Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File:                     asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier:          3hJ9/HVCABdtRXxVjw3ebjmH2IM7pLvnD/pmnYv/Ytk=
Subject key identifier:   C4:A3:76:96:4C:3B:7B:97:63:D1:36:7E:A7:45:DB:44:ED:87:1E:03
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer:       /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial:       0C9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number:          0C90
Signing time:             Mon 20 Jul 2026 18:56:27 +0000
Manifest this update:     Mon 20 Jul 2026 18:56:26 +0000
Manifest next update:     Mon 27 Jul 2026 18:56:26 +0000
Files and hashes:         1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: vZftu4hKD05GJPrKpLRhji5qppNmBnMsnYOnW+8i8Ck=)
                          2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: 9BPurM+bulBYlNNGJgaGdzigQeRd9Aok8jx7Ea5CeBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
                          rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 18:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3230 (0xc9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
        Validity
            Not Before: Jul 20 18:56:26 2026 GMT
            Not After : Jul 27 18:56:26 2026 GMT
        Subject: CN=6a5e6f5a-cb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:15:93:2d:3a:0a:57:3a:0c:9a:ae:b2:09:
                    42:28:50:e5:db:09:a1:b8:79:ad:b0:db:ba:44:f6:
                    47:b6:a0:b8:16:4c:d8:a6:ef:41:4c:af:46:98:87:
                    27:e5:51:9f:2b:fb:98:34:e0:3e:98:a4:d5:c6:e5:
                    91:78:f8:38:47:bf:2b:70:02:60:ba:4e:22:ad:ee:
                    c4:f0:7c:7a:fe:75:0a:cd:24:52:99:9f:81:b5:24:
                    7f:68:3d:e7:0b:cb:8a:56:1a:a0:9f:f3:43:60:0d:
                    7c:04:77:fd:ff:43:f8:d6:54:cc:eb:38:d5:cd:f2:
                    cf:2d:c2:64:a5:3e:d5:ec:9c:e7:79:6e:b2:a3:ec:
                    3d:bb:f9:a9:4d:6f:a4:57:35:c1:bf:c8:62:4a:d2:
                    2e:81:40:9c:fa:6f:eb:a6:74:ed:ee:08:46:dd:7b:
                    82:6f:38:0f:cf:2c:92:80:65:f2:d9:08:9e:26:ce:
                    18:f6:5a:47:87:25:0c:90:ed:92:a2:b8:6c:b7:cb:
                    54:48:f4:10:12:7f:76:16:91:b8:24:d2:5d:21:4e:
                    ae:b2:39:ab:af:30:70:6c:d3:a5:ba:99:34:af:61:
                    81:85:3e:62:0c:34:a8:9d:31:d0:2e:86:ee:b5:4c:
                    7a:62:9a:35:d9:b0:7a:72:ca:8e:65:a3:30:0e:2b:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:76:96:4C:3B:7B:97:63:D1:36:7E:A7:45:DB:44:ED:87:1E:03
            X509v3 Authority Key Identifier:
                keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:92:fc:5d:f1:4b:58:90:77:a6:37:79:97:31:95:37:5c:fc:
         e9:8b:16:4f:90:c2:54:e5:96:a0:99:2a:0c:03:83:e8:80:69:
         74:6b:07:28:72:f5:31:29:f5:77:3a:f0:04:b6:c5:c8:00:db:
         36:37:87:25:0d:e1:e4:1d:01:ad:35:c5:bf:ea:d8:db:0f:ca:
         7e:7d:73:3a:df:08:ed:a6:1f:0f:80:ca:3b:b9:38:ee:c7:b1:
         44:dd:d1:23:e3:4c:7d:8b:1d:e6:f3:05:28:60:32:33:2b:dd:
         9c:d8:d6:7d:a6:20:6f:98:70:07:bc:45:42:62:fe:08:21:0d:
         c7:e7:b1:40:33:56:22:3d:42:26:d1:6b:98:f1:e4:60:60:cf:
         b3:52:e7:0a:34:95:45:79:71:7e:f4:d8:29:e5:fc:89:b5:33:
         d9:f9:34:2f:02:a1:4d:55:b4:98:db:49:22:ec:07:d4:20:4e:
         82:dd:0c:5f:af:bd:95:c5:b3:6a:df:9e:68:c7:4b:22:6e:2c:
         72:a9:f8:4f:6a:f0:84:35:0a:fd:80:da:e1:f7:c9:b6:da:8c:
         49:c4:98:a6:80:6f:7a:c7:8a:7e:69:14:2a:7c:87:af:9e:e8:
         d1:ba:6f:63:4b:16:ad:d2:ea:90:93:7d:61:67:5e:5e:ae:b7:
         23:46:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:08:38 2026 by rpki-client