Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File:                     9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier:          fW3Q2ILo6jB7a3JSWIS+gl6uoEWGunk1COlcyUiraP8=
Subject key identifier:   11:6B:85:CC:0F:DE:C0:39:A8:51:F5:E7:EA:33:18:77:17:2B:46:69
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer:       /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial:       1A07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number:          19C4
Signing time:             Fri 24 Jul 2026 16:32:21 +0000
Manifest this update:     Fri 24 Jul 2026 16:32:20 +0000
Manifest next update:     Fri 31 Jul 2026 16:32:20 +0000
Files and hashes:         1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: W0bW14f4nBEPV1n1HBLQRFsNEAsLz5aJZ6stQ+9vy5g=)
                          2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=)
                          3: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=)
                          4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
                          rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6663 (0x1a07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
        Validity
            Not Before: Jul 24 16:32:20 2026 GMT
            Not After : Jul 31 16:32:20 2026 GMT
        Subject: CN=6a639395-7f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:64:fb:9f:7f:6f:6a:52:d3:e5:a8:b0:bd:5b:
                    3d:e0:9a:5e:1a:45:c4:33:7d:4d:5b:eb:4d:1c:fc:
                    03:1f:cd:5e:dc:c6:6d:f5:4f:1f:1d:d4:dc:46:47:
                    54:94:46:eb:ec:28:44:e2:6c:1b:47:d6:ca:46:6b:
                    ee:01:13:19:49:37:1e:4c:44:13:03:e5:00:c0:ac:
                    73:83:77:ad:51:0e:45:a2:dd:38:56:4d:2a:2d:0a:
                    fe:0c:54:53:cf:15:04:e2:61:fb:0f:42:e5:c6:f9:
                    2c:1c:68:30:77:5f:a3:de:03:02:95:f3:ea:89:32:
                    91:53:cc:12:1d:b0:5c:ee:e5:98:19:50:cf:c9:ad:
                    b2:c6:31:f2:eb:ab:20:2d:33:99:29:30:34:a9:b0:
                    2c:7b:c2:9f:72:69:a5:ed:d5:ba:05:d3:9a:f3:0f:
                    72:b4:d9:48:0d:28:15:94:9b:22:c7:e5:e1:c5:33:
                    92:ac:f7:f7:75:d0:b0:36:57:77:3d:49:01:d3:83:
                    6e:52:e0:96:a7:b2:8d:23:70:72:f2:3e:3e:7f:fa:
                    80:58:00:d6:0e:19:f8:0b:db:12:1f:93:21:b0:d0:
                    b4:5f:fb:b9:2f:1f:c9:58:16:c4:8e:9f:6f:0a:2c:
                    c1:1f:be:c6:98:cb:5d:69:2c:1a:82:3b:9b:16:9e:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6B:85:CC:0F:DE:C0:39:A8:51:F5:E7:EA:33:18:77:17:2B:46:69
            X509v3 Authority Key Identifier:
                keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a1:88:42:c7:f7:55:a8:3d:73:2e:62:53:44:38:47:30:a0:
         8a:b4:2e:39:10:9a:ca:22:9a:0b:dc:11:ee:bf:6e:70:bf:a2:
         46:79:35:e2:0d:60:d1:31:37:b0:a2:ce:0d:1c:37:72:86:0b:
         26:0d:dd:00:a5:6b:9f:bf:5f:15:50:f4:ea:67:e6:b4:35:1a:
         fc:08:cc:9b:1b:43:df:cf:22:b8:ce:34:44:2f:5b:39:1d:8a:
         33:85:36:15:0b:14:53:ec:46:32:de:8a:ac:7d:ae:95:1c:f8:
         b8:4e:e8:77:63:71:e4:35:71:c8:78:ac:6e:7e:e6:04:f1:38:
         d7:ff:b2:8c:04:3d:89:a0:af:7e:cb:a3:bb:38:fa:4c:45:3b:
         bf:71:34:e5:2d:6c:fc:80:0c:cf:ba:7c:31:18:af:d4:e2:10:
         6e:1a:2c:a9:41:8d:68:52:45:cb:39:a3:a6:23:ee:b7:67:d9:
         a3:a0:d1:bf:cb:09:1d:65:82:5e:57:26:c2:3d:ad:fa:b5:d5:
         1a:1a:c8:2a:c7:61:ee:a6:66:1a:8f:9f:da:86:50:88:cf:9f:
         a4:79:b7:11:1c:61:7c:6d:06:eb:44:7e:35:19:15:f6:c1:a1:
         04:13:6e:51:77:18:e1:80:d9:ee:81:a6:46:4b:d9:37:5c:4f:
         07:49:c2:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND
RjJBNEU2NEUwHhcNMjYwNzI0MTYzMjIwWhcNMjYwNzMxMTYzMjIwWjAYMRYwFAYD
VQQDEw02YTYzOTM5NS03ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+2T7n39valLT5aiwvVs94JpeGkXEM31NW+tNHPwDH81e3MZt9U8fHdTcRkdU
lEbr7ChE4mwbR9bKRmvuARMZSTceTEQTA+UAwKxzg3etUQ5Fot04Vk0qLQr+DFRT
zxUE4mH7D0LlxvksHGgwd1+j3gMClfPqiTKRU8wSHbBc7uWYGVDPya2yxjHy66sg
LTOZKTA0qbAse8Kfcmml7dW6BdOa8w9ytNlIDSgVlJsix+XhxTOSrPf3ddCwNld3
PUkB04NuUuCWp7KNI3By8j4+f/qAWADWDhn4C9sSH5MhsNC0X/u5Lx/JWBbEjp9v
CizBH77GmMtdaSwagjubFp4FXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFrhcwP
3sA5qFH15+ozGHcXK0ZpMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0
NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0FFMS82Mzg0M0VEMDk0NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlI
d0lkWHplZnlIc1BQS2s1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVqGIQsf3Vag9cy5iU0Q4RzCgirQuORCayiKaC9wR7r9ucL+iRnk14g1g0TE3
sKLODRw3coYLJg3dAKVrn79fFVD06mfmtDUa/AjMmxtD388iuM40RC9bOR2KM4U2
FQsUU+xGMt6KrH2ulRz4uE7od2Nx5DVxyHisbn7mBPE41/+yjAQ9iaCvfsujuzj6
TEU7v3E05S1s/IAMz7p8MRiv1OIQbhosqUGNaFJFyzmjpiPut2fZo6DRv8sJHWWC
Xlcmwj2t+rXVGhrIKsdh7qZmGo+f2oZQiM+fpHm3ERxhfG0G60R+NRkV9sGhBBNu
UXcY4YDZ7oGmRkvZN1xPB0nClg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:00 2026 by rpki-client