Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
File:                     2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json)
Hash identifier:          y3x4Atc3cY91xl17GDRbyugMR0LcyjhQl9aoesB8nkM=
Subject key identifier:   5B:07:6E:9E:1D:3F:EC:5B:AA:E9:F7:9F:63:F7:CC:06:AF:C9:C0:A6
Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59
Certificate issuer:       /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
Certificate serial:       0AB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
Manifest number:          0A9A
Signing time:             Wed 22 Jul 2026 19:56:04 +0000
Manifest this update:     Wed 22 Jul 2026 19:56:03 +0000
Manifest next update:     Wed 29 Jul 2026 19:56:03 +0000
Files and hashes:         1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: d8HFxgQ57tktR2hBJT7P8BY0zYRuflOeLDNLHU0VcN8=)
                          2: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=)
                          3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: OG3ctaEtxzOpwlGGz1iZBXWwa/TL/RFeipRYOMMEKxw=)
                          4: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742 (0xab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
        Validity
            Not Before: Jul 22 19:56:03 2026 GMT
            Not After : Jul 29 19:56:03 2026 GMT
        Subject: CN=6a612054-9130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:6f:c0:99:34:1d:7e:52:d6:15:8e:3c:c8:
                    4c:bb:70:f8:2b:37:88:e8:68:7e:e7:03:cb:cd:4b:
                    0d:8c:aa:3f:a5:00:39:f5:38:ff:23:e5:bc:e3:ce:
                    0f:89:ce:b2:10:9b:c3:9c:62:c9:b5:76:a3:16:78:
                    51:37:fa:38:f9:ba:33:79:81:fa:87:62:01:14:7a:
                    0f:20:c1:85:d4:02:5e:5e:bc:d3:c0:87:13:28:a0:
                    1f:c5:2e:e0:5a:c7:f9:09:cd:94:ef:35:9f:7b:c4:
                    b0:f2:6a:5e:31:dc:fb:30:bc:91:f6:08:19:42:ac:
                    20:81:cf:6a:fe:06:d7:92:cf:d2:64:f3:b2:ef:d8:
                    27:29:90:cb:b1:b0:55:45:9b:56:ee:30:6f:65:dd:
                    35:fc:f0:85:f2:54:60:16:14:6b:5f:83:0f:2e:98:
                    d7:3f:a5:33:db:6b:6e:5d:db:9c:bc:23:bd:2f:08:
                    ca:2d:fe:31:38:7d:68:27:17:b9:9e:3c:f4:67:56:
                    6c:2b:ab:09:ce:08:1f:a3:40:c5:4f:ec:40:61:62:
                    5b:95:f9:76:73:df:05:27:b3:ce:0d:aa:63:fe:a3:
                    ca:bc:a8:55:b1:29:7d:d4:a1:e5:5d:cb:01:82:e7:
                    38:b8:11:ad:42:78:65:e0:83:b2:91:d9:ea:38:66:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:07:6E:9E:1D:3F:EC:5B:AA:E9:F7:9F:63:F7:CC:06:AF:C9:C0:A6
            X509v3 Authority Key Identifier:
                keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:47:b4:1b:29:33:1f:ea:bb:51:c5:24:d2:b1:87:21:6f:0b:
         1d:40:d0:d7:1f:01:1b:09:82:61:6b:8d:1b:1d:92:a2:10:f3:
         d1:b1:58:e0:15:99:6c:35:e7:79:ce:0b:68:52:95:50:ec:75:
         77:43:da:95:eb:d6:d5:fb:3a:87:4c:82:76:81:9e:59:3e:59:
         c0:49:da:f5:82:b0:0b:f2:bd:5a:9e:e4:12:9f:8d:0e:ce:4c:
         83:d5:c0:8b:f4:bf:6b:66:7d:42:e0:b6:25:15:85:7f:da:0d:
         28:04:19:0a:e4:2b:b7:73:44:26:d2:d4:54:46:d6:1b:8b:52:
         a3:46:48:e6:4c:6b:7d:52:1c:56:d1:a6:21:f9:91:38:9f:d5:
         fc:53:11:fb:03:2d:e7:aa:56:69:d2:90:cc:22:04:e2:0a:a9:
         36:af:13:70:da:00:5d:58:60:4d:1b:b4:c0:47:20:d1:63:98:
         b3:41:14:4e:e0:49:66:8d:b8:16:47:99:e4:a9:01:05:d3:ff:
         ec:9b:b7:d3:f0:cd:ba:68:54:98:b9:32:72:6a:a3:40:21:9f:
         88:d9:22:04:cc:82:54:78:4e:5f:2e:40:58:e2:54:2e:d6:07:
         de:69:c3:d5:e5:fd:2e:26:2e:29:f2:e5:8d:3c:be:80:fd:bf:
         b7:c0:63:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4
MzgwQzA4NTkwHhcNMjYwNzIyMTk1NjAzWhcNMjYwNzI5MTk1NjAzWjAYMRYwFAYD
VQQDEw02YTYxMjA1NC05MTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrxvwJk0HX5S1hWOPMhMu3D4KzeI6Gh+5wPLzUsNjKo/pQA59Tj/I+W8484P
ic6yEJvDnGLJtXajFnhRN/o4+bozeYH6h2IBFHoPIMGF1AJeXrzTwIcTKKAfxS7g
Wsf5Cc2U7zWfe8Sw8mpeMdz7MLyR9ggZQqwggc9q/gbXks/SZPOy79gnKZDLsbBV
RZtW7jBvZd01/PCF8lRgFhRrX4MPLpjXP6Uz22tuXducvCO9LwjKLf4xOH1oJxe5
njz0Z1ZsK6sJzggfo0DFT+xAYWJblfl2c98FJ7PODapj/qPKvKhVsSl91KHlXcsB
guc4uBGtQnhl4IOykdnqOGZQAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsHbp4d
P+xbqun3n2P3zAavycCmMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz
OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u
eDEyc3A5NGltVmFEZ01DRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn0e0GykzH+q7UcUk0rGHIW8LHUDQ1x8BGwmCYWuNGx2SohDz0bFY4BWZbDXn
ec4LaFKVUOx1d0PalevW1fs6h0yCdoGeWT5ZwEna9YKwC/K9Wp7kEp+NDs5Mg9XA
i/S/a2Z9QuC2JRWFf9oNKAQZCuQrt3NEJtLUVEbWG4tSo0ZI5kxrfVIcVtGmIfmR
OJ/V/FMR+wMt56pWadKQzCIE4gqpNq8TcNoAXVhgTRu0wEcg0WOYs0EUTuBJZo24
FkeZ5KkBBdP/7Ju30/DNumhUmLkycmqjQCGfiNkiBMyCVHhOXy5AWOJULtYH3mnD
1eX9LiYuKfLljTy+gP2/t8BjeA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:23 2026 by rpki-client