Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
File:                     9A-TqdIRaxiksirqdTW59eNunlE.mft (raw, json)
Hash identifier:          7ndUejmPLohI9lIZaQVkN/f9vXdhg2YTbrsamQzger4=
Subject key identifier:   9B:1B:09:98:54:A1:8C:60:CC:70:2B:06:25:06:FC:2E:EE:54:9A:18
Authority key identifier: F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
Certificate issuer:       /CN=A919C47E/serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
Manifest number:          3A
Signing time:             Wed 22 Jul 2026 17:02:46 +0000
Manifest this update:     Wed 22 Jul 2026 17:02:46 +0000
Manifest next update:     Wed 29 Jul 2026 17:02:46 +0000
Files and hashes:         1: 9A-TqdIRaxiksirqdTW59eNunlE.crl (hash: FrxqfTTlLbJJL0r+/EmWGrDPC0Nl2PocpD5WiJbtZ4M=)
                          2: 934C25D238C011F1AD0BCD9C99833773.roa (hash: w2PsXC0NzHE/Q5fkR14UN3mHcPylNIHmDef5Q25n5fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
        Validity
            Not Before: Jul 22 17:02:46 2026 GMT
            Not After : Jul 29 17:02:46 2026 GMT
        Subject: CN=6a60f7b6-003e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:fd:a5:63:87:ff:da:59:d4:08:a6:6d:9e:
                    0c:83:78:dd:20:d0:94:80:8d:e0:48:d5:e5:27:dd:
                    7b:5d:79:1d:10:83:9c:27:b8:d3:96:4e:53:88:3d:
                    d4:b9:6c:fc:f3:d8:27:fd:2c:22:73:9a:66:58:5a:
                    b1:16:f1:0d:2e:93:07:7d:70:40:ef:bc:9c:89:eb:
                    18:18:56:1a:ca:85:a7:9a:67:cf:29:d6:1e:ed:e6:
                    f3:42:a8:0f:85:c7:de:a9:d4:b1:88:4f:2d:1f:ea:
                    de:a1:31:40:33:ec:e6:76:ea:bc:84:06:13:4f:45:
                    cf:57:bd:5e:38:94:b3:65:fa:7f:ec:8f:49:33:1c:
                    8c:80:92:fb:90:9e:75:f3:35:83:9d:dd:d8:3b:b6:
                    15:d8:67:6c:a0:6d:0a:9e:2a:ce:d4:91:55:9d:0b:
                    7f:b2:78:4a:f0:10:6c:07:85:00:72:ff:44:e1:96:
                    ad:ed:43:43:e7:d8:5c:c6:df:f4:ba:f4:ff:3c:fa:
                    8e:bc:36:09:99:63:3f:25:77:48:54:4c:fc:94:e1:
                    f6:f1:bb:cb:16:1a:6b:84:6f:cf:ab:42:12:e7:ce:
                    12:6d:db:21:2c:b0:49:97:3e:70:cf:a3:c5:47:a7:
                    1f:f3:1a:5b:2e:3e:71:33:64:53:7c:81:8e:30:d7:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:09:98:54:A1:8C:60:CC:70:2B:06:25:06:FC:2E:EE:54:9A:18
            X509v3 Authority Key Identifier:
                keyid:F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3e:41:42:4c:d0:d5:3b:b6:a9:3a:1b:bf:47:10:f9:1f:47:
         07:81:39:d4:16:87:00:b1:45:15:17:68:d5:c9:1c:82:37:89:
         4a:21:f1:10:ab:d9:84:ae:14:93:63:25:39:0a:9e:c3:ab:34:
         18:b7:b6:04:19:75:4c:38:93:44:71:25:be:92:b6:f1:97:af:
         f0:c7:65:7b:50:81:39:90:0d:06:01:ae:8d:f8:b9:5e:1e:38:
         c7:46:67:87:7a:39:80:9a:1e:2a:f0:e3:a5:3b:76:e0:3e:46:
         2d:7d:ee:b2:7c:c1:89:13:59:70:99:c9:b5:b7:4b:ee:cf:01:
         7e:83:e1:5c:52:87:58:44:aa:62:a3:c7:0d:fa:10:bd:f8:ba:
         66:15:1b:3d:98:58:8f:3f:d0:03:2d:94:ba:0c:8b:02:18:ab:
         ab:48:11:7b:3c:8d:c4:87:18:75:85:de:d9:7b:70:bf:29:77:
         17:f3:97:f2:f3:55:88:a7:10:7a:00:9a:d4:51:0b:a2:6c:a9:
         ab:c2:3e:fb:40:f6:de:a2:25:6c:1c:b2:e3:b1:11:6a:08:2f:
         cb:79:0e:b6:65:9c:a0:d7:f2:cd:cf:49:22:a0:8b:1c:c6:f4:
         de:bb:76:3b:11:26:de:75:32:6a:6f:ed:fa:0b:22:20:9d:90:
         60:f4:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:32:27 2026 by rpki-client