Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
File:                     Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json)
Hash identifier:          BYcZzPoxNHhD//ef3EEfC4/Whyfs89ive4okDg9A94I=
Subject key identifier:   79:AE:6E:EA:02:4B:D4:26:4E:67:E8:7F:AE:69:05:58:E8:F5:B1:CD
Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Certificate issuer:       /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Certificate serial:       0BCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
Manifest number:          0BB9
Signing time:             Wed 22 Jul 2026 19:23:15 +0000
Manifest this update:     Wed 22 Jul 2026 19:23:14 +0000
Manifest next update:     Wed 29 Jul 2026 19:23:14 +0000
Files and hashes:         1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: FEVllknfx2LszCfWGhVa33qIZ90tLDBOVYDQHPYvbaA=)
                          2: 81475298480C11F199A48156C7833773.roa (hash: cpLZfDFiGbjAsj6PnDXYwfwJiojfqV0NY0p2EN/1/Zk=)
                          3: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: 1YzJKqvdmetf6cd4TL4EhxNZ82iLKjkZrbG403TRtdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
                          rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020 (0xbcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
        Validity
            Not Before: Jul 22 19:23:14 2026 GMT
            Not After : Jul 29 19:23:14 2026 GMT
        Subject: CN=6a6118a3-4031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b7:18:14:4f:bc:f2:3a:30:da:c3:d4:21:ef:
                    7c:6c:df:09:23:b0:17:ce:91:6a:52:12:a6:c4:2c:
                    9c:bc:1a:e7:40:b0:f1:76:a8:41:1a:dd:16:bf:92:
                    4e:3d:4c:23:67:87:c7:77:a1:e7:79:8a:99:70:31:
                    9f:0a:86:b3:55:48:2f:95:cc:5d:7e:d2:4f:6c:fd:
                    18:45:76:75:f2:de:bf:f0:1b:00:32:b6:d6:8c:ec:
                    03:87:ec:cd:d4:d5:54:df:4c:56:00:9f:4b:a1:af:
                    6d:c1:2d:1d:e7:7f:cf:61:2f:06:bd:c0:50:8b:35:
                    a4:0f:76:8a:f0:8f:c5:77:b7:e1:1b:77:05:78:e4:
                    dd:87:e9:fb:90:7d:e4:58:9e:f2:9d:fb:80:a5:38:
                    ba:e9:91:13:5f:11:91:29:94:25:c4:06:cc:4b:26:
                    6f:37:7c:8e:72:9a:77:26:a5:0f:59:82:47:60:16:
                    5d:cf:d6:da:3c:c0:1a:60:f3:80:d9:6c:0e:0a:4e:
                    d1:4d:cf:4b:97:ef:b7:db:14:d5:ba:e7:47:25:07:
                    b3:21:83:d5:e2:30:b6:24:b5:2f:2c:d6:0c:85:a9:
                    7e:6c:99:1c:d3:b2:86:77:70:08:3f:ad:d1:85:16:
                    7a:18:eb:20:7d:40:b0:91:fa:ba:da:1f:78:07:4d:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AE:6E:EA:02:4B:D4:26:4E:67:E8:7F:AE:69:05:58:E8:F5:B1:CD
            X509v3 Authority Key Identifier:
                keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:5a:78:14:77:ac:37:b5:bb:cb:2e:c6:cc:f2:48:70:3a:5c:
         a0:1d:dd:e8:d3:64:89:ff:26:f6:87:8d:e3:29:75:00:17:c2:
         e0:24:c1:06:7b:15:53:e0:9b:bb:fa:cc:4b:39:3a:25:6f:a5:
         72:85:06:f6:78:2c:74:c9:39:31:89:c1:d3:82:aa:49:49:fd:
         e6:eb:34:6e:5a:f7:e9:15:62:b7:3c:7d:f6:49:c8:01:05:51:
         3c:ea:60:e0:22:92:04:6d:2b:d6:06:cb:9a:de:c2:ca:04:4c:
         69:30:84:3b:70:c7:c5:88:a2:0b:0b:fc:8b:49:d6:56:da:e4:
         c6:a4:91:9c:31:f8:c4:89:2d:a6:b0:da:e6:28:22:81:c2:65:
         f1:ae:98:33:c7:47:5d:f2:bc:41:e3:b3:bf:ba:a4:ae:66:7d:
         84:8c:00:96:9c:47:be:62:18:74:f3:ee:3f:b4:47:fb:69:34:
         38:d6:71:25:0a:ac:9c:f7:97:60:8a:4a:a5:e4:9e:a4:0f:2e:
         89:47:86:40:ac:62:dd:1d:10:12:66:8b:98:07:86:98:79:79:
         30:38:c5:7f:61:b3:78:a9:e6:d4:e6:33:aa:e5:9b:e3:b6:0b:
         11:3d:9e:7d:92:c8:54:38:03:d3:79:a0:bf:13:58:fa:59:94:
         5c:42:98:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:54 2026 by rpki-client