Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File:                     60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier:          bnsvyC/7h4asgYIZRrHeBnqYOG8aiCCqR8RSVN7zZaE=
Subject key identifier:   F9:3C:5D:0A:4E:23:54:A2:DB:69:F9:B1:07:19:46:A0:50:AF:E5:38
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer:       /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number:          AB
Signing time:             Fri 17 Jul 2026 08:22:10 +0000
Manifest this update:     Fri 17 Jul 2026 08:22:09 +0000
Manifest next update:     Fri 24 Jul 2026 08:22:09 +0000
Files and hashes:         1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: y1uM4Uue6M811w8KC1RGppn9Wsjf22Y1cYzqJK4aO0I=)
                          2: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=)
                          3: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: KgTcEBQwyeNNEcPVGV0LGEJQJnqAyFvRcFGWQSUD/3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
                          rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
        Validity
            Not Before: Jul 17 08:22:09 2026 GMT
            Not After : Jul 24 08:22:09 2026 GMT
        Subject: CN=6a59e631-dbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:10:5d:ae:9f:f6:d1:23:5d:98:fd:72:66:f2:
                    d4:e5:6e:89:b4:dc:ab:af:f9:be:47:d7:e3:12:fb:
                    26:ae:9f:6b:00:e2:80:ce:6a:77:53:2c:63:83:c7:
                    9f:ec:67:46:61:65:17:3e:61:3c:23:9f:ec:a4:9c:
                    12:57:43:de:59:01:92:69:bb:a0:42:51:0c:f1:a8:
                    39:2b:41:f8:f7:34:96:c2:d9:8c:ea:7e:a8:c2:dc:
                    0c:c3:ed:35:40:34:83:6d:dc:8a:35:67:dd:e4:ce:
                    dc:7c:66:c1:6c:8b:50:c5:12:e9:ff:0a:71:1c:18:
                    68:f3:ba:14:bc:17:73:67:ee:f3:d2:9e:f8:02:4c:
                    2f:96:f8:22:31:42:0f:26:56:89:fb:e8:f8:d0:51:
                    92:3d:b5:df:3b:ca:81:19:36:de:e1:fe:46:07:b3:
                    51:3e:26:6a:d6:eb:78:d3:77:bb:e0:8c:57:8c:a3:
                    50:a3:bc:f9:a5:22:a0:50:00:1a:33:2c:5a:ac:bb:
                    ca:24:a6:17:ae:35:7e:74:19:f9:99:c6:94:80:42:
                    7f:9b:e4:0d:1c:c6:70:58:53:2a:04:0f:20:2c:ff:
                    6f:6e:04:d2:a4:31:46:6b:6b:fe:5a:61:66:ea:b9:
                    1c:84:69:8b:27:6f:4a:35:bc:df:73:d4:d1:82:7a:
                    9e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:5D:0A:4E:23:54:A2:DB:69:F9:B1:07:19:46:A0:50:AF:E5:38
            X509v3 Authority Key Identifier:
                keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:ec:a2:62:96:e9:ed:34:3e:b5:c6:84:82:20:e0:d8:a2:
         df:cd:89:15:6d:37:cf:75:18:8c:85:7f:64:33:ae:f9:78:86:
         9c:b9:a7:45:e6:d5:40:6a:5d:4c:1a:94:a1:b8:b1:4f:02:fa:
         26:8b:90:53:19:76:6b:40:5a:8a:11:0c:14:34:46:d2:ba:09:
         d1:9c:42:d6:d8:53:47:0d:66:eb:98:f7:17:6d:03:61:36:1b:
         ea:92:cd:93:b0:6c:9a:c0:2b:27:14:59:6e:b2:da:ea:41:b8:
         7b:fc:20:4d:79:b4:88:e4:f7:6d:78:5a:0d:1a:aa:3c:f6:f9:
         41:9a:49:61:0a:ef:54:3b:22:4b:e3:07:8f:62:94:28:af:ce:
         a7:be:48:d7:f3:c4:a5:10:3d:a3:1b:66:d8:47:12:91:40:ae:
         8f:a7:45:f4:44:94:d1:bf:5e:a5:b8:2b:53:94:16:53:de:e3:
         bb:4b:13:e3:38:b5:56:31:21:67:da:bf:bb:a8:31:b2:8f:65:
         88:ff:9b:fb:be:2c:32:07:ad:6a:66:7d:91:44:da:0a:bc:fe:
         44:e6:f8:a2:bb:57:85:51:8b:f4:e7:37:8a:79:d6:32:73:db:
         dd:48:21:95:05:b0:58:58:b9:11:29:28:1c:32:dd:a9:ff:f4:
         f8:31:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:19:16 2026 by rpki-client