Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
File:                     J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json)
Hash identifier:          ZIqoT71ZdXFeJNLYPcFVcjhAvRAQU4OoY2BQ3i94DxI=
Subject key identifier:   14:4D:66:16:37:8C:70:D9:52:2C:FE:67:E8:75:59:83:46:A0:C9:E3
Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
Certificate issuer:       /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Certificate serial:       0FA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
Manifest number:          0F8F
Signing time:             Wed 22 Jul 2026 17:41:27 +0000
Manifest this update:     Wed 22 Jul 2026 17:41:27 +0000
Manifest next update:     Wed 29 Jul 2026 17:41:27 +0000
Files and hashes:         1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: iEMxHRRhdZnIdPS0Ik0e0iOWB/HGsvSAC86hXuwWO5A=)
                          2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: RliNwJOrh8ohq0egdtLbM01dmRkfXxaSAwBvI0aDXvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
                          rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4009 (0xfa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
        Validity
            Not Before: Jul 22 17:41:27 2026 GMT
            Not After : Jul 29 17:41:27 2026 GMT
        Subject: CN=6a6100c7-6941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:b2:f5:b6:4e:49:33:1f:cb:31:98:90:65:
                    91:ce:44:83:69:97:be:05:c7:e0:83:6e:78:cc:ce:
                    e0:e4:01:dc:18:9b:b6:9a:5e:29:7d:53:2f:2b:c9:
                    77:5a:e9:be:b6:ef:c2:5b:69:95:d2:9a:75:6e:34:
                    4f:b2:ae:01:e4:be:86:cc:d6:d7:56:a1:52:b4:12:
                    63:ad:b1:a3:04:1c:49:dd:f1:48:46:75:7c:e8:7e:
                    84:2a:ab:30:54:8c:ad:46:38:ef:c7:bc:45:25:c8:
                    fc:aa:d3:34:a2:7b:c4:3b:98:82:ee:91:c0:3c:89:
                    8f:35:4f:f8:6b:a3:a8:f4:7c:bd:9d:6e:53:fa:96:
                    96:31:a9:ad:81:f9:ce:1b:a7:87:d6:04:28:a7:f3:
                    62:3b:29:6d:f0:1d:c1:ed:c8:33:34:d7:5e:49:7e:
                    06:be:29:84:e4:e3:64:bd:6e:ea:55:80:a4:da:3b:
                    74:83:2d:52:4c:93:d2:b9:b7:b2:e5:74:45:df:67:
                    7d:7f:8b:f7:b1:0c:be:e9:79:45:2d:3d:a8:45:35:
                    73:76:32:1c:9c:fc:8b:e2:12:a9:17:4a:11:15:a2:
                    52:12:e3:ea:db:e9:56:fe:d3:60:f0:ac:e8:c1:54:
                    2d:a3:cc:71:c1:34:fe:31:f1:35:84:34:69:96:36:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4D:66:16:37:8C:70:D9:52:2C:FE:67:E8:75:59:83:46:A0:C9:E3
            X509v3 Authority Key Identifier:
                keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:33:42:e6:f6:d3:f4:f9:3e:a3:f6:22:44:2f:ef:05:4e:
         e7:99:4b:46:49:a1:ff:67:3f:d5:1c:a4:d7:96:8a:e2:03:e2:
         aa:73:33:ba:f2:95:aa:d1:4f:a3:43:aa:cb:64:c4:28:54:07:
         13:f8:1a:ae:ef:2e:29:8e:a9:aa:76:07:89:b6:1c:f3:a6:91:
         e7:7d:50:02:9b:82:cd:a5:22:39:f2:88:b2:64:de:4a:ae:45:
         f7:00:e1:a6:6b:28:d9:ef:ee:81:52:d4:e0:1d:b3:bf:d8:67:
         b1:2b:23:da:e3:a5:8c:78:1b:1b:60:31:c4:a2:05:67:87:6d:
         a2:a5:ef:53:a8:66:9a:52:94:79:85:fe:07:f2:3c:c6:42:cc:
         01:af:d0:7c:5a:62:83:9a:90:1d:1b:3b:42:9a:ab:19:de:23:
         97:11:47:cf:9f:20:8a:1d:b9:94:2c:f5:6f:d1:0e:49:fb:18:
         16:af:a8:09:2d:5a:50:7d:c3:f0:18:9a:4d:fc:45:0b:fe:ee:
         7c:8b:2c:55:1a:5d:e6:45:6d:8a:26:07:10:d5:ac:65:81:34:
         3d:af:3d:e1:08:5c:3a:1b:43:fe:3d:b7:d6:09:2b:f1:97:16:
         21:93:a8:06:b2:5b:6c:6a:9d:b1:34:c7:e2:d2:50:db:3f:52:
         82:48:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:52 2026 by rpki-client