Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File:                     9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier:          3VNCszgQQ3MFL4wZjgCW6Tbd4cbNjLxSXUqLnxBtiH0=
Subject key identifier:   54:32:78:35:FA:84:07:AD:D5:86:8E:75:39:B2:85:B8:FA:20:8B:D9
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer:       /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial:       0D23
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number:          0D12
Signing time:             Wed 22 Jul 2026 18:33:21 +0000
Manifest this update:     Wed 22 Jul 2026 18:33:20 +0000
Manifest next update:     Wed 29 Jul 2026 18:33:20 +0000
Files and hashes:         1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: rrPFC5Xyt5QRTPHOPjdmuxXmWwp9SyjDPYldSkQ9TNU=)
                          2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: YO/LHGpdZrKxxuw5Nj9V4zkQvWAz2/rqA3ybBI8prVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3363 (0xd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
        Validity
            Not Before: Jul 22 18:33:20 2026 GMT
            Not After : Jul 29 18:33:20 2026 GMT
        Subject: CN=6a610cf0-9663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:3d:ea:42:5d:c8:bc:63:36:39:2f:16:b2:
                    a1:2b:2c:b3:6d:bd:41:ba:f8:6d:dd:61:45:16:ed:
                    48:15:21:a9:9c:1a:8d:df:ea:06:22:54:d5:de:64:
                    fa:8c:bc:2f:3f:1c:5f:2b:00:89:29:8b:61:b7:dd:
                    d3:79:77:fc:35:44:86:ce:10:64:49:ec:28:b3:84:
                    ed:44:e8:cc:7b:53:1c:02:2a:c8:a3:e5:a5:d9:48:
                    23:8b:74:d5:cb:0b:bc:bb:4d:9e:80:31:e3:e2:39:
                    48:be:80:e8:59:f4:59:ce:a3:77:f1:2f:d5:f3:b6:
                    7d:4e:07:9e:48:1c:01:b9:09:11:19:1d:ae:e0:94:
                    07:74:8e:75:0f:25:2c:a0:56:04:29:fb:f4:a3:08:
                    6b:ff:24:cb:96:7c:91:ee:b1:37:af:58:7b:c0:4b:
                    70:3d:a8:67:5c:98:eb:bc:80:1a:da:50:83:8f:8b:
                    e4:50:ac:1d:61:a1:62:1d:97:d6:78:9c:1e:4b:52:
                    b2:2d:02:06:9b:09:ad:05:e9:76:e3:63:d4:d4:57:
                    62:0a:2b:70:16:17:a7:00:52:c4:46:36:f8:b3:cf:
                    b1:db:da:ed:58:a2:7e:2b:39:f5:6a:f8:51:fc:79:
                    9f:7a:6e:9f:00:a2:38:71:af:6c:bd:44:13:e6:b1:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:32:78:35:FA:84:07:AD:D5:86:8E:75:39:B2:85:B8:FA:20:8B:D9
            X509v3 Authority Key Identifier:
                keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:35:7c:7d:4c:c5:e0:ef:84:4a:78:dd:51:a2:d7:31:57:0e:
         76:b7:eb:c6:93:48:8c:0a:76:01:8b:9a:8c:b9:8b:c9:04:95:
         22:e0:6b:b5:36:b4:7f:bf:52:c3:d9:4a:4e:bb:07:25:19:21:
         3e:02:95:de:5a:a8:a2:c8:6b:11:ba:89:9d:e3:05:a2:f3:c6:
         96:3a:59:a8:c5:98:11:7f:ea:8a:f4:69:41:29:79:5e:31:fe:
         e0:4c:8d:f0:b1:6a:1d:e3:b9:ca:46:3e:99:9d:2d:71:d1:93:
         4c:11:11:4f:88:34:0f:85:2f:c6:25:b3:1c:04:7d:bb:39:60:
         9b:37:95:48:66:46:3f:bf:84:dd:cd:ea:ba:38:0b:38:db:68:
         81:46:76:94:19:0a:f6:30:0d:06:08:e5:ae:99:af:bc:08:8f:
         cd:eb:e2:ce:96:a6:81:22:2c:91:1c:89:20:09:88:83:e9:50:
         f9:18:42:35:31:bf:9f:55:f4:a6:6f:b7:14:bd:67:fa:3f:9b:
         50:2a:27:87:3a:18:8e:6e:a9:36:0f:72:b3:68:4e:ea:47:c2:
         b8:72:8a:4a:6d:a9:8d:88:76:6d:55:41:e0:31:7b:18:60:f2:
         7e:89:25:41:ab:75:cd:99:d0:45:cf:5e:d5:61:07:c1:ca:21:
         d1:95:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:58 2026 by rpki-client