Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
File:                     9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json)
Hash identifier:          kFXNTOXFMLBXF20A7MTUsnD/D3KWcqW/cFwz7RBSJuo=
Subject key identifier:   EB:98:F0:F4:E5:90:92:2B:47:D6:36:C5:61:73:27:8D:C6:29:10:E8
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Certificate issuer:       /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial:       1617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
Manifest number:          1604
Signing time:             Fri 24 Jul 2026 16:52:09 +0000
Manifest this update:     Fri 24 Jul 2026 16:52:09 +0000
Manifest next update:     Fri 31 Jul 2026 16:52:09 +0000
Files and hashes:         1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: qJWaaDFTzATrLkTT4uIAhrv2MrWEvULKkZO30zb4om4=)
                          2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: M1ZUrzl+jKIMD6ElMH+tXNtg61CpYpjge7sFvol2TsM=)
                          3: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: R5ZyeSm5g+p8lvebB9/qu+mRhPpgoRy54VDsJgvPDUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 16:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5655 (0x1617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
        Validity
            Not Before: Jul 24 16:52:09 2026 GMT
            Not After : Jul 31 16:52:09 2026 GMT
        Subject: CN=6a639839-b086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:41:50:07:2b:bc:b6:a0:54:73:f7:e6:02:
                    c9:d6:5c:31:7b:d9:34:fd:38:cf:b8:6a:3f:09:2c:
                    ba:ba:62:92:26:a5:09:1f:ac:c1:84:44:a2:fe:b2:
                    c5:8c:f8:03:fe:ff:fd:0d:33:5a:fd:6a:7b:7c:d6:
                    00:3c:0b:b5:e9:37:69:fb:1e:49:6d:d5:b2:93:12:
                    da:7e:eb:d2:75:49:08:00:b1:db:a6:b3:2a:5a:6f:
                    06:27:04:42:c5:e0:89:b4:06:32:82:31:f8:9e:fe:
                    8c:62:24:70:af:39:f6:93:ce:94:65:35:60:a5:a9:
                    88:d4:4e:34:ec:b2:86:45:24:e4:3a:c7:89:1d:40:
                    33:af:ae:8a:5e:03:e1:27:0b:dd:0f:7f:12:01:50:
                    37:13:6d:0a:96:fd:82:1e:4b:6c:bf:d9:78:6c:3b:
                    9c:4f:d6:15:ee:89:c7:21:c1:80:51:0d:2a:c3:7b:
                    04:7e:77:9c:4f:25:ee:94:51:44:b0:27:56:78:56:
                    91:da:b8:4d:ad:c0:b3:ab:cf:1c:9e:30:93:d9:68:
                    20:63:0d:6c:2f:10:3e:08:c6:ad:98:02:8f:9d:29:
                    b5:2e:97:42:76:a5:59:45:a9:57:d7:66:f9:9e:4c:
                    24:d0:20:37:08:e1:e1:5a:f8:4d:49:53:2e:0f:fb:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:98:F0:F4:E5:90:92:2B:47:D6:36:C5:61:73:27:8D:C6:29:10:E8
            X509v3 Authority Key Identifier:
                keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:82:ba:9d:f6:8a:0d:41:73:00:ee:ed:de:68:84:c8:55:
         cc:b3:09:7b:8a:7f:be:76:16:bb:5b:7a:24:22:06:ac:99:75:
         5d:9b:d9:35:ea:48:24:b5:b4:a9:9b:99:0d:d5:20:0c:0e:a3:
         d0:95:14:38:aa:bf:e8:10:ef:4f:66:eb:13:2d:5d:4d:16:2f:
         49:29:23:db:d5:29:0c:96:98:4d:ae:fa:7e:e9:5b:3b:0a:96:
         6d:6f:7e:18:a7:8e:d3:de:56:12:0c:13:ad:f8:da:6f:49:b0:
         45:57:69:08:bf:84:20:aa:b6:d7:9e:16:18:b0:89:03:9e:c4:
         e5:bb:68:d6:2f:98:7d:42:55:64:90:c9:a6:ac:11:8f:2c:74:
         a7:9c:c3:62:dc:cb:eb:83:9b:eb:5f:0d:d0:ba:48:91:5c:e2:
         49:15:4a:65:99:16:a3:8e:54:94:75:d4:47:0d:11:f3:93:04:
         5d:38:5d:7e:e0:9f:89:58:79:66:4f:db:5b:fd:00:09:b6:db:
         73:74:55:06:84:97:5e:28:10:16:0e:db:d7:86:7c:60:00:cf:
         42:31:07:27:ed:bf:b4:fb:3b:05:30:99:88:7e:35:ca:d0:d3:
         f2:10:9f:88:f3:98:82:ad:a9:12:74:b4:41:b8:92:20:b5:6d:
         dd:ef:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:22:39 2026 by rpki-client