Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
File:                     6bYAyebdjO7JchldY0nImDj3Rb4.mft (raw, json)
Hash identifier:          HV2hO30Otek2Q6L1MO5lPwooQKaURKuT3rQsl4yUIZc=
Subject key identifier:   74:E7:BA:9F:28:AC:03:71:71:3D:55:62:BD:38:91:AA:E0:D6:47:74
Authority key identifier: E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE
Certificate issuer:       /CN=A9117257/serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
Manifest number:          0249
Signing time:             Sun 19 Jul 2026 03:23:13 +0000
Manifest this update:     Sun 19 Jul 2026 03:23:13 +0000
Manifest next update:     Sun 26 Jul 2026 03:23:13 +0000
Files and hashes:         1: 6bYAyebdjO7JchldY0nImDj3Rb4.crl (hash: w21zRXXq5rd6qX3/Bo3cJCgeM9uqAb0znXxMlbkC91M=)
                          2: B09305FACED711F0A1339C83C4F9AE02.roa (hash: G8xlSUxVIi9cVhxoz1Q2kzG+cwyIAF1dFdxE0KGUfmI=)
                          3: A257B948E56D11F0BFC731FA3E6F56BC.roa (hash: nBKqySNxRCD3LCQs0BI3QQg3b+xMBlDDShXz2HS+eW8=)
                          4: 7138FC520BBE11F0B8594F31C4F9AE02.roa (hash: zvhBZzUhjsWbAiJfcJ3wBprjMMvNeuDJBMCD/PrAjbc=)
                          5: B38B0F188C8511EF8E80211BC4F9AE02.roa (hash: ntvEc2KkhXBuCPijpSZ3Clr1VypG/c7ek2Cm77hPMBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Jul 2026 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117257, serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
        Validity
            Not Before: Jul 19 03:23:13 2026 GMT
            Not After : Jul 26 03:23:13 2026 GMT
        Subject: CN=6a5c4321-f025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:4a:71:92:2f:bf:5a:76:71:2c:d3:5b:10:
                    3b:d0:1d:7e:1a:64:ba:07:ee:f8:1a:6e:6c:47:2c:
                    93:95:e3:6c:de:1e:18:2c:d9:1f:6f:42:71:2b:44:
                    cb:de:e7:b0:4b:0b:ad:d4:40:ee:1f:4f:28:96:f1:
                    52:e4:2d:a3:3c:ca:df:67:a3:bf:17:cd:72:0a:99:
                    39:70:a4:3c:45:a5:bd:4d:fd:6f:98:e3:8a:b5:b4:
                    9b:6f:57:54:71:e2:40:5c:18:94:71:d9:e3:9f:d9:
                    1a:ca:0c:d5:ef:48:a9:3b:d3:3b:9c:18:38:46:d4:
                    4d:b9:9f:22:08:9d:44:d1:37:54:c3:07:ee:1a:02:
                    96:0a:0a:5d:37:f5:37:87:67:25:b2:41:c8:39:74:
                    fa:7e:c0:cf:a5:25:24:8f:3d:5c:25:9d:2d:7f:0c:
                    f1:0a:9a:28:2d:66:10:2e:8a:b9:97:45:88:72:ec:
                    bc:d0:f0:22:a8:81:14:42:67:7e:f3:af:ee:2c:d8:
                    c1:34:72:66:c2:05:26:ee:bd:f4:fa:2d:8d:4a:ac:
                    08:6f:b5:1c:8b:f5:2c:f4:96:20:af:33:40:eb:19:
                    85:81:ce:55:c6:16:7b:8a:97:99:33:0e:d7:69:5c:
                    82:46:f3:1b:cb:cd:36:28:de:48:52:c6:47:ed:e9:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E7:BA:9F:28:AC:03:71:71:3D:55:62:BD:38:91:AA:E0:D6:47:74
            X509v3 Authority Key Identifier:
                keyid:E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:bd:4f:56:cf:dc:af:79:74:64:cb:c8:c4:50:58:8c:e0:
         27:02:82:cb:30:79:4d:66:f4:17:4f:3a:af:5d:b5:d6:83:1e:
         51:6e:9e:b8:f7:f1:3c:91:60:a2:81:b2:61:5b:17:b0:e0:3e:
         5e:f8:6a:7e:7e:7c:26:93:a2:dd:47:e6:aa:2e:2d:5d:b3:c2:
         b0:69:1c:59:64:c9:64:1a:15:a5:9e:28:c6:a2:81:4c:97:1b:
         0b:80:ca:54:66:26:c4:e8:b0:3f:a4:3b:85:71:1f:a4:34:b8:
         7a:06:bc:4c:aa:1e:72:61:ff:8f:08:23:ca:6a:23:2f:0e:04:
         db:91:8a:0e:4c:6b:95:ec:00:fd:d6:88:c8:ec:2e:0a:bb:61:
         00:ae:0f:b8:26:1a:8e:ed:b2:38:78:e3:da:b9:a4:fe:2b:d5:
         55:33:9d:35:85:1c:97:8a:b5:d7:6e:07:3f:83:1f:0e:42:89:
         e0:b0:20:34:ae:bd:f3:d5:d0:df:17:8d:37:69:4f:e2:f4:37:
         f3:f8:6c:62:43:1d:0a:50:3d:0d:a2:db:d7:c1:4a:e2:8c:f5:
         ff:6d:ae:6f:18:7a:94:80:18:50:4c:59:22:ad:48:73:3e:6f:
         7b:11:ec:d2:b4:c4:f1:95:5e:30:12:79:bb:56:8a:57:d3:a9:
         35:ac:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 23:06:34 2026 by rpki-client