Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
File:                     u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json)
Hash identifier:          Is3p3O5bCB2qSgn+83AqpSqmBJSyqeoLITtTTvtdRmU=
Subject key identifier:   61:5A:82:60:EE:2A:58:AE:F4:1B:50:83:A8:DF:42:6B:C9:6B:01:77
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Certificate issuer:       /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial:       09EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
Manifest number:          09E0
Signing time:             Wed 22 Jul 2026 20:16:13 +0000
Manifest this update:     Wed 22 Jul 2026 20:16:13 +0000
Manifest next update:     Wed 29 Jul 2026 20:16:13 +0000
Files and hashes:         1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: rvny+i2QikUKDYu/AKkq2FK30oa69L4ZBWm2RkTZdvI=)
                          2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: TBAaKtqT6P0ZL94ya5hEsalq4rRbeHQQPW8oTHhvKeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
                          rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
        Validity
            Not Before: Jul 22 20:16:13 2026 GMT
            Not After : Jul 29 20:16:13 2026 GMT
        Subject: CN=6a61250d-3c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:6a:b6:8c:8c:7f:94:d2:cf:e6:26:6a:99:
                    76:3c:e2:c8:89:a1:79:3a:9b:af:6c:62:d2:1d:f4:
                    23:21:4e:97:33:22:c2:b1:ae:12:d6:47:8d:c8:2c:
                    08:7b:c8:6f:e9:9b:73:6b:97:1a:47:c2:30:17:14:
                    40:87:fe:ce:0d:59:e9:86:2d:12:00:20:d7:df:23:
                    6c:fe:d8:e2:50:1f:98:dd:75:49:cb:e5:2b:fc:f6:
                    5c:0d:51:af:8b:a4:ae:20:8c:87:95:1b:5c:eb:a1:
                    60:59:d8:50:f3:9a:09:1d:09:d4:51:d3:92:60:0e:
                    65:6f:f5:22:db:f6:9e:38:d2:65:b0:5b:b9:16:bf:
                    40:a1:6e:b5:b8:c3:38:52:3d:d5:99:52:68:95:63:
                    59:fd:67:ab:cd:f4:93:85:ba:ff:87:b8:8c:9f:2f:
                    ec:56:4f:b1:2f:8b:1a:a3:cd:39:c5:8c:8e:74:9d:
                    60:a0:eb:e4:81:12:cd:89:ca:26:e6:d4:de:d8:a3:
                    d4:88:ac:92:13:08:c1:f0:7d:81:f7:61:ed:bf:76:
                    5a:a1:28:b9:a8:a9:2f:61:08:c4:90:d6:59:f3:6d:
                    e2:3a:21:c5:92:26:2d:95:b4:10:e4:bd:bb:c1:bd:
                    c5:3f:82:42:81:eb:4b:b4:a8:96:23:bf:8d:27:b4:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:82:60:EE:2A:58:AE:F4:1B:50:83:A8:DF:42:6B:C9:6B:01:77
            X509v3 Authority Key Identifier:
                keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:d6:c9:f0:34:d0:39:a0:6e:48:54:df:3d:6d:16:99:7a:
         3e:a9:6d:dd:50:fd:68:57:81:dc:fa:67:d5:88:d5:39:5c:5d:
         7d:7f:d6:0f:59:c3:46:3a:02:f6:66:dc:91:73:6d:dd:dd:71:
         b0:ca:77:64:cc:90:dd:7f:e3:3d:39:4f:9c:a4:0a:03:eb:90:
         82:ae:73:86:34:8a:43:df:30:26:41:95:9e:d5:19:a7:de:20:
         4c:e7:da:92:5f:13:c8:36:d2:32:55:10:61:54:f5:a3:3d:60:
         ae:ee:7f:12:a7:8f:c2:88:b8:99:b2:4d:f5:87:0f:3c:82:24:
         64:03:69:d6:63:7d:06:88:e5:a7:60:a2:a3:f8:a7:aa:4a:7b:
         4b:6e:77:23:15:6b:59:69:58:e4:2b:b0:03:29:2f:4b:70:50:
         cf:4d:6f:21:29:ec:c0:2d:5c:1c:cf:57:36:bf:bc:18:ff:43:
         76:94:7b:99:d6:c0:3b:8f:93:51:a5:3b:2a:45:3c:17:10:b9:
         a5:f1:36:c3:cd:a4:76:69:cf:73:16:07:dd:c3:7e:fd:c3:ad:
         f0:19:93:b7:54:d3:d5:9c:67:5a:c9:5b:16:f8:6f:41:19:2b:
         b4:c8:8f:1a:32:62:25:d2:9d:4d:53:8f:42:43:c6:5d:a4:9e:
         7e:70:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:42 2026 by rpki-client