Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
File:                     9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json)
Hash identifier:          sAUeHWpYSzk+Yz7mgrVk8ArWx8xasvWD41XHDkC9jT8=
Subject key identifier:   D6:B8:F0:02:D6:4B:26:0E:9D:9B:74:54:B7:FF:EA:6F:C4:34:86:25
Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43
Certificate issuer:       /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
Certificate serial:       1902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
Manifest number:          18F1
Signing time:             Fri 24 Jul 2026 16:35:19 +0000
Manifest this update:     Fri 24 Jul 2026 16:35:18 +0000
Manifest next update:     Fri 31 Jul 2026 16:35:18 +0000
Files and hashes:         1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: l3V0ts5ufcBS8eQ72NHOAFAvphC8eqA9Qdk9pK4HA2k=)
                          2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: bxTSC+yZwkY7y4XdQ30YAL/3AOcH6Ab38vLZsaGuqzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl
                          rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 16:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6402 (0x1902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154020, serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
        Validity
            Not Before: Jul 24 16:35:18 2026 GMT
            Not After : Jul 31 16:35:18 2026 GMT
        Subject: CN=6a639447-5a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:cf:c5:7e:9e:5c:11:46:0a:0a:ec:cd:6e:
                    d6:c1:23:cb:da:69:80:8b:b4:6a:61:28:cf:33:3e:
                    ad:01:43:a7:5c:37:60:fe:bf:46:80:ba:63:ad:ce:
                    77:fc:25:6b:45:d3:8d:c3:8e:34:fa:d4:90:af:f0:
                    d3:bf:1e:c4:47:4d:44:93:b9:0d:c7:df:07:68:d8:
                    be:db:b2:d5:e7:93:ac:f2:fd:45:06:76:9f:24:23:
                    16:f0:e6:f9:f6:de:94:16:ff:78:39:11:1b:9c:b0:
                    c2:b7:1d:45:bb:b1:b7:f1:63:03:56:62:c5:88:52:
                    22:f5:3a:a9:8c:08:05:b3:dd:52:0a:cf:71:7c:1c:
                    82:fe:04:b6:fe:9f:2b:f3:4e:65:21:a4:d3:25:ad:
                    fe:2a:2d:5a:d9:d9:d1:4d:ea:5e:6a:a7:bf:14:01:
                    f0:e2:d4:df:56:dc:ea:23:08:59:ba:8d:05:3b:71:
                    16:cf:c4:e1:81:c7:da:24:85:85:ee:3c:56:25:ac:
                    b5:1c:cf:ab:3c:38:bb:42:61:c2:31:22:a4:62:62:
                    7f:2c:e9:1f:da:95:db:b8:45:4d:04:f1:e8:cd:fe:
                    da:fe:f4:81:53:b8:26:27:d7:27:34:78:04:09:81:
                    66:29:a3:79:db:c4:cd:7a:7a:30:c1:62:5e:5d:40:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:F0:02:D6:4B:26:0E:9D:9B:74:54:B7:FF:EA:6F:C4:34:86:25
            X509v3 Authority Key Identifier:
                keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:58:9d:a2:05:52:a8:18:5b:34:ce:16:73:91:c5:41:d7:7a:
         cc:c4:53:f7:eb:10:ba:07:fb:42:54:a8:c3:6d:f2:2d:90:8d:
         c7:c5:a0:7d:55:c5:a8:09:5f:8b:4d:a4:32:df:f1:05:1e:e2:
         4a:a5:32:22:9c:5e:a2:22:f9:42:89:e8:27:71:a3:80:e7:51:
         96:f4:b0:32:cd:ae:2c:ce:14:dd:ef:eb:e1:76:94:fe:31:ce:
         66:3f:20:22:52:a8:14:57:0e:f7:4b:61:95:a8:db:a4:ef:d0:
         d2:c3:c1:e2:a3:d8:20:01:e7:cd:e3:7a:30:e0:d9:5e:d8:04:
         7a:92:3c:0d:1a:e7:2c:c0:4b:94:92:a0:5d:35:a9:46:d7:5c:
         14:51:6d:29:8a:ae:b8:89:40:d6:1c:b5:4f:05:28:99:c5:01:
         b7:d3:44:91:a5:cb:64:5b:6a:d0:4b:84:c5:5f:03:60:f1:1a:
         2d:68:f1:5d:62:cb:7b:1b:17:7a:27:bd:de:6d:ea:b2:7d:77:
         d1:32:27:98:53:75:c4:17:28:84:7f:f8:d2:0d:cc:b6:30:ef:
         2c:ec:e8:a4:92:f2:a4:45:52:13:a7:8b:fe:8f:a9:1a:2d:0c:
         0d:e4:ee:67:2d:d8:62:58:5b:7d:c1:75:c6:ae:bb:c1:28:11:
         66:3d:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:58:34 2026 by rpki-client