Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
File:                     2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json)
Hash identifier:          feIxDhcNOxNKxVJaVBuTrXK2tpsos5PDKq/7mShR3Lw=
Subject key identifier:   A4:74:BC:80:4E:E4:97:45:B0:E9:98:9F:48:E5:EF:56:6E:C8:C9:8E
Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29
Certificate issuer:       /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
Manifest number:          013C
Signing time:             Thu 23 Jul 2026 07:04:43 +0000
Manifest this update:     Thu 23 Jul 2026 07:04:42 +0000
Manifest next update:     Thu 30 Jul 2026 07:04:42 +0000
Files and hashes:         1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: XhiJ3VWwV3pYzjfW2opZYigHMwZDMLyizq5jkL/7sas=)
                          2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: Mbaq1JxQwVcFP87z4eBI+1tbhFSk65AD4tx8mWL3NcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29
        Validity
            Not Before: Jul 23 07:04:42 2026 GMT
            Not After : Jul 30 07:04:42 2026 GMT
        Subject: CN=6a61bd0b-a31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:8b:01:e1:ea:da:8c:ad:bb:9c:a9:e2:fe:
                    0c:55:af:e7:11:99:8d:d9:eb:12:49:47:bc:fb:e4:
                    64:63:4c:b2:10:b0:4c:27:d7:c0:ef:ff:69:1a:99:
                    dc:bc:1e:2e:32:ec:3f:e2:f3:1d:b3:4e:50:11:6b:
                    39:97:f6:15:1e:4c:5b:ef:0b:62:25:cb:08:c7:6b:
                    3c:ee:10:67:db:6b:ed:f0:4b:64:23:b3:9c:ec:89:
                    1e:67:85:17:0c:0a:a7:62:9c:14:23:35:31:d2:3b:
                    a3:7b:d1:2d:1c:34:d2:e2:09:96:31:50:93:2b:37:
                    4f:99:ec:71:6e:fd:d6:60:c8:9a:28:5b:dc:ab:5f:
                    ac:49:44:4c:89:af:31:d3:7d:ac:40:2b:6d:a5:a4:
                    57:2e:f9:d9:f9:57:8d:57:3e:48:11:06:39:c6:c1:
                    44:ae:82:8c:08:5f:d7:88:68:7d:cc:25:9a:4b:c4:
                    f4:03:f0:5f:9c:e3:51:4a:36:b5:2b:b8:3a:ac:9d:
                    5d:b3:25:6a:05:10:62:3d:2f:0f:66:14:6f:5f:ee:
                    fa:56:c1:ad:03:5d:cd:da:ba:b4:86:0d:2b:da:44:
                    6f:74:9e:3e:6a:6b:3d:4d:0e:5d:69:14:4f:6e:97:
                    c3:17:e6:8c:b2:0e:7b:fe:83:32:f1:c7:3b:b9:78:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:BC:80:4E:E4:97:45:B0:E9:98:9F:48:E5:EF:56:6E:C8:C9:8E
            X509v3 Authority Key Identifier:
                keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b2:e9:23:9e:fa:29:6d:db:26:80:e4:66:82:ef:f7:56:bc:
         61:93:dd:e1:20:58:44:76:de:5a:cc:19:42:6f:36:9a:25:d7:
         a2:5c:df:ae:fb:b3:a8:17:5d:2c:b2:2d:37:47:cc:0e:34:de:
         09:0d:c9:73:41:52:7a:bb:f2:34:10:fa:1f:6c:1b:ce:5b:70:
         f5:62:ef:71:2b:c6:49:2a:d8:fd:b4:0c:77:bd:d8:59:05:7f:
         a3:9a:0c:0c:76:a8:ab:00:61:9d:c7:ad:34:54:5f:0e:e8:6e:
         5a:3b:f5:76:aa:f3:14:3f:e3:6e:d8:28:40:e1:88:19:3f:bc:
         d8:c4:b9:ca:ad:c9:a0:01:da:46:d1:ea:71:68:3a:c7:0f:bc:
         2c:b0:e5:52:2b:17:71:bb:ad:26:d9:32:00:22:98:00:35:5a:
         e8:a5:8d:2b:29:52:47:59:e6:55:4c:0b:30:07:33:5d:c9:85:
         7f:e2:dd:95:2d:88:fe:83:0c:94:fb:c9:0e:b7:0a:7a:cb:16:
         65:d6:c7:c0:e6:a1:67:72:0b:c6:17:0f:93:46:61:c2:94:78:
         4d:9d:8f:b7:1f:e7:c9:81:14:ba:38:8a:fa:d9:25:c6:d3:c2:
         dc:ef:14:a5:81:bc:67:e3:b5:cc:af:45:ad:a4:78:fe:8b:1c:
         e8:a2:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:54 2026 by rpki-client