Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
File:                     X9vV31MtLFYgb3sRLnu7MFejmZA.mft (raw, json)
Hash identifier:          THS2JNztYqfCZYPun/LPBtA4N4msQQLOHV2enCcXFSo=
Subject key identifier:   C0:EC:6C:E6:0A:AB:C5:93:60:82:5F:FF:CF:1F:3E:83:C7:8C:96:A6
Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90
Certificate issuer:       /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
Manifest number:          01DB
Signing time:             Thu 23 Jul 2026 04:52:14 +0000
Manifest this update:     Thu 23 Jul 2026 04:52:13 +0000
Manifest next update:     Thu 30 Jul 2026 04:52:13 +0000
Files and hashes:         1: X9vV31MtLFYgb3sRLnu7MFejmZA.crl (hash: 8qiDnW7yWn/1AEy9DpB6Wqj/FyFDvrAWbzjJj6eSfhQ=)
                          2: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (hash: NNMJEwajRGyGNObx6qqodqRkuqhktQjk2L5j1hukx9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl
                          rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196296, serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990
        Validity
            Not Before: Jul 23 04:52:13 2026 GMT
            Not After : Jul 30 04:52:13 2026 GMT
        Subject: CN=6a619dfe-dd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:34:33:61:a2:8a:6e:1d:e7:b3:95:3f:17:
                    5d:42:30:65:76:48:0d:40:3b:9d:78:59:50:e2:40:
                    cd:66:c0:f0:c6:8d:63:3c:00:10:97:b8:39:70:f0:
                    c5:c6:19:6e:57:4c:06:1e:4a:74:97:22:16:c6:33:
                    d3:ac:db:fc:b8:6d:43:be:9f:e6:dd:73:b4:d1:f3:
                    37:31:7c:cf:f8:a7:26:0f:53:a8:d7:7d:0d:fc:94:
                    41:a2:d9:03:fd:2e:1c:59:43:1d:58:df:f4:c6:2f:
                    1a:23:96:cd:b0:39:2b:49:72:4c:f5:0f:ca:c1:d8:
                    92:e2:7a:f5:c5:b5:3a:89:d6:94:3d:61:f5:62:e3:
                    69:81:09:1d:ad:88:19:21:eb:7b:6d:a7:bd:26:79:
                    e4:9f:5a:56:39:49:74:6e:dd:00:29:43:3d:d1:09:
                    1c:9f:7f:a3:4b:92:46:bf:cc:dd:3e:35:7d:d0:ed:
                    9b:c1:1e:70:12:f5:9a:c0:55:05:34:59:ea:e9:ca:
                    d1:7e:f4:9a:cc:44:3f:22:44:26:55:6f:f2:98:a0:
                    96:6e:8b:05:ab:60:15:8b:14:f5:a6:d7:8f:2e:97:
                    b3:15:af:71:ce:fc:06:cb:78:31:1a:95:fe:b7:bc:
                    f6:90:e3:46:f8:0e:df:4b:fc:9b:be:04:3e:66:4f:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EC:6C:E6:0A:AB:C5:93:60:82:5F:FF:CF:1F:3E:83:C7:8C:96:A6
            X509v3 Authority Key Identifier:
                keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3a:a0:4c:8c:2d:ff:55:55:3d:e2:57:d8:89:77:bd:41:58:
         2c:d4:a4:9f:95:2d:0e:14:73:e8:2b:ec:e9:6d:00:a5:97:5e:
         ff:8f:b8:70:08:7b:09:66:4a:3a:cf:3f:c2:0c:b6:bc:a8:ec:
         25:92:fe:28:5e:fb:73:c1:29:46:ac:b2:e1:16:e6:c9:3d:36:
         7f:d6:34:57:67:be:34:5d:f6:71:59:0c:77:d4:1e:8d:3c:ae:
         0e:8d:79:11:ef:e4:f4:2f:f6:2c:f4:b4:15:06:dd:18:10:06:
         49:fa:44:ff:ef:82:ba:46:e1:61:7b:97:3f:73:fc:31:40:2e:
         af:66:e7:c8:31:95:54:e4:8b:3b:57:49:14:45:8c:50:11:eb:
         0e:bf:ee:aa:b4:47:7c:74:3d:d8:10:62:40:a2:bc:21:97:c6:
         4d:a3:2d:17:0f:4b:ea:87:a7:e8:be:9e:33:e2:ab:67:29:8c:
         b0:a1:38:1c:99:05:38:41:e2:e1:f9:f2:77:ec:be:8d:9f:60:
         87:21:29:aa:38:8e:ab:cb:a4:a4:b6:0b:cc:d9:08:3e:73:0e:
         48:df:94:f1:7d:72:63:4a:a6:49:cc:30:1e:ce:e3:cf:75:68:
         55:18:e8:12:b8:f8:67:c4:f3:1f:92:06:bc:23:a1:65:c4:25:
         86:42:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:45:06 2026 by rpki-client