Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
File:                     rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json)
Hash identifier:          5CTsU/88DDVLLDgrZXTxifj5r/fGv9uT6HsLvaqUbiM=
Subject key identifier:   6F:E9:BB:B3:7D:08:AF:DA:72:B7:6C:F0:58:6A:7D:4D:23:D4:23:7C
Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93
Certificate issuer:       /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
Manifest number:          01C2
Signing time:             Thu 23 Jul 2026 05:12:25 +0000
Manifest this update:     Thu 23 Jul 2026 05:12:24 +0000
Manifest next update:     Thu 30 Jul 2026 05:12:24 +0000
Files and hashes:         1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: uEeY9PUmoDqO9fNBYGEX+84eOP70JQm74X8W6eqcg2Y=)
                          2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: PpBOU4X+uS2a94ESgw3q/TNVKHg9vw4HoislmYncmAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
        Validity
            Not Before: Jul 23 05:12:24 2026 GMT
            Not After : Jul 30 05:12:24 2026 GMT
        Subject: CN=6a61a2b9-a3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:5c:c4:d8:5a:05:85:79:0e:71:2d:0a:07:
                    be:82:55:51:de:34:37:67:11:a2:c3:6e:47:58:46:
                    e8:c0:fb:b8:15:f2:11:16:9e:a3:e5:a6:24:f3:f8:
                    90:19:91:4c:8a:cb:a0:74:16:ff:8c:20:3a:4b:f4:
                    69:74:55:ff:10:2c:af:dd:0a:ec:79:fa:91:30:e4:
                    f0:1c:0c:24:77:d1:fd:85:15:d2:94:ba:69:09:80:
                    ac:1b:25:2e:c6:9f:fd:97:41:a6:b7:0c:ee:f3:a0:
                    db:6e:d4:5f:af:51:53:9d:4a:cb:eb:6b:ad:24:bd:
                    98:23:41:dd:44:8a:a3:11:f9:14:96:86:2c:35:e9:
                    e7:99:ae:c1:04:4c:78:1b:8a:79:06:e2:72:97:a6:
                    aa:37:1a:95:41:36:f8:ef:ae:f0:9f:8b:26:bf:56:
                    07:97:39:c7:0c:76:5a:9c:c7:1c:f9:f0:3d:7f:9e:
                    d6:29:25:f9:d2:0c:30:ae:23:31:b5:d5:a1:cf:a7:
                    e0:ea:e6:03:ab:82:4e:bf:9a:01:09:60:81:ed:f0:
                    df:09:82:d9:50:26:74:40:9f:19:3d:c6:17:3c:e9:
                    41:e4:17:ae:6f:8f:d7:5e:c6:18:64:97:81:16:01:
                    8e:70:d9:18:b1:5b:2a:9f:a5:97:22:77:12:15:3e:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E9:BB:B3:7D:08:AF:DA:72:B7:6C:F0:58:6A:7D:4D:23:D4:23:7C
            X509v3 Authority Key Identifier:
                keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:83:25:fe:e0:39:52:4f:a1:b4:88:0d:e5:99:2c:85:43:
         c0:21:35:41:c5:4a:52:9a:4d:8f:03:38:67:9e:e7:dd:a0:ea:
         bd:6f:98:9f:34:4f:b7:00:f8:75:3d:d9:2f:ac:c9:34:07:22:
         fc:a2:d1:b1:41:e4:7b:a5:98:bd:28:8f:e1:88:a6:15:b0:25:
         21:05:5f:00:b3:3d:1a:b2:2b:d0:c2:35:3b:2c:b6:a3:0c:3b:
         5d:50:e6:9a:47:e3:aa:fd:43:13:83:8a:73:fe:06:25:65:b2:
         57:65:56:1f:ee:05:c5:d4:ea:22:a1:a9:9d:b0:a1:a3:76:40:
         38:a2:ee:89:bb:bd:a7:25:6b:be:3c:07:e2:68:8c:9a:fd:15:
         33:a5:6c:44:a4:88:0e:cc:a2:75:0c:54:dc:70:d1:7d:68:7d:
         9d:cb:79:5b:96:c5:b0:95:63:07:9c:1e:e4:11:3d:c4:6b:77:
         b1:ea:b7:f9:f9:77:70:9b:75:3a:9a:d9:6f:da:72:03:cc:51:
         a2:b6:84:5b:e3:53:01:2a:f4:41:9b:57:9d:d6:42:45:8f:b4:
         b0:d9:86:4b:c6:3d:57:bb:bd:ee:62:fd:bf:60:56:b4:6e:9a:
         88:d1:69:74:63:7e:6d:30:3a:24:2f:eb:86:39:78:41:d8:86:
         f6:bc:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:10 2026 by rpki-client