Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
File:                     0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json)
Hash identifier:          KAVcDbdgy8R0BOXXXR9g5rdoU4zGwU9d6vlSxTVnna0=
Subject key identifier:   16:EC:73:A4:B0:69:9C:51:A7:6D:83:3B:2A:EC:6D:F6:8B:3D:CD:04
Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Certificate issuer:       /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Certificate serial:       0C09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
Manifest number:          0BFC
Signing time:             Sat 04 Jul 2026 18:57:32 +0000
Manifest this update:     Sat 04 Jul 2026 18:57:31 +0000
Manifest next update:     Sat 11 Jul 2026 18:57:31 +0000
Files and hashes:         1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: yM4zubHqLK1HQdy9RJRWkyP1l8pMl/8PVj2FcQIlO+4=)
                          2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: 5PMpMbiDvOrHyA2aZdrK2EqToeI6RWLqz3P1054gczc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
                          rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 18:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3081 (0xc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
        Validity
            Not Before: Jul  4 18:57:31 2026 GMT
            Not After : Jul 11 18:57:31 2026 GMT
        Subject: CN=6a49579c-5fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c7:17:f4:93:f6:f4:da:c2:13:1a:6a:72:c7:
                    78:1d:2e:b0:40:1e:a1:d5:36:06:07:8a:2d:81:1b:
                    c5:25:0d:0d:18:75:f7:22:14:9c:f2:af:7c:72:85:
                    8f:51:da:87:03:8c:6f:06:5e:50:01:5f:57:4c:a4:
                    d1:7b:e1:85:c0:d9:d7:c0:54:f3:3f:04:b5:dd:96:
                    a3:d9:33:e1:c8:b0:db:8e:75:9c:dc:12:5a:be:4d:
                    7d:a9:c2:b3:5b:95:56:f3:3a:30:e4:6c:93:4d:97:
                    43:8c:f2:a6:90:db:7f:52:71:09:14:53:30:74:4b:
                    1c:90:b9:b3:de:e0:44:97:16:35:22:9f:20:54:33:
                    35:f8:c9:4c:22:52:8a:15:cd:ce:dd:88:d9:bf:7f:
                    88:cd:af:d0:a1:06:53:44:bb:e2:62:44:ed:5e:2a:
                    49:a3:0e:77:e9:df:51:c6:91:6e:91:68:56:6e:20:
                    0d:e9:9a:65:2f:e6:79:62:39:64:ce:fc:b1:2b:88:
                    46:57:84:16:15:8f:7a:0f:95:03:d2:5d:c5:d6:41:
                    e4:b9:e3:83:dd:e9:71:2e:40:5c:36:9b:22:01:e2:
                    e6:89:73:95:c5:3b:3d:4e:f6:56:80:f0:f1:9d:85:
                    1c:f4:2b:62:50:58:98:1e:48:ab:a7:70:dd:f5:71:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EC:73:A4:B0:69:9C:51:A7:6D:83:3B:2A:EC:6D:F6:8B:3D:CD:04
            X509v3 Authority Key Identifier:
                keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e7:de:ed:93:52:4c:7d:d9:41:57:25:87:3a:ea:ca:0a:40:
         f5:a0:30:68:78:b8:0f:2d:3d:25:ea:8a:c6:53:2a:d0:c4:a2:
         b1:30:de:5c:68:8d:44:89:80:dd:7e:eb:af:a5:35:65:6b:63:
         55:ef:e2:4d:e4:e6:78:8c:ca:31:ed:34:1b:9a:69:ee:aa:03:
         0a:01:44:ba:fc:6d:b9:80:d3:87:b9:1f:04:ef:c3:2b:f7:45:
         cc:d6:10:57:98:c9:1b:ce:42:77:fa:81:1c:af:b7:49:a7:53:
         a6:a7:0f:f1:73:4e:76:3b:88:48:86:0a:43:1f:b2:a7:99:af:
         b8:84:bf:53:5e:78:6b:ba:5a:e5:53:bc:58:c3:7a:5b:e3:ba:
         15:a1:34:28:9d:54:23:ec:ca:6e:9d:3e:44:3f:ce:05:2e:87:
         29:0a:69:65:51:3d:12:f0:b6:07:1a:a1:9c:2e:a0:91:5e:52:
         19:d2:b1:30:a6:3d:86:56:74:c5:b7:fe:96:23:4e:d6:51:97:
         10:6a:35:21:90:37:2b:0c:82:7e:89:26:70:3d:56:cc:61:8a:
         37:20:a5:7e:2d:6f:ab:db:78:ba:79:b2:81:cc:12:40:bf:8e:
         6d:07:6e:64:86:7d:aa:15:32:6e:a6:d7:50:22:63:6e:29:c3:
         e4:da:b0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:20 2026 by rpki-client