Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File:                     9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier:          yq3VkDJTE0OBZfdGFA9soOdhT6m5U/qlO17dvoU1sfs=
Subject key identifier:   6E:E1:D5:41:01:F7:F0:F7:F5:6A:04:85:E0:6C:60:B2:1F:52:61:AC
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer:       /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial:       0F9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number:          0F86
Signing time:             Wed 22 Jul 2026 17:40:28 +0000
Manifest this update:     Wed 22 Jul 2026 17:40:27 +0000
Manifest next update:     Wed 29 Jul 2026 17:40:27 +0000
Files and hashes:         1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: eaYSar1SsXY0iPT15S6iU3WoqyqxUn2Pz7FNUML/MkY=)
                          2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: xeSp+ee2o5QPG9Bonf7PC8aiLXnBIzPrcdEWH1qZB/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
                          rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3994 (0xf9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
        Validity
            Not Before: Jul 22 17:40:27 2026 GMT
            Not After : Jul 29 17:40:27 2026 GMT
        Subject: CN=6a61008b-30ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:25:ad:9b:dc:f5:62:97:54:9e:7c:e6:18:
                    7d:b3:0f:08:0b:22:6a:22:d4:73:37:fd:42:ce:a0:
                    67:e8:3a:3c:0e:ed:0e:59:02:2e:78:a5:67:9a:91:
                    af:5f:02:dd:f5:b2:60:6c:5c:80:1c:60:73:e7:f7:
                    f1:35:7e:fa:27:e2:22:68:92:7d:d9:b4:38:5f:7c:
                    85:20:b9:0a:4f:9d:56:b1:62:db:6e:7c:b7:19:21:
                    9f:fa:93:7b:b6:68:a8:f0:43:be:48:90:ac:9f:d5:
                    dd:3e:04:93:e7:f1:2c:3a:da:71:df:38:2f:17:08:
                    ba:03:38:8b:94:7b:67:52:75:3a:d1:ee:a1:ba:41:
                    28:31:3d:16:d3:af:20:22:ca:a2:f3:73:78:b9:62:
                    45:2f:7f:f9:47:7c:e9:69:93:39:5e:48:11:e6:b3:
                    ad:32:ae:e1:4d:05:d7:7b:39:73:e2:b7:ac:c7:9d:
                    ea:fc:af:9c:26:3a:38:6a:9c:a9:be:24:22:dd:46:
                    ba:c5:31:49:e8:27:1d:b9:0f:de:fd:b9:c7:44:38:
                    15:ae:1e:51:0d:09:54:c8:e8:e4:27:7e:5c:8b:76:
                    16:88:2f:62:69:43:74:0f:1c:43:e8:1e:a6:91:cd:
                    5d:7d:8d:b1:41:9c:9d:95:96:c9:80:40:f8:50:a8:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E1:D5:41:01:F7:F0:F7:F5:6A:04:85:E0:6C:60:B2:1F:52:61:AC
            X509v3 Authority Key Identifier:
                keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:e0:ec:86:bd:b7:bf:88:35:cb:00:35:5e:d9:7c:c5:b3:
         35:00:4b:bc:6e:9b:29:5a:c5:a7:4e:ab:a4:5f:f3:c3:bf:1d:
         11:e1:8d:3d:eb:52:da:de:2d:e9:e9:52:b4:e7:59:2e:f9:1d:
         37:2f:f6:9b:fc:26:5d:8e:fa:67:d9:86:73:43:30:6e:24:5a:
         a2:b5:35:b8:6b:08:f6:62:07:e0:4e:f1:b7:0d:c2:0c:a3:ca:
         48:db:4a:01:dd:f1:b2:98:c4:61:ff:07:16:3c:7b:2c:14:d9:
         49:ef:37:b7:5c:94:5a:e8:ce:e9:e3:d1:46:b5:81:a3:e2:23:
         59:3a:26:68:f9:94:1e:1a:00:9b:2d:a5:1e:8f:51:c4:a6:78:
         d3:90:35:2b:9d:70:3c:99:b6:9d:8b:65:f4:15:33:fb:67:1c:
         24:57:b0:b1:d5:e3:3e:25:a9:fd:4a:78:df:0c:8c:d2:6a:c4:
         a6:4d:97:25:82:1f:50:15:89:15:6c:72:8e:b8:79:19:09:19:
         4b:54:75:69:a5:d7:20:bd:4d:38:97:5a:35:ac:06:18:b2:83:
         46:c1:db:9d:23:50:96:49:22:e8:85:cc:2d:ba:c1:33:d6:64:
         2a:b0:a0:78:7b:1f:ee:48:4a:c8:30:af:2b:a4:82:15:5b:dd:
         02:74:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:53 2026 by rpki-client