Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File:                     N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier:          m2b18DdSke1uCKe+3v0qStX3yr2yd/BJeMVtdf+m0sA=
Subject key identifier:   AB:9E:A5:34:CE:74:D8:4D:18:68:4A:3F:31:D1:1F:03:0A:3F:BC:0D
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       0622
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number:          0604
Signing time:             Sat 04 Jul 2026 23:15:08 +0000
Manifest this update:     Sat 04 Jul 2026 23:15:07 +0000
Manifest next update:     Sat 11 Jul 2026 23:15:07 +0000
Files and hashes:         1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: GZTKABT4+aDiWDR736Grvmc3Gg3GDWqJqEoldP5ZGVY=)
                          2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: jiJ/Apxk0RCnezc8z5hn0e9XoDw9lt0qYbyy+Q1Gh0Q=)
                          3: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: 7uquT9D1sV2YgdxdolpJDoZ9g+QO6lmrDAgSjgdq8+w=)
                          4: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: UnloyJqO5mDJNTuFL9b9idDNwOwv5RK3dGrtJoBgFTQ=)
                          5: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: JJ5ZiLh38XYP4D8yimnjxevWv+FpQHjzlnERYLydtT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 23:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570 (0x622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Jul  4 23:15:07 2026 GMT
            Not After : Jul 11 23:15:07 2026 GMT
        Subject: CN=6a4993fc-59de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:64:51:e5:55:5e:96:bc:7c:0d:93:a8:25:
                    dd:cf:4b:e1:d6:9a:1e:fe:53:99:b4:38:67:03:23:
                    9d:53:b0:d3:76:2d:ad:19:74:8d:2b:ea:ae:ab:66:
                    c9:91:ab:0e:52:5b:9c:94:42:40:58:e3:fb:12:9c:
                    4e:08:4f:e9:25:8f:30:4e:ab:8e:f7:7c:68:81:cc:
                    1f:07:96:d0:d9:c5:52:ca:c4:86:aa:66:1e:6f:3a:
                    44:63:1c:dd:7f:db:ad:b6:eb:35:71:0e:66:8e:5d:
                    80:f3:4c:f3:72:b3:4a:86:03:de:3d:3d:7b:fa:64:
                    57:db:18:70:7c:68:9a:d7:7a:b0:03:1f:78:71:9b:
                    b9:38:11:10:ab:3b:26:51:aa:93:c7:48:55:ba:8d:
                    25:bc:f9:a4:0b:8b:16:24:b4:ad:57:5f:db:49:27:
                    cc:26:3f:bd:dc:96:34:02:f7:ff:a8:8b:03:53:79:
                    01:04:c7:61:bf:56:ee:92:67:b1:e9:12:9a:ab:cd:
                    3a:ee:82:d4:59:8c:5f:57:d6:55:38:b7:80:e5:11:
                    58:02:f1:03:46:63:3b:8d:01:f0:3e:f8:a4:c0:0a:
                    2b:0f:d5:4d:7d:36:c0:88:24:88:de:c7:63:f4:f2:
                    5f:d9:c6:2f:da:35:52:de:08:92:91:80:70:eb:e6:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9E:A5:34:CE:74:D8:4D:18:68:4A:3F:31:D1:1F:03:0A:3F:BC:0D
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:71:0e:1c:d3:1e:f9:bf:6b:a3:06:fc:09:af:65:75:98:60:
         cc:f2:33:4f:cc:95:92:6d:82:b8:57:d1:c4:7a:e6:aa:63:49:
         19:11:71:3d:9f:2e:0a:82:17:7f:a0:05:07:fe:c2:1b:54:b1:
         b0:8d:87:98:60:18:f3:21:80:a0:53:03:22:4a:5a:af:d6:3b:
         96:88:ca:bc:24:c0:1c:ad:64:36:ec:e5:23:70:20:ff:49:2c:
         54:4c:91:f7:2e:7c:51:fd:bc:8c:15:29:d9:ba:be:23:3f:85:
         44:9d:41:45:58:ab:aa:ab:fb:44:14:e4:f6:3f:33:c1:31:ee:
         f4:ea:50:24:03:72:3c:58:d8:f6:49:22:09:9a:69:23:42:0b:
         a5:4e:1c:c3:b4:ee:da:19:51:64:26:ee:50:e8:18:d4:95:cc:
         4c:d1:0f:cf:a8:58:57:36:20:c4:5f:bf:4b:b5:4a:6b:21:85:
         8b:51:e1:7a:fc:d0:3c:25:23:8b:52:71:26:e4:d0:6e:0d:3f:
         bb:3e:7a:18:68:de:68:ae:a1:c9:af:d8:3f:e7:72:96:95:ab:
         1f:bc:93:cc:34:3f:be:3d:fc:78:2b:7a:32:53:9a:e2:b8:0a:
         3d:01:0e:63:c0:9e:fa:2e:b0:26:42:78:27:47:ce:ca:1c:9e:
         ca:5d:93:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:19 2026 by rpki-client