Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File:                     C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier:          w3Zt/NHVWTOeElPkdwA5lcgXSqns7Pe+WloqD21WSt4=
Subject key identifier:   41:C2:9E:CF:4A:D6:EE:35:7D:3A:4E:17:46:33:9F:81:89:97:50:29
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer:       /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial:       07D16DDCBF8A0F0EB6BDAE08404805B058D2B874
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number:          0304
Signing time:             Thu 23 Jul 2026 15:11:09 +0000
Manifest this update:     Thu 23 Jul 2026 15:06:09 +0000
Manifest next update:     Fri 24 Jul 2026 15:23:09 +0000
Files and hashes:         1: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=)
                          2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
                          3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: zawFSkORPDDIpb/1rLXIBnsD35thKplPaVMwimC61cM=)
                          4: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
                          5: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=)
                          6: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
                          rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 15:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d1:6d:dc:bf:8a:0f:0e:b6:bd:ae:08:40:48:05:b0:58:d2:b8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
        Validity
            Not Before: Jul 23 15:06:09 2026 GMT
            Not After : Jul 24 15:23:09 2026 GMT
        Subject: CN=41C29ECF4AD6EE357D3A4E1746339F8189975029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:0d:d8:e5:9e:66:87:ea:bc:29:5f:18:6d:
                    63:31:3e:89:1b:b4:eb:bf:04:f3:35:47:7f:8a:1d:
                    2d:4a:83:6b:cd:02:4b:8e:ba:42:09:60:dd:ea:12:
                    85:38:54:5b:92:69:7a:93:44:e0:ed:0f:ef:89:11:
                    3b:85:cf:df:3e:16:f2:12:36:13:18:66:80:54:e2:
                    07:7d:25:f6:f2:ab:1a:95:33:5e:87:04:9c:c7:18:
                    9a:55:e3:fa:dd:e9:80:2d:63:f6:0b:c3:38:db:b2:
                    cf:26:40:eb:fd:3d:28:6d:78:c8:be:f3:f8:a8:0d:
                    5d:28:c3:a5:0c:27:42:c4:55:18:0b:96:37:36:29:
                    22:45:25:d9:6d:ee:fa:6b:87:0b:45:35:50:90:be:
                    df:97:92:f8:d1:ae:5e:fd:dc:f8:87:c5:92:36:b5:
                    5f:a8:ee:df:d2:da:30:38:ec:73:47:76:ac:93:1e:
                    86:bf:b9:5c:53:bf:a7:98:16:02:ee:22:22:e8:64:
                    1c:36:fe:4d:c4:b3:b9:9f:17:b9:98:11:b8:c4:e1:
                    94:ec:86:b7:fe:fe:7a:b1:98:5e:e5:85:51:67:82:
                    f4:b9:4c:ce:d4:22:8c:7c:69:24:18:32:f6:3f:dc:
                    d3:7e:61:09:6a:f3:ee:73:96:ae:e9:08:aa:90:83:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C2:9E:CF:4A:D6:EE:35:7D:3A:4E:17:46:33:9F:81:89:97:50:29
            X509v3 Authority Key Identifier:
                keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:68:b4:b7:52:20:b0:70:df:9f:6e:cc:61:3e:40:4b:91:
         94:ad:80:42:e8:04:a0:70:94:bd:e9:fa:7b:7f:7f:7d:e4:70:
         48:9f:b2:a0:35:fe:a6:50:69:38:d6:05:11:58:02:51:15:79:
         3a:52:f0:5d:f8:af:33:82:a3:8d:01:b6:db:97:82:82:00:04:
         04:0f:4b:d2:36:6d:18:3e:45:a4:af:f9:68:c7:e1:be:ef:45:
         b3:2c:a2:b4:9b:4d:86:5f:67:58:75:ea:29:b8:83:ba:cb:f1:
         03:ad:9f:06:c6:a4:5e:72:ed:0b:de:ce:54:12:73:7b:af:31:
         cf:27:05:53:75:60:8f:11:86:1d:44:62:88:85:5c:2e:5c:27:
         d2:3b:6c:e4:39:d9:8a:06:9a:3c:b6:b0:12:4f:d2:8d:99:22:
         15:96:fc:50:b9:e9:9d:b8:10:ba:39:36:d2:90:c4:16:dc:bd:
         cb:bf:06:16:da:be:61:bd:f5:d1:c6:8f:e9:f7:e1:80:ca:f9:
         a1:d1:3d:78:89:03:03:11:9d:c4:de:c9:9c:33:fc:d3:2c:31:
         b3:87:ef:52:27:59:07:49:ed:91:cd:4f:04:cc:16:f8:a7:69:
         7d:61:ba:2d:af:54:10:e9:90:a8:64:97:70:5a:3a:84:35:8c:
         fe:d7:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:31 2026 by rpki-client