Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
File:                     9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json)
Hash identifier:          8iIxH6Bz6rV2F88CTFO1q7cRwlJxXDX86q+tcyCi+zo=
Subject key identifier:   BB:AA:64:3E:09:40:5C:52:63:9F:67:05:9C:F8:1B:9B:36:F6:AB:75
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0E7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
Manifest number:          0E55
Signing time:             Wed 22 Jul 2026 17:57:46 +0000
Manifest this update:     Wed 22 Jul 2026 17:57:46 +0000
Manifest next update:     Wed 29 Jul 2026 17:57:46 +0000
Files and hashes:         1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: ApFQESIlSIjBeB3m41cCiv2YxC8V4cp36Dx2E6HN3zY=)
                          2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: Ec8W4gQuX0b++CAV01O5jV4Wjhz49qlbass79pnKtTU=)
                          3: 79666614E79311EC81D3720BC4F9AE02.roa (hash: Hpcf4lgDgZQzXJtpEHpaQml11q/y16dSr2w1HCLRatk=)
                          4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: BuWqwvZP/WAlc5pltyqdqjYN2tYsPZenNwkSyiZ+IjM=)
                          5: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: jTINudEF1PytBKZidbXRaxHONjKZ1aZaJMZAVtgeI8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3706 (0xe7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Jul 22 17:57:46 2026 GMT
            Not After : Jul 29 17:57:46 2026 GMT
        Subject: CN=6a61049a-e86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:c1:62:bd:5a:a3:ec:9e:54:48:02:a0:0b:
                    c7:db:21:9c:19:89:64:f2:a4:12:81:55:e2:3e:00:
                    3e:59:da:67:0d:20:f0:c5:75:dc:74:46:e3:57:80:
                    62:eb:cc:72:20:c9:96:50:e7:50:08:1c:a0:c8:d5:
                    20:fb:eb:be:bd:08:4d:ff:f5:10:84:1e:71:61:3a:
                    30:4d:07:2b:e6:29:2d:0f:56:33:63:df:2a:42:f4:
                    28:d3:50:12:13:7f:a3:9c:b5:54:06:1a:45:8a:c0:
                    07:b9:39:e9:a7:f6:6a:02:a7:63:d9:01:64:2a:e8:
                    b6:2a:68:c6:16:a2:41:cc:53:f0:d0:43:e2:4c:19:
                    9b:a7:80:f9:24:ac:54:8b:0c:25:9b:9a:87:d0:ba:
                    bd:37:e7:0a:07:79:05:10:8a:6b:98:61:0a:a4:2e:
                    ee:53:49:98:eb:d1:58:8f:a9:e9:6e:23:b1:cb:4a:
                    d3:94:57:54:56:e3:3c:1e:86:b6:7a:40:c1:87:bc:
                    16:2e:84:c2:2e:d5:88:c7:eb:16:e6:4b:a4:84:20:
                    8f:85:28:eb:f4:f0:10:28:f7:58:06:0d:6c:c7:60:
                    5e:b7:fa:1e:98:e2:9e:43:0a:13:b5:ad:87:52:d5:
                    ca:22:a4:bc:a8:cd:16:1b:52:36:dd:14:d1:5a:14:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AA:64:3E:09:40:5C:52:63:9F:67:05:9C:F8:1B:9B:36:F6:AB:75
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:e7:93:6f:85:7b:b9:0e:cd:30:43:03:17:56:c9:e6:23:d9:
         0a:2c:15:15:61:46:12:f0:7f:02:da:5b:af:da:5c:64:ad:7c:
         4a:20:35:68:1a:f6:15:58:6c:c4:24:45:b0:70:e6:72:da:64:
         e7:d0:17:5a:14:91:3f:14:a9:45:6b:e9:d8:ba:e3:cf:f6:e9:
         cc:02:aa:c5:ac:43:cd:8e:e3:ec:e9:19:09:87:2a:46:0e:80:
         7c:85:25:23:5c:4c:98:75:ea:8c:eb:05:d1:cf:91:f0:4e:7b:
         b7:e2:92:37:00:06:e8:bb:d3:5e:fc:41:36:f6:92:3c:e6:3a:
         20:0e:4e:6c:82:e4:59:ec:77:30:34:53:17:ae:b9:28:bd:ae:
         bb:af:37:97:b2:10:00:12:c3:25:84:ae:c6:75:dc:86:2f:d1:
         03:60:a7:ba:d2:f5:b6:d2:bf:93:6c:81:7d:96:9c:2d:36:de:
         a4:5f:a9:7d:c9:0c:8f:b2:47:ec:ee:75:d3:27:b8:56:21:73:
         28:af:5a:d0:09:a7:39:44:78:4a:eb:5b:8d:38:6c:bb:a2:d6:
         3a:99:d9:51:60:72:9b:1e:e9:33:ae:42:b6:98:60:14:98:0e:
         f2:42:11:91:f3:85:2c:e0:53:7a:f0:29:31:f2:69:16:4d:d6:
         08:12:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:57 2026 by rpki-client