:eb:20:c4:ce:ca:8d:0f:94:
         24:98:87:8b:ae:3d:a9:4d:db:1b:b9:f0:5e:c4:b1:12:6d:cf:
         a2:3c:5d:7c:59:cc:0a:4c:ed:87:9e:2f:c0:a6:d0:63:29:e7:
         2d:d2:a9:8d:f8:d0:86:c5:a3:58:62:58:72:ca:33:2c:4d:03:
         3f:f5:c2:59:2a:e3:6c:01:3a:ad:83:6d:f3:aa:9a:94:0b:a8:
         37:31:63:80:b8:17:29:f4:1b:85:31:30:f4:f9:2f:12:bb:ee:
         01:8f:27:40:6e:80:9c:c7:49:97:52:82:91:59:4e:54:2a:10:
         84:bf:b9:1e:3f:1e:d6:35:85:3f:a5:bc:44:9d:08:d5:fa:90:
         82:ff:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:24 2026 by rpki-client