Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
File:                     s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json)
Hash identifier:          O0FzbI5WKEkHji43vgme4i7FBySHtCP+tgXREyOsUzc=
Subject key identifier:   E0:78:3C:F5:26:C2:DC:E2:34:E0:8C:B3:55:11:D6:13:70:1B:9C:B4
Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
Certificate issuer:       /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
Manifest number:          01A9
Signing time:             Tue 21 Jul 2026 05:35:09 +0000
Manifest this update:     Tue 21 Jul 2026 05:35:08 +0000
Manifest next update:     Tue 28 Jul 2026 05:35:08 +0000
Files and hashes:         1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: IDW9PX/o3CP+4HlXQTnVwgupD+2azpTL8Yk7LRIrG7w=)
                          2: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=)
                          3: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
        Validity
            Not Before: Jul 21 05:35:08 2026 GMT
            Not After : Jul 28 05:35:08 2026 GMT
        Subject: CN=6a5f050d-f411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:1a:3b:b5:a8:29:ae:d7:3c:ca:b2:71:9c:
                    a3:f8:d1:51:48:26:2f:bf:4a:fc:5f:95:bb:9d:61:
                    f2:bf:76:c6:c7:99:2b:1f:41:2d:25:e7:56:c9:9d:
                    fe:48:0f:ce:f3:98:ea:dd:c2:0c:6a:96:2b:88:80:
                    b1:83:55:ba:d9:15:9e:f1:fc:c2:12:b5:43:92:27:
                    30:2e:d5:61:53:c1:20:0f:f1:48:ad:59:3f:38:ad:
                    93:f1:25:f2:b6:6d:77:c2:5b:db:05:05:60:03:38:
                    1a:b3:12:c5:8c:5a:0a:98:55:7c:f4:08:f1:0f:08:
                    e7:cc:aa:25:1f:57:35:8e:58:e2:eb:69:82:71:32:
                    d3:2f:37:8e:f5:ba:55:fd:5c:c1:33:e3:36:ac:3c:
                    3b:c4:e2:43:43:6d:8b:70:2f:2d:f3:6a:1b:76:23:
                    95:d8:38:1b:16:11:c7:9e:c3:f4:96:cd:e0:ae:90:
                    27:7c:25:81:ff:0e:16:fe:43:ab:5b:ad:10:67:23:
                    8b:e1:a5:a1:f9:96:7a:f1:73:79:54:86:5b:f0:d7:
                    d6:f1:60:5f:31:51:60:1f:5f:e6:b7:ba:04:4a:3e:
                    1d:82:1b:96:e9:9c:2e:52:45:18:14:3b:35:47:06:
                    4d:25:b7:85:58:a5:19:38:6c:76:71:5d:6d:7a:d7:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:78:3C:F5:26:C2:DC:E2:34:E0:8C:B3:55:11:D6:13:70:1B:9C:B4
            X509v3 Authority Key Identifier:
                keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:87:cc:0d:70:47:a6:47:aa:ad:92:eb:72:7e:e8:d9:d5:0d:
         39:b7:4c:e9:4b:92:cd:05:f0:ff:3f:12:83:ae:bb:d7:72:06:
         4c:86:12:c6:ad:aa:bf:c9:db:2f:f9:c9:56:bf:bb:2b:e7:6d:
         aa:3d:0e:a2:15:37:03:7a:1c:87:9c:1b:dc:b6:71:a9:f9:f2:
         c2:b8:72:98:bd:be:20:67:78:d6:ff:30:55:f6:51:d3:09:09:
         3c:77:06:5a:c5:0f:4d:5b:0b:1b:11:5e:a5:00:dd:a4:81:e2:
         b8:6a:e8:9b:bd:79:bf:84:3c:2f:35:2b:a5:03:08:2c:ba:b9:
         8b:d3:b2:9e:df:2d:65:46:e3:56:2b:cc:90:62:5b:8c:2a:66:
         81:0e:39:02:4d:da:65:5e:fe:0a:8c:cd:ff:92:1a:b6:07:33:
         90:aa:3d:3f:ea:15:a2:55:98:59:b6:6e:9e:a2:ea:4e:a1:f9:
         c0:b7:3f:b5:29:cd:84:5a:89:4a:fc:3b:0c:38:99:15:e9:11:
         20:e1:57:79:cf:f9:b6:2b:d4:e3:49:51:d8:1f:83:c3:df:8f:
         05:a4:92:26:96:8a:86:81:71:b1:93:91:67:a9:a1:12:87:ff:
         c6:c1:54:b6:3e:9b:04:e7:bc:48:bc:11:c8:15:e1:ec:85:d0:
         78:24:47:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE
NUJFNzc2RjEwHhcNMjYwNzIxMDUzNTA4WhcNMjYwNzI4MDUzNTA4WjAYMRYwFAYD
VQQDEw02YTVmMDUwZC1mNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtasaO7WoKa7XPMqycZyj+NFRSCYvv0r8X5W7nWHyv3bGx5krH0EtJedWyZ3+
SA/O85jq3cIMapYriICxg1W62RWe8fzCErVDkicwLtVhU8EgD/FIrVk/OK2T8SXy
tm13wlvbBQVgAzgasxLFjFoKmFV89AjxDwjnzKolH1c1jlji62mCcTLTLzeO9bpV
/VzBM+M2rDw7xOJDQ22LcC8t82obdiOV2DgbFhHHnsP0ls3grpAnfCWB/w4W/kOr
W60QZyOL4aWh+ZZ68XN5VIZb8NfW8WBfMVFgH1/mt7oESj4dghuW6ZwuUkUYFDs1
RwZNJbeFWKUZOGx2cV1tetf8+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOB4PPUm
wtziNOCMs1UR1hNwG5y0MB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy
NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2
a3IwWDBNU3paUmpWdm5kdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWIfMDXBHpkeqrZLrcn7o2dUNObdM6UuSzQXw/z8Sg66713IGTIYSxq2qv8nb
L/nJVr+7K+dtqj0OohU3A3och5wb3LZxqfnywrhymL2+IGd41v8wVfZR0wkJPHcG
WsUPTVsLGxFepQDdpIHiuGrom715v4Q8LzUrpQMILLq5i9Oynt8tZUbjVivMkGJb
jCpmgQ45Ak3aZV7+CozN/5IatgczkKo9P+oVolWYWbZunqLqTqH5wLc/tSnNhFqJ
Svw7DDiZFekRIOFXec/5tivU40lR2B+Dw9+PBaSSJpaKhoFxsZORZ6mhEof/xsFU
tj6bBOe8SLwRyBXh7IXQeCRH/g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:38 2026 by rpki-client