Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File:                     gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier:          b72Wa70B8Vms4BF8sYqhdyI14HF6iDRs+epp6z49b50=
Subject key identifier:   60:67:C8:20:77:97:B5:A1:3D:7B:C8:92:21:75:42:D3:7D:70:AC:47
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number:          022F
Signing time:             Thu 09 Jul 2026 04:14:27 +0000
Manifest this update:     Thu 09 Jul 2026 04:14:27 +0000
Manifest next update:     Thu 16 Jul 2026 04:14:27 +0000
Files and hashes:         1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: xr5exP1oBhpJ1r2VOkUGBxa+cdpUlGpaq1AV8wdX93s=)
                          2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=)
                          3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 04:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Jul  9 04:14:27 2026 GMT
            Not After : Jul 16 04:14:27 2026 GMT
        Subject: CN=6a4f2023-cfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:86:f1:74:df:2a:b0:a9:04:68:ac:eb:ed:
                    2f:99:9c:9a:09:ec:d0:be:b2:fb:83:37:d2:6c:57:
                    04:0d:39:07:5a:44:c2:d8:1a:43:87:61:a5:a6:c2:
                    12:92:48:9b:94:35:a1:b6:6d:27:d0:ea:be:ee:03:
                    6a:b6:09:a7:e9:06:a9:a7:b7:19:0b:61:94:5b:e5:
                    82:93:6f:10:40:a3:44:fb:2c:58:97:a2:85:f1:d3:
                    57:33:7a:a2:03:91:bc:f4:a5:d3:4f:d7:4a:d1:cd:
                    5a:6e:d2:9b:d8:94:e6:b4:f3:0e:b1:b6:d9:f2:fa:
                    3a:67:ae:3b:14:06:f6:28:2c:33:78:cd:b6:50:fe:
                    d9:a0:e0:89:89:b6:47:6b:94:ff:d5:d8:45:5c:f3:
                    ae:ac:4e:43:7f:99:a2:0e:cf:ba:bc:de:52:b5:bf:
                    c6:da:28:29:d3:c0:3a:01:4d:53:f9:12:ae:d3:8b:
                    39:f0:36:9a:21:bb:12:e6:1f:e5:fc:1c:87:5e:72:
                    43:25:29:33:85:1f:ca:ff:4f:bd:59:f6:4a:9b:f3:
                    f7:cd:7a:f0:55:cb:65:b3:28:c3:4d:58:4a:57:9c:
                    86:f6:1f:23:6e:c3:28:c8:1e:00:c1:2c:41:15:58:
                    df:9b:99:06:a7:84:83:3e:fc:1b:51:0f:e2:d8:a4:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:67:C8:20:77:97:B5:A1:3D:7B:C8:92:21:75:42:D3:7D:70:AC:47
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c3:f2:df:a5:28:c2:c1:03:24:f3:68:70:ae:7b:87:45:07:
         18:e9:9d:7c:0f:28:1d:3c:92:df:6b:25:9f:85:e9:03:cd:cb:
         23:93:7a:4b:e2:d8:fa:a0:2e:57:40:bc:2e:cd:7e:83:52:79:
         0a:57:26:4d:c3:9c:20:41:2f:0d:37:2d:0a:a2:ae:c6:92:c8:
         14:f2:36:54:0a:8e:95:ba:85:70:ab:19:81:7c:05:ae:e3:42:
         68:62:1c:7b:f7:49:69:e9:d3:e8:92:aa:b9:d8:34:59:2e:e7:
         9e:0e:4f:e9:c0:44:3a:81:16:8f:73:11:09:12:ef:19:cb:38:
         b2:b1:04:9c:53:a1:22:bb:51:01:96:54:99:8e:2e:be:bf:87:
         b2:85:f9:bc:1f:1d:ca:b6:b8:cd:b7:d4:36:d2:d2:1c:a1:c9:
         5d:20:b8:45:5f:56:58:53:71:1b:41:c4:e4:ab:5e:3e:e5:5b:
         5d:d5:7d:38:e5:90:7a:7b:bb:95:b9:75:8e:c3:18:f5:83:f3:
         88:90:8d:1b:53:97:b0:89:46:1b:b6:fa:4f:da:45:f2:d1:eb:
         dd:95:08:d1:4c:99:b3:22:4f:78:a5:91:65:24:74:02:3d:9e:
         23:5a:a0:70:c9:00:05:de:28:48:50:c7:f3:32:12:3c:bc:0f:
         38:5b:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:27:45 2026 by rpki-client