Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File:                     aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier:          NWS7ixfdoLxZ/lrbAA+t0cI6eUYvpw6rSxcCftXXPLg=
Subject key identifier:   60:26:3A:01:46:1E:09:9A:84:CB:44:DD:68:9E:98:F9:89:D0:C7:07
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer:       /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number:          0121
Signing time:             Thu 23 Jul 2026 07:30:28 +0000
Manifest this update:     Thu 23 Jul 2026 07:30:27 +0000
Manifest next update:     Thu 30 Jul 2026 07:30:27 +0000
Files and hashes:         1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: 64tDjDzfr1puB/vemvDG5WfdfYMQyKdKiIZ4xKdFz7c=)
                          2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: GJJAq7Y4rDKXzfncSIrWC7/k2iyBuKfDbZCWqya2Ycc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
        Validity
            Not Before: Jul 23 07:30:27 2026 GMT
            Not After : Jul 30 07:30:27 2026 GMT
        Subject: CN=6a61c314-2147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:eb:f2:d9:55:a1:e2:10:76:c2:47:2e:02:
                    71:a5:f8:af:4b:f5:d0:8a:00:63:14:4c:c9:28:f3:
                    4c:1e:4e:bf:7a:f1:2f:3f:f2:67:e0:fa:be:51:15:
                    94:bf:38:c6:96:87:9c:20:6c:37:07:c6:c9:00:c7:
                    20:cd:f0:27:15:5f:ad:50:3e:d3:6b:6b:75:83:d4:
                    5f:33:a8:fa:f1:fb:77:85:f8:fb:79:59:3b:26:e4:
                    12:32:a1:5a:59:d6:cf:7b:e3:d2:e5:2a:2d:64:da:
                    91:e3:1d:8f:22:fe:8a:b5:65:b2:4c:39:57:c1:cf:
                    35:95:f0:4e:dd:10:49:58:57:95:97:0f:37:e2:6e:
                    ec:03:96:1a:63:2b:05:8d:fb:e2:47:3f:93:95:24:
                    6c:88:2b:ef:30:c6:65:ea:69:f0:c3:14:e9:6e:12:
                    1a:64:98:6d:9d:d4:b0:f2:e2:22:5a:9e:79:b1:f2:
                    9d:45:50:fc:42:50:6f:57:dd:96:d6:27:60:26:d7:
                    cd:1d:93:03:13:44:f0:0c:df:93:c8:eb:19:3b:0b:
                    db:db:cd:11:1a:9d:ec:8e:30:80:77:21:12:cd:f5:
                    61:9c:33:e5:51:c2:f9:38:fa:e1:dd:16:e3:e6:c4:
                    d2:3e:ec:79:7d:b9:9a:78:20:28:d1:b1:87:cd:37:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:26:3A:01:46:1E:09:9A:84:CB:44:DD:68:9E:98:F9:89:D0:C7:07
            X509v3 Authority Key Identifier:
                keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fc:1c:f2:73:c3:f1:66:46:57:a4:89:30:a1:ff:9a:35:9c:
         73:75:01:78:cd:e3:6b:c4:18:a5:43:a7:c5:65:b2:c6:ec:3d:
         09:16:b3:4f:a1:e7:9b:9b:52:e1:37:7c:26:f1:82:3b:3f:3a:
         b8:bc:9f:ee:e9:78:3b:13:b2:f4:48:54:fd:cc:a7:7c:22:b7:
         2f:dc:af:d6:c8:b4:bd:e2:e1:db:dc:9e:ad:05:6e:85:fe:d5:
         8c:d8:dd:81:b5:27:ba:b7:9c:01:5f:d0:2f:15:35:34:45:24:
         1d:ab:c6:7b:4a:cf:9a:97:53:52:47:5d:57:2f:33:5d:dd:d0:
         eb:35:fe:21:3e:b5:a4:4d:93:87:05:cb:c1:d6:b7:bb:6d:54:
         31:b5:de:04:0c:ab:ff:67:df:ca:0f:b3:9b:81:3c:b8:db:f5:
         bb:a8:33:01:dc:86:9a:2e:d5:fa:fa:9c:33:00:65:82:a1:23:
         c2:45:c6:2d:8f:7a:e6:30:12:cc:e4:98:19:c1:00:e2:4d:f7:
         25:bd:f4:eb:93:7a:43:71:a7:b9:2d:99:f0:62:f7:ed:68:f9:
         bb:9d:78:af:6e:35:c1:9f:90:f5:32:41:3e:d2:8b:33:62:24:
         46:30:a0:94:25:2a:93:d5:bc:f9:25:83:cd:2d:c0:5b:ff:13:
         c7:68:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:12:21 2026 by rpki-client