Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File:                     0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier:          onDETgo3M6XieNKxr+8ce2AtNHirCV6UtLcFokKfBa4=
Subject key identifier:   6E:94:3E:03:FC:07:48:8C:ED:E3:E4:E3:F2:9C:D8:0E:28:EB:BF:83
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer:       /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number:          9B
Signing time:             Thu 23 Jul 2026 09:17:41 +0000
Manifest this update:     Thu 23 Jul 2026 09:17:40 +0000
Manifest next update:     Thu 30 Jul 2026 09:17:40 +0000
Files and hashes:         1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: TSKAJtv8SHWkQIxtJiVghb9jUKIxbLF5ITZTCjcyEi8=)
                          2: 9484A13A622E11F1A36ED3DF7447A888.roa (hash: Kqin5t6HoE32APIOaQFq882jyRgeaOI3EzjEp6mHGyQ=)
                          3: 8988B2165DB111F1AB23B9ACA3833773.roa (hash: ad65XTYzHUp3cWmiBJTHs+rg9KKlQlfXiUUJuwHLk8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
        Validity
            Not Before: Jul 23 09:17:40 2026 GMT
            Not After : Jul 30 09:17:40 2026 GMT
        Subject: CN=6a61dc35-567a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:72:eb:13:40:26:41:03:a8:79:f4:0a:11:
                    8d:2f:ee:3a:6a:01:6e:62:d1:a1:2c:7b:d3:99:06:
                    72:53:68:4f:09:45:61:d1:c4:88:12:0b:57:29:38:
                    e5:db:a0:69:9e:28:58:94:7f:eb:d0:e8:7c:20:db:
                    f0:a3:f0:4d:13:dc:64:93:1e:3a:4f:a8:0d:88:2c:
                    ae:2e:6e:e8:6e:1d:51:77:6c:ef:a2:02:9c:45:31:
                    f0:3e:a3:ab:b5:22:5f:98:68:e3:b8:d3:0e:15:d5:
                    40:11:9c:29:21:cf:a0:f4:f2:2b:b2:c0:bf:97:ae:
                    90:43:c8:2a:27:9b:ea:16:1e:e5:72:67:4b:35:c6:
                    e2:a6:9e:2e:96:3e:5c:d7:ea:1b:4a:87:46:ec:62:
                    50:1e:c8:f5:ab:12:74:42:be:f9:ef:6c:d2:9e:f8:
                    bd:9c:0d:c4:5f:b1:75:7f:a4:7d:bd:59:d5:de:54:
                    0a:01:6f:4a:ad:67:bd:37:3d:55:49:ac:d9:9e:25:
                    16:08:36:5c:4e:91:b9:34:de:a0:55:9e:9f:db:6b:
                    2d:49:49:88:56:64:72:0d:a4:89:6d:81:5d:ac:2a:
                    cd:6b:66:32:f5:92:27:4c:6a:0e:a0:c1:4d:d9:84:
                    39:32:5e:0e:72:76:95:09:af:4c:b7:89:4e:1d:44:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:94:3E:03:FC:07:48:8C:ED:E3:E4:E3:F2:9C:D8:0E:28:EB:BF:83
            X509v3 Authority Key Identifier:
                keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:7a:e4:42:3f:5f:e9:a4:a6:92:12:87:cf:8d:f5:90:74:ef:
         da:0e:1c:c6:4c:5e:f6:e0:3a:70:de:ea:25:17:2f:06:9f:93:
         e1:78:09:31:6d:a0:c0:44:d9:63:fc:43:74:8e:3c:e4:5b:bb:
         5d:b7:c4:6d:29:63:d7:2c:6c:b1:af:eb:97:d2:60:b5:96:5e:
         ce:1a:1d:a4:5b:68:ca:75:33:21:b5:22:78:30:5f:53:cb:1f:
         e1:e1:5b:90:1e:82:78:6d:88:26:34:58:40:6c:c6:0a:17:0b:
         3e:3d:74:ac:37:0f:d5:10:1a:8e:97:48:d2:7e:f2:bb:0f:2e:
         0e:a9:36:13:75:57:51:22:d8:fe:86:35:92:c5:96:99:e6:a1:
         5e:93:93:5c:ea:77:69:3c:e3:a4:4b:b0:a5:7f:e9:c3:d6:6c:
         92:e3:6d:93:ae:61:cc:77:71:9b:29:8c:4f:b8:44:53:f6:47:
         5e:4a:be:ad:8f:46:ce:56:18:ad:dc:a4:51:2c:48:58:15:48:
         be:ee:9d:b4:3d:f1:f8:f4:93:39:e4:4b:bf:be:bc:62:5c:54:
         e5:f2:c2:d5:ed:11:36:b5:4a:8c:6d:f1:3d:ab:5d:43:b2:33:
         a3:08:c0:83:64:ed:27:14:27:6f:6e:cb:f1:78:9f:22:2d:11:
         20:7d:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:31 2026 by rpki-client