Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File:                     McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier:          AbOuHbIfOca1IhM4CKImboomid9kCtJr1oMt0eJI93w=
Subject key identifier:   E6:A4:EB:13:45:D1:BA:8B:58:1B:67:9C:08:38:AB:81:47:78:87:96
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer:       /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial:       09E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number:          09D1
Signing time:             Mon 20 Jul 2026 20:21:14 +0000
Manifest this update:     Mon 20 Jul 2026 20:21:13 +0000
Manifest next update:     Mon 27 Jul 2026 20:21:13 +0000
Files and hashes:         1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: 44UfiWKiCM8/Lc9FUUp31obRz7IS/eBbmIPFKF6xbW0=)
                          2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Hj2gvQPptbIyBsk+GZQr8HEa82gNIwoOpKASxetT7F4=)
                          3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: H91fXqxV7rY9zHcxYCuUe8A5mKb0ae920Vx4iWfH6XE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2531 (0x9e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
        Validity
            Not Before: Jul 20 20:21:13 2026 GMT
            Not After : Jul 27 20:21:13 2026 GMT
        Subject: CN=6a5e8339-a330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:62:45:38:22:16:02:c9:ad:26:92:0f:2f:
                    cb:50:76:ae:29:6e:57:29:5b:ad:6b:a7:43:e7:3e:
                    ae:99:64:dc:43:8c:08:3e:4d:a8:af:3c:5d:0a:48:
                    79:e1:6b:10:e6:22:ae:79:3d:dc:f9:ed:14:32:29:
                    85:91:59:5f:ca:a9:ae:f9:b6:61:dd:cd:19:a1:e1:
                    f6:cb:42:08:31:36:74:30:e4:71:fc:3f:43:65:ed:
                    05:85:a8:86:1a:c2:0f:a6:35:23:a4:6f:8b:46:cd:
                    0a:50:75:f4:be:9f:35:03:23:5b:9e:ae:92:56:12:
                    a4:73:30:e0:76:00:bd:7e:a7:fc:60:eb:dc:61:29:
                    99:e2:9d:52:fb:69:90:b9:11:6a:7c:c6:7a:1a:a2:
                    58:5c:34:19:84:b0:7e:61:b8:88:47:6a:e0:84:8d:
                    14:ec:dc:ca:b1:03:09:79:55:55:a9:71:6b:23:91:
                    7c:a5:bb:1c:1f:96:fe:bc:a8:75:50:a0:15:1c:38:
                    b2:8f:e1:14:38:14:5e:ef:89:58:fd:c8:00:c7:e9:
                    4f:ad:d8:bf:b6:43:2d:27:b1:a1:35:f9:c5:50:22:
                    65:3d:e7:9a:ef:65:44:13:19:a8:e3:ad:5a:ce:df:
                    db:27:99:3b:50:a3:43:2d:2e:fb:f7:de:b1:50:7a:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A4:EB:13:45:D1:BA:8B:58:1B:67:9C:08:38:AB:81:47:78:87:96
            X509v3 Authority Key Identifier:
                keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9a:84:bf:53:52:81:84:2c:87:29:c4:6c:ae:cf:75:3c:9f:
         47:90:4e:00:87:fb:ef:3c:c5:8f:81:8b:57:72:7e:b6:a6:2d:
         77:a9:d8:8e:23:a1:1e:68:1e:47:87:6c:9f:b5:43:1a:11:9b:
         58:ac:c9:54:1a:9f:a2:bb:3d:3b:a7:70:cb:96:6b:c0:88:55:
         49:02:f0:53:19:86:f5:9d:41:88:2d:08:55:1b:16:1a:14:94:
         75:2f:41:ea:c7:67:d8:26:a8:44:f6:c0:64:7a:e2:f9:74:be:
         7b:7f:11:d4:49:a3:20:19:28:60:b6:99:2d:f8:c0:3d:96:f4:
         7f:38:dc:f9:2b:8a:25:e6:1a:59:bc:db:1d:79:99:fd:27:6e:
         ff:75:48:b4:99:b4:df:03:e0:23:5b:eb:1d:e1:86:2e:c7:74:
         76:56:82:ed:d2:79:0b:60:1c:70:22:e0:bd:35:53:5f:9f:d1:
         61:94:c4:01:93:6e:16:cd:56:80:42:d0:d9:a1:5f:bb:ae:fd:
         02:65:5e:bf:7a:95:2c:7f:97:34:3e:e8:2e:e9:67:85:7c:78:
         0a:93:ba:38:45:68:69:51:21:da:85:4a:f9:aa:e4:7f:26:44:
         b1:9b:11:db:5e:8f:3e:33:b6:86:6f:3d:0f:35:85:5b:db:92:
         6d:0a:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:01:51 2026 by rpki-client