Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File:                     l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier:          RPqki7h3M6K3BD8+Gl9dZu2WGfjyeM0QCyXtoo24oII=
Subject key identifier:   F1:F7:65:72:11:4A:16:EE:41:01:AC:EF:17:0B:83:A2:9D:AA:E5:6D
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer:       /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number:          0120
Signing time:             Sun 05 Jul 2026 06:28:15 +0000
Manifest this update:     Sun 05 Jul 2026 06:28:14 +0000
Manifest next update:     Sun 12 Jul 2026 06:28:14 +0000
Files and hashes:         1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: PxlsBnIWJXKq/2ueGmlQMz5KTEkNXQqnOwECp5e9Hgs=)
                          2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
        Validity
            Not Before: Jul  5 06:28:14 2026 GMT
            Not After : Jul 12 06:28:14 2026 GMT
        Subject: CN=6a49f97e-7a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:43:43:87:f9:e9:ea:84:c7:ae:65:d5:98:d6:
                    96:af:70:ce:67:dc:5b:de:fc:00:1c:27:85:15:6c:
                    b9:54:e0:4c:04:75:ea:fd:f9:16:31:35:a9:a9:66:
                    b8:e7:a0:86:2d:5a:35:5e:b7:b4:5c:7a:8b:a4:cc:
                    6f:94:9a:8c:75:61:8c:83:53:c6:cb:fb:87:43:8a:
                    b6:9b:4e:3b:4f:34:e8:26:10:50:df:65:f8:c0:96:
                    ef:d0:17:c5:20:b3:4f:3e:86:c6:a4:f6:bb:45:21:
                    51:d2:83:00:b7:cb:85:c7:bc:83:49:a9:5d:5e:6e:
                    69:12:7b:f1:24:f6:4f:35:ed:98:68:85:fe:67:6f:
                    c5:18:27:95:6e:ea:f2:1d:a8:8a:5b:e7:e6:f8:f7:
                    6b:8d:d4:5e:05:4c:b3:87:b1:0c:e0:f8:a4:13:60:
                    17:16:a8:1d:81:78:91:60:67:e2:1d:70:d8:f0:b6:
                    1c:53:4c:fd:f2:85:a1:c4:09:c7:5d:85:1d:2f:74:
                    31:06:95:12:e5:5d:ec:4b:b3:74:cc:be:8c:5d:24:
                    bf:ac:64:6e:1c:0e:d4:7e:7c:77:74:ab:24:f1:14:
                    fb:b4:bf:39:cc:05:60:b6:ba:ee:df:4c:e3:84:53:
                    de:d2:4f:1a:c9:49:1d:0a:ab:38:87:c3:a4:60:c6:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F7:65:72:11:4A:16:EE:41:01:AC:EF:17:0B:83:A2:9D:AA:E5:6D
            X509v3 Authority Key Identifier:
                keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:df:32:ed:9e:27:5c:51:50:3c:19:99:4d:97:19:77:92:48:
         70:91:41:fc:c8:d5:5c:6e:fa:6c:6b:08:23:7f:5c:8d:af:a3:
         80:93:c2:5b:d6:34:84:e1:bf:63:f0:04:90:29:01:e2:aa:7e:
         57:09:59:bf:c3:19:48:ce:13:b9:75:d3:2b:07:bc:e7:d8:3e:
         2c:0d:18:80:61:5e:2e:ce:cd:a5:1b:8e:ab:8b:9b:23:2d:60:
         92:3e:cf:59:ef:2c:9c:76:8b:63:b7:11:b5:3e:5f:de:8f:1c:
         b9:bb:9e:0a:98:1d:3c:0c:6d:e5:e8:75:6a:67:2c:61:08:b4:
         59:dc:1b:56:01:62:7c:34:1a:9b:28:e5:41:20:34:a0:be:18:
         24:00:d3:d3:5d:d1:79:9a:74:66:9a:38:01:6d:69:c1:47:a1:
         40:37:30:4a:24:4b:9e:f3:a2:fb:c2:67:76:9e:1b:99:bd:b6:
         dd:bc:b3:83:16:76:b0:0f:a7:a8:7d:6e:c6:45:df:cf:d6:b6:
         64:d3:17:50:51:65:ce:09:ca:e5:b0:60:6e:23:3f:50:51:47:
         85:12:82:bd:0c:a7:e4:86:13:06:83:24:18:31:46:2b:82:a5:
         2e:6d:c4:33:14:db:47:2e:ea:bf:19:c5:1e:43:05:0d:71:44:
         45:d0:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:37:02 2026 by rpki-client