Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File:                     fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier:          MGLpE0c6WjQO+0PZMwCMwSns4c6jol55t9EqvMArZhQ=
Subject key identifier:   60:F4:1F:76:15:DE:E0:D8:AF:29:C5:A7:44:D7:03:95:7C:FD:37:85
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer:       /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial:       06CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number:          06C3
Signing time:             Mon 20 Jul 2026 23:00:57 +0000
Manifest this update:     Mon 20 Jul 2026 23:00:56 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:56 +0000
Files and hashes:         1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: trVm4fAIMbEDmJSCLfnw+WLmCGpjKpzpyGpgkbR/3IY=)
                          2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: BveT190IYa4IZx/c6x7to7FKf5iRH7eeNb+xgKFxkXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
                          rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
        Validity
            Not Before: Jul 20 23:00:56 2026 GMT
            Not After : Jul 27 23:00:56 2026 GMT
        Subject: CN=6a5ea8a9-40cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:30:f1:af:23:c4:67:69:af:6a:a4:88:37:
                    1b:cc:2c:c9:21:97:4c:49:33:01:ce:3f:1b:b8:f5:
                    ea:b3:13:c8:71:f8:fe:cc:56:1f:27:c8:65:ba:b3:
                    2b:e2:da:29:30:8f:a1:71:bd:45:08:9c:6a:ce:1c:
                    38:42:3a:10:3f:86:d9:74:99:f5:a7:6f:ee:ba:8e:
                    4d:1b:f0:e0:08:28:14:5d:e1:a0:5e:a2:55:c7:39:
                    db:c2:d2:c7:12:30:63:6f:70:c0:14:33:cf:64:d1:
                    8a:6f:05:14:ff:ee:85:c9:fa:15:56:e1:8e:41:df:
                    d3:d0:e1:6a:0c:56:6f:ce:1a:15:6b:1b:af:91:3f:
                    4c:e8:ac:aa:86:39:56:29:48:ca:cc:69:4f:df:a8:
                    37:9b:c4:b7:aa:fa:17:25:c7:23:15:66:ed:49:7b:
                    cd:9c:a0:e0:b3:cd:95:e2:23:b3:e4:24:4e:a1:99:
                    d6:91:8c:60:26:08:4b:fd:96:c5:ec:16:05:9b:77:
                    31:9d:0a:81:bd:f1:97:bf:16:ea:c3:b4:01:61:79:
                    49:5e:c3:b0:6c:f9:b0:24:68:5c:4b:d0:f0:ca:9a:
                    8a:c0:72:0c:0e:19:c2:7a:62:80:fd:68:f0:e4:fe:
                    1b:fd:44:df:fe:f9:2e:a6:e1:19:80:d8:fb:32:a0:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F4:1F:76:15:DE:E0:D8:AF:29:C5:A7:44:D7:03:95:7C:FD:37:85
            X509v3 Authority Key Identifier:
                keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:78:7f:17:66:ad:a2:30:3a:af:4f:69:be:23:03:a2:2c:
         a3:e1:14:f1:94:95:62:a2:e2:36:58:75:92:df:ef:a9:ac:63:
         38:6f:ba:6a:44:07:76:5c:cf:98:e8:a4:4c:80:c1:54:f8:8e:
         63:40:95:03:38:3b:0c:81:55:ad:4c:63:ac:3a:36:0c:7a:69:
         ff:32:27:7c:dc:51:d8:21:c0:c7:bd:c7:8c:43:02:d9:40:48:
         a4:d4:b0:98:9a:92:8c:18:6f:77:fa:44:54:80:0f:5c:46:0e:
         1a:1a:f0:99:2d:e2:dd:df:d8:82:de:29:87:9e:ce:5c:2f:8a:
         b7:31:36:8a:bd:00:34:8d:f3:5f:48:92:10:9e:a3:e4:59:67:
         e0:74:22:5a:3e:84:ad:af:13:c2:54:1f:2b:cb:1c:02:5f:c9:
         6f:5a:c2:f9:68:c2:5c:84:68:8d:23:49:6e:2f:8f:58:ed:63:
         5b:1f:ae:43:c7:73:9c:21:22:c1:a9:9e:5e:1f:2d:13:0c:b2:
         ba:ac:18:05:7e:fd:b2:8f:67:22:91:6f:fb:29:ab:93:e0:70:
         4c:d8:b2:73:b0:a9:39:79:e9:b2:6e:77:8a:36:dd:91:e5:2d:
         e1:a4:fd:19:a2:39:cf:ad:ff:1b:be:d6:20:68:3d:16:19:7b:
         35:17:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:29:32 2026 by rpki-client