Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
File:                     Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json)
Hash identifier:          5dHJ/f3Ek/4+m29BBN75g4VotWdZpVECjbR4rs392ws=
Subject key identifier:   98:3A:B1:E1:03:2E:50:F7:81:85:9B:01:D7:43:A4:EF:73:35:67:5A
Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
Certificate issuer:       /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Certificate serial:       0873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
Manifest number:          0861
Signing time:             Thu 16 Jul 2026 21:12:03 +0000
Manifest this update:     Thu 16 Jul 2026 21:12:03 +0000
Manifest next update:     Thu 23 Jul 2026 21:12:03 +0000
Files and hashes:         1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: FnUIExmL9xuJAaXHMhnV1DADahGJVA4RC8+Wu9VFYxM=)
                          2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: YSshHnrBitWJflcXZv9vZjmuWryahdL3ueeQ/8L7cts=)
                          3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 4KpiEW9W9pRgd3+FQVTWJZ0pxE+Z+z9l6OeSvbZgOVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
                          rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 21:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
        Validity
            Not Before: Jul 16 21:12:03 2026 GMT
            Not After : Jul 23 21:12:03 2026 GMT
        Subject: CN=6a594923-f1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:b7:ee:32:94:58:b8:07:3a:44:4a:e9:69:
                    ac:81:ad:aa:07:38:49:dd:5c:07:69:78:a3:89:30:
                    a5:da:51:75:a0:eb:70:98:f6:3b:4b:93:87:2a:c9:
                    b9:76:8e:43:f6:fa:94:76:25:52:de:8d:b8:ab:64:
                    4f:88:af:0c:c5:e4:2f:1c:b6:0e:c3:0e:56:1f:e5:
                    54:c7:ef:e8:e5:dc:ff:fb:45:2f:39:af:e4:94:a5:
                    65:5a:8c:0e:0a:04:7f:90:99:b9:c7:91:22:8a:80:
                    c7:61:41:06:4e:df:81:76:0d:6a:f8:25:b0:5f:99:
                    ff:da:ad:9b:33:47:49:6e:3d:c7:62:61:fc:c4:dd:
                    63:4b:3a:44:dd:af:39:6c:7e:06:31:d2:5e:88:c0:
                    13:5f:c3:c2:0c:fd:07:4b:ef:58:08:0c:b7:1f:a7:
                    81:ac:03:41:33:23:6e:32:99:30:6b:46:a5:d6:cb:
                    f5:07:8e:1b:7f:75:d3:4f:73:c8:db:1c:23:d6:93:
                    4c:0a:4e:b0:55:0b:9c:02:23:f5:e4:43:6d:ec:4b:
                    9d:60:80:a7:d4:56:7f:89:1e:fd:fb:bc:d5:8b:db:
                    38:df:88:22:6c:46:ee:f2:5c:38:5c:72:9c:07:0f:
                    fa:07:2a:9d:3e:cd:59:8e:9d:c1:86:48:95:78:2d:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3A:B1:E1:03:2E:50:F7:81:85:9B:01:D7:43:A4:EF:73:35:67:5A
            X509v3 Authority Key Identifier:
                keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:a4:0e:98:77:24:1c:d3:0e:53:03:a9:e5:e5:ab:97:66:
         c8:1a:d7:00:6f:42:3c:c2:3c:29:9a:0d:82:25:b3:10:9c:52:
         9f:13:32:62:8f:2f:86:4f:27:41:24:84:c7:78:6c:7f:77:b6:
         92:e9:72:fa:9f:fe:fe:7b:d9:fb:94:59:f6:aa:34:e7:ff:f7:
         c3:53:40:cb:d2:84:3c:cb:bb:d2:0c:eb:a6:95:78:90:a2:fa:
         d9:d1:21:68:da:bd:06:fa:3d:74:9d:9b:c5:43:22:fa:cf:f1:
         2b:9a:25:d7:b7:6a:3b:d7:b5:78:1a:74:9e:5d:09:78:a5:19:
         8d:e1:ca:53:73:8f:e1:0f:d9:f8:69:0a:2b:a7:8e:2f:29:f1:
         5c:07:f9:71:e9:45:00:f9:42:de:6f:53:b4:b9:88:8e:a6:ed:
         f9:0f:13:0c:95:97:45:38:4e:f3:4e:1f:4e:18:19:04:fc:b6:
         44:41:0b:f7:08:84:8a:8b:d7:48:ff:48:98:97:5a:20:66:7e:
         1e:c5:6e:65:78:a5:c6:44:7f:3c:4b:b9:b7:6e:ee:6c:05:71:
         ef:24:fa:e7:03:ef:fa:54:be:c6:e1:98:ed:d1:f0:79:86:f3:
         21:ae:bb:92:d9:82:f8:e5:9c:17:a3:f2:bd:90:2b:8c:fa:b1:
         6b:85:54:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:18 2026 by rpki-client