Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File:                     l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier:          Mv2gXPI5y35kMwZo5MjbWNaUfiZusUi9w0mMEnVMJak=
Subject key identifier:   15:D1:7E:87:A9:AE:69:0F:B9:03:8D:17:C1:57:48:2A:26:C4:67:36
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer:       /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number:          0137
Signing time:             Wed 19 Aug 2026 06:12:09 +0000
Manifest this update:     Wed 19 Aug 2026 06:12:08 +0000
Manifest next update:     Wed 26 Aug 2026 06:12:08 +0000
Files and hashes:         1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: wciAvI7TDSHQueH6ggYz8glfHz1S0aYQ6SFTeGIAr1A=)
                          2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
        Validity
            Not Before: Aug 19 06:12:08 2026 GMT
            Not After : Aug 26 06:12:08 2026 GMT
        Subject: CN=6a854939-e22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:bf:21:5c:5e:ff:2e:21:d0:0c:74:d7:c4:
                    97:b6:fd:57:8f:ac:64:d8:10:98:da:ea:64:cb:b1:
                    98:56:ec:a5:30:c6:dd:0c:81:a7:e9:d7:06:cc:5e:
                    43:71:eb:9a:3c:c5:73:c3:ff:55:b2:98:d9:8a:2f:
                    60:13:3b:48:57:fa:9e:06:78:9d:1a:2d:fb:bd:ad:
                    fc:b1:06:08:92:bd:3d:08:dc:3d:50:e1:bc:a1:fd:
                    af:2f:a3:43:47:d6:df:06:fd:bf:eb:ae:9a:ec:e0:
                    e5:bd:c0:73:c3:60:c7:ff:b8:5a:89:3e:ef:27:ac:
                    30:cd:d6:b9:86:a6:be:0a:83:ac:6c:9c:b2:ad:b7:
                    ff:28:4d:0a:26:b3:83:e8:ba:9a:23:66:33:8c:f6:
                    b4:49:44:ce:15:a2:1b:21:27:31:cf:3d:ca:a3:21:
                    ee:37:d0:ec:bf:51:58:bb:91:3b:a5:0f:0f:9f:f9:
                    5f:35:27:2a:06:66:10:fd:ba:69:0a:42:28:04:c9:
                    c5:b6:30:ab:e3:61:14:69:e9:53:e8:f7:e3:fb:eb:
                    54:d9:a7:13:17:9e:ba:59:48:91:5d:05:92:4c:9a:
                    b7:c7:02:bb:c8:db:37:70:80:82:19:6e:e7:b5:30:
                    0e:85:e8:9c:f8:fd:e4:8f:18:bd:83:84:a4:25:34:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D1:7E:87:A9:AE:69:0F:B9:03:8D:17:C1:57:48:2A:26:C4:67:36
            X509v3 Authority Key Identifier:
                keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:17:b8:d4:c7:39:8f:18:cd:29:dc:3e:c5:85:17:49:4c:35:
         bc:de:8e:58:3a:62:1f:5b:2e:d1:38:c3:aa:5d:bd:64:51:88:
         46:ef:da:d8:b5:c8:2a:a6:2b:13:bc:ef:16:61:f3:73:b1:97:
         c5:c1:47:df:56:2b:10:ff:a8:64:32:e4:46:40:c5:e1:b2:0f:
         7f:f8:40:c1:9d:66:0f:78:45:1e:5b:fa:6d:ce:7b:97:fa:6c:
         53:f0:c9:c4:02:ed:6d:8d:44:27:7a:48:4a:b8:d1:a4:92:25:
         5a:92:b9:2a:a2:24:d3:f7:77:43:96:f1:0c:dc:47:9a:c8:f8:
         58:0e:7a:9f:d8:9f:59:ce:25:10:b8:55:fd:bd:d2:7e:fe:a9:
         f8:7c:84:e8:19:ad:5b:02:d3:11:9f:ce:e2:cd:a7:08:66:75:
         e6:e5:72:a8:33:f7:9b:11:1d:fe:34:92:8c:0e:ad:9c:46:1e:
         02:05:be:f8:bd:35:e3:ac:40:ce:da:9a:6b:c1:e7:ad:05:eb:
         5e:f2:5e:b9:e7:63:2c:d7:6f:41:1f:c5:84:87:de:af:9c:4f:
         a1:ae:a9:17:98:7b:b6:db:8f:e9:b7:50:97:0a:ec:27:d6:3b:
         4d:28:1f:27:df:20:cf:df:33:f4:bb:33:e2:ae:e6:56:cc:77:
         94:e2:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:33:52 2026 by rpki-client