Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
File:                     rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json)
Hash identifier:          4BGIBZxqOCV82iHcLI00BGAphDo6OzqZ9wQiBijSD+I=
Subject key identifier:   6A:BB:A7:03:0C:7F:F7:98:52:44:BF:E0:C8:A7:73:12:A2:54:E1:F9
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Certificate issuer:       /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial:       1148
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
Manifest number:          1136
Signing time:             Thu 16 Jul 2026 17:19:34 +0000
Manifest this update:     Thu 16 Jul 2026 17:19:34 +0000
Manifest next update:     Thu 23 Jul 2026 17:19:34 +0000
Files and hashes:         1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: Dd49p/5FreUnP3MHQxf8yqWaVp461Dr4ityY8dEtiew=)
                          2: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: rroDeUW2w+byoF7eEZG3cyaaxjR2htn3+GDZHhSrHjg=)
                          3: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: xEpgs9EW6VJ0cW2siZLFxIERKuNtIAPU67VQP3joc6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 17:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4424 (0x1148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
        Validity
            Not Before: Jul 16 17:19:34 2026 GMT
            Not After : Jul 23 17:19:34 2026 GMT
        Subject: CN=6a5912a6-6bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:5f:97:b7:3b:be:80:e9:eb:96:3a:5d:42:
                    34:cb:77:e8:e6:e4:9b:92:a5:ef:18:43:6b:8e:24:
                    a2:02:31:b1:82:5a:cd:bc:d3:27:94:cd:c6:04:5e:
                    36:a8:8e:5d:5c:d5:ca:06:43:27:0e:76:28:a5:1d:
                    fb:fd:cd:98:c9:63:f8:9d:48:7a:10:da:7c:a2:93:
                    c6:26:0a:0a:61:45:ac:95:06:5d:b2:24:48:d2:4c:
                    b6:c7:16:07:27:3a:9b:c1:6f:43:76:ce:9f:0e:57:
                    a7:d0:8a:c3:26:de:c3:91:45:86:cb:75:4f:e7:4c:
                    d0:d0:09:d1:21:fa:83:e9:a0:ee:4e:4e:a7:dc:46:
                    4c:5e:74:c6:c5:8f:fa:bc:ec:d3:bb:75:df:17:dd:
                    13:68:3e:58:f7:d8:69:2b:df:0c:b0:ec:84:2a:44:
                    6e:62:9a:ce:a7:d6:92:01:7b:24:22:3e:42:c6:c8:
                    6b:8f:3b:43:0f:d1:08:66:ad:44:a1:00:66:5f:4d:
                    2b:4f:8a:a4:99:e9:8b:2b:6b:cd:4a:1b:78:2a:95:
                    56:bf:a3:01:f2:f8:e2:7b:07:6c:39:8e:92:27:1c:
                    84:df:62:57:76:70:20:7e:26:e6:24:a8:76:6c:84:
                    02:68:28:72:4f:06:58:a2:a4:c9:83:92:b7:3c:8a:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BB:A7:03:0C:7F:F7:98:52:44:BF:E0:C8:A7:73:12:A2:54:E1:F9
            X509v3 Authority Key Identifier:
                keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:51:70:71:80:40:aa:3c:f8:57:e7:58:61:31:53:03:f4:c3:
         49:91:3f:0a:e9:2f:aa:5a:4c:0d:63:af:c3:43:e5:76:25:0b:
         c0:d0:62:48:30:28:9b:ff:15:6d:d6:21:8d:ce:d3:8d:cf:68:
         30:fb:fc:f5:44:b8:d3:60:d9:26:b4:93:e6:5c:cd:9a:54:99:
         48:32:a2:a6:35:5d:97:df:22:d3:d6:31:20:89:ce:54:5c:8f:
         49:09:90:ef:24:19:57:9d:3e:24:ea:31:4b:e5:5c:b9:d6:41:
         7d:a8:74:39:db:1d:91:95:5e:b7:3e:16:b8:57:ba:25:80:20:
         f1:0b:87:fd:e7:a7:b0:51:16:48:fe:55:43:48:ef:85:f2:8f:
         1d:13:9a:51:2c:d7:92:ec:98:d1:47:ad:ee:e4:64:b0:a2:25:
         29:6f:65:d6:12:99:d5:cf:c9:57:55:08:c9:a0:9a:58:ef:57:
         19:db:84:ba:24:42:a2:08:aa:e7:80:11:d3:07:fc:94:7f:6c:
         e8:f6:ff:14:6a:27:6f:9f:f1:85:55:60:b7:66:1c:cc:d8:eb:
         31:5e:76:54:aa:fc:d3:1a:82:55:23:2e:2f:64:f6:71:75:2f:
         a1:2c:61:58:8e:68:d0:4a:d9:e9:54:f4:72:e1:48:62:40:cf:
         dd:8f:8e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:38 2026 by rpki-client