Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
File:                     cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json)
Hash identifier:          zporXZy7EaHOnLMkI/DmJHJSbrGSdZgagx+f6xM/4Bk=
Subject key identifier:   38:8B:25:DF:82:11:71:3D:FE:90:E6:AD:0F:96:B4:1C:04:D0:10:4B
Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44
Certificate issuer:       /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
Certificate serial:       08B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
Manifest number:          08A9
Signing time:             Wed 22 Jul 2026 21:01:58 +0000
Manifest this update:     Wed 22 Jul 2026 21:01:58 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:58 +0000
Files and hashes:         1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: inL9r2hQI07iE0TEnuKk+H1SUO5BtrDTYWYUu7XrV+U=)
                          2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: Wg9RfGn7DWEr8GbZKeTSiadhyGcaa2JL5/PabgAQIOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
        Validity
            Not Before: Jul 22 21:01:58 2026 GMT
            Not After : Jul 29 21:01:58 2026 GMT
        Subject: CN=6a612fc6-7b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:b0:32:d0:d8:97:fb:e2:2c:a6:fc:98:7c:
                    69:b0:bc:86:0c:37:dc:9d:1a:df:a5:c8:b2:40:06:
                    25:f7:6a:c1:9e:fa:6b:f4:f2:b8:22:cf:11:97:0f:
                    5a:82:68:8e:22:06:20:18:9e:c2:18:10:c8:eb:b4:
                    02:e2:9f:8c:97:c9:71:38:08:d3:fd:e9:b9:78:94:
                    7d:cb:e4:3f:6c:c1:e5:18:09:22:99:fd:dc:40:38:
                    b5:80:82:2c:cf:01:57:55:05:f8:f7:36:27:17:ed:
                    8b:79:62:a0:b0:b0:ec:b4:c9:e6:f2:5e:5d:6a:cd:
                    5b:84:ef:86:bd:ff:27:74:38:72:37:9b:52:9f:86:
                    3f:3c:b9:c4:11:f4:4f:a6:69:4d:45:7c:2b:14:1c:
                    a4:4e:9f:ee:25:d9:04:46:ff:49:2a:67:cf:04:76:
                    4f:0a:25:b6:67:cc:7e:63:c0:ec:04:35:3c:56:e0:
                    92:e6:41:4f:f0:2f:c4:50:88:4d:ab:94:28:7a:1a:
                    fd:54:57:24:56:dd:9a:95:e9:58:8d:9e:9f:2d:b4:
                    92:32:7e:9c:b8:4f:d3:92:53:ef:ae:58:d5:58:30:
                    48:3a:d0:bc:5f:1b:7a:02:07:ec:04:e6:1d:b4:bd:
                    ee:51:f1:d3:bb:bb:a0:e6:00:df:bf:af:33:8d:61:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8B:25:DF:82:11:71:3D:FE:90:E6:AD:0F:96:B4:1C:04:D0:10:4B
            X509v3 Authority Key Identifier:
                keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7d:08:fe:cc:5a:e6:cb:8d:fd:d8:a2:ea:87:47:3a:8b:e9:
         e5:7f:4a:97:0e:ce:62:cb:b8:12:7b:bc:1e:3c:1d:fb:50:14:
         e2:1a:e3:06:98:96:7e:ff:b6:80:26:ce:a3:a4:2d:b0:e9:f6:
         6d:6b:68:6e:98:72:d6:22:8d:5e:f9:6f:cd:a1:79:a9:1f:45:
         f0:1e:e5:af:53:c9:9a:5e:60:40:9d:44:07:f0:4b:57:8d:6f:
         83:44:8f:f4:aa:3e:29:1b:41:13:ea:f9:45:f2:de:fb:9c:e8:
         37:38:61:1d:61:eb:55:70:d7:8e:50:95:ae:a8:a2:84:8a:06:
         f4:73:24:b7:0a:06:38:2d:0e:65:36:4d:b8:0b:c9:bd:80:59:
         6c:c2:43:27:48:2e:8d:f9:3c:5c:f7:39:d6:86:11:65:c4:86:
         8c:50:64:79:44:e1:24:53:dc:ba:34:3f:da:50:3e:64:f7:ef:
         e8:86:22:f9:1a:9e:ee:11:bb:e4:cb:0c:cb:2c:cd:65:6b:9b:
         8d:2d:66:45:48:a3:97:b3:22:93:02:66:94:8a:be:6e:8b:44:
         b8:dd:2c:d2:7f:9b:7b:36:b4:73:cd:9b:01:ce:6d:b1:8a:4b:
         3e:45:50:7d:d8:c4:9d:0f:23:94:3e:84:d6:ff:c1:b6:4e:de:
         04:7f:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:17 2026 by rpki-client