Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
File:                     C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft (raw, json)
Hash identifier:          pZExd8+t5Ru/Vl0KWLtwBZKiUCadvAzfJxdOGnjUQ/c=
Subject key identifier:   64:E9:14:A3:1E:1E:1B:25:ED:9B:C7:29:A3:4A:5F:BA:F6:3C:C9:C0
Authority key identifier: 0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C
Certificate issuer:       /CN=A912C2EB/serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
Manifest number:          0A
Signing time:             Fri 17 Jul 2026 10:29:30 +0000
Manifest this update:     Fri 17 Jul 2026 10:29:30 +0000
Manifest next update:     Fri 24 Jul 2026 10:29:30 +0000
Files and hashes:         1: C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl (hash: py2wq9q6jSzn6V8prnWStW+WEgRv/4f3PAUQL6RV22Y=)
                          2: E64DF1C2738811F1BF8D4D716EA30FBC.roa (hash: ta94cq6P3Y9AqMQ72/iTm11UyiyepXDOi/daYTMVMwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl
                          rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2EB, serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C
        Validity
            Not Before: Jul 17 10:29:30 2026 GMT
            Not After : Jul 24 10:29:30 2026 GMT
        Subject: CN=6a5a040a-3024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:3e:50:6e:d2:ba:82:32:64:47:b6:b4:92:
                    4f:b0:13:eb:60:50:e1:90:72:da:b9:69:99:95:9b:
                    36:9c:c4:62:56:b4:5b:c4:0f:ff:ec:ec:48:32:87:
                    a8:99:df:5b:90:f0:4e:22:f2:ce:85:84:dd:0b:93:
                    64:18:6f:31:88:3f:9b:1e:4f:ee:77:6c:83:9d:0c:
                    fe:56:d5:1e:4e:c2:02:70:fb:49:52:2c:2e:47:ea:
                    e8:4f:5f:31:4e:21:b1:92:b1:32:40:71:47:cc:44:
                    6d:1d:cd:b9:05:fc:db:cf:31:7b:d1:b8:1b:bb:91:
                    ae:53:b9:fe:b4:4c:78:8b:62:e9:57:b7:73:3f:9c:
                    f2:72:22:6d:9f:bb:61:77:2c:52:68:ff:41:b2:40:
                    4c:54:f9:bf:4a:1c:4d:52:55:86:7c:87:69:e9:1b:
                    28:06:01:d6:8a:45:f3:20:ef:a1:6c:6d:e5:71:ed:
                    af:a7:4e:98:65:27:91:40:d4:fd:4d:61:36:b6:ed:
                    05:21:6d:76:18:54:aa:4c:2b:87:e8:95:82:89:52:
                    c5:e7:1e:a5:1a:5a:9b:eb:f1:fa:b5:2d:0b:0d:d3:
                    67:c1:de:7d:90:4f:c1:64:1e:2a:6c:fd:22:95:ce:
                    b6:1d:a9:c4:dd:29:a7:e2:e4:58:30:49:d4:2d:f4:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E9:14:A3:1E:1E:1B:25:ED:9B:C7:29:A3:4A:5F:BA:F6:3C:C9:C0
            X509v3 Authority Key Identifier:
                keyid:0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:a8:9f:1e:e0:46:e4:14:d2:56:48:0a:73:f8:f3:ee:c6:
         35:c1:34:d9:16:37:55:0d:cf:b3:2a:be:87:a7:ab:4e:28:00:
         62:e0:df:52:f4:13:e1:2a:96:2d:a1:28:62:48:f6:7b:2f:b3:
         6e:f9:75:b4:af:76:a9:7d:73:ed:e7:1a:1d:af:e4:fe:a3:e6:
         0c:bc:da:41:4b:23:2f:31:4e:ff:1a:29:cc:21:13:47:38:df:
         7c:14:b4:5a:7f:c1:9c:4b:c5:60:e9:77:8c:63:bf:c6:8c:ce:
         ac:97:a1:57:c6:da:46:d0:13:7d:cc:76:27:4f:80:bb:bf:ef:
         2d:9f:dd:fe:bc:da:d0:8e:7d:44:de:16:6d:0f:97:bc:05:3f:
         07:c1:58:42:90:19:b3:9c:d1:86:35:f2:52:ed:c6:e0:25:63:
         10:ba:13:fa:4b:fe:2c:4e:4a:38:81:ef:f8:46:7a:d1:46:e9:
         72:af:0e:c7:5e:6e:58:c9:08:b5:d4:0b:de:88:40:d9:a1:ae:
         cc:4a:c9:f7:80:0f:d0:a5:c4:b4:14:05:02:de:02:2f:97:fc:
         4c:d9:73:38:de:f1:c9:b5:0d:fa:4a:7e:27:82:c5:f3:27:a2:
         e8:38:8e:40:66:36:a8:ab:c9:cf:3b:78:b0:bd:9f:92:ec:f6:
         6f:9e:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:10:19 2026 by rpki-client