Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
File:                     9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json)
Hash identifier:          u3OSeyjoT6zVCHzUMfqCrdAdTkuiV6XMt0Hcghi5dVs=
Subject key identifier:   CF:37:13:9D:BB:68:31:96:E3:6E:BE:B5:DA:81:8A:A8:63:12:10:DD
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Certificate issuer:       /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial:       0719
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
Manifest number:          070A
Signing time:             Mon 20 Jul 2026 22:46:33 +0000
Manifest this update:     Mon 20 Jul 2026 22:46:33 +0000
Manifest next update:     Mon 27 Jul 2026 22:46:33 +0000
Files and hashes:         1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: bKqBM58iM6qSeRJYJUdv5nifnryC68NS5jWPrmkH8js=)
                          2: 613CF60638D211EF88A7B370C4F9AE02.roa (hash: xLvnAukowQuOqMyfhlSAcbV4RtP06uwO5EVIBs8+AuA=)
                          3: 948A2714980211EB82357D6CC4F9AE02.roa (hash: JxJu+W/gFVrLs6UZ+M7EgRJNsak7W2VInKyM/kAMIno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
                          rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 22:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
        Validity
            Not Before: Jul 20 22:46:33 2026 GMT
            Not After : Jul 27 22:46:33 2026 GMT
        Subject: CN=6a5ea549-388b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:8a:38:2b:ae:80:66:6c:8f:cf:d6:d2:f6:
                    a4:d3:92:98:68:e9:d5:ac:0d:41:f2:0b:7a:1f:66:
                    1f:2d:13:9d:9f:86:17:a3:cc:57:6e:10:1d:ed:44:
                    99:52:df:ce:7d:17:07:75:57:9e:08:6c:be:67:82:
                    9d:77:77:ae:83:89:69:33:10:bc:d8:89:d5:d1:63:
                    09:78:90:b9:06:d2:36:73:1a:21:aa:9d:04:aa:31:
                    0e:1e:4c:b2:13:42:89:70:0c:87:70:30:8f:7b:ff:
                    69:dc:ca:af:11:d1:69:4d:b6:c0:98:32:1c:86:a8:
                    25:9b:e6:da:73:aa:ed:2b:4d:5f:bd:2b:4b:93:cc:
                    3a:02:78:89:8e:f7:36:24:8f:74:df:6e:a8:9c:d3:
                    c6:18:f0:61:a6:6e:46:84:8b:dc:7f:fb:f3:ad:01:
                    01:f5:c0:44:4b:ce:cf:4e:a7:7d:46:8c:9d:a2:73:
                    b2:24:a2:5e:ff:59:a2:64:b9:67:29:46:a7:9a:30:
                    ff:49:d3:a5:e6:1a:d9:7c:3b:86:e1:e5:c7:64:51:
                    b7:07:a0:4e:f7:f8:80:fb:c4:7b:58:8e:28:fb:7c:
                    99:35:a8:06:39:2f:e8:3c:47:cb:cc:57:4d:f6:04:
                    d8:64:d3:89:9a:df:60:43:ec:59:21:2d:f3:05:4b:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:13:9D:BB:68:31:96:E3:6E:BE:B5:DA:81:8A:A8:63:12:10:DD
            X509v3 Authority Key Identifier:
                keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:af:ab:db:f1:65:1c:1c:73:0e:0c:83:e6:e5:1e:85:2f:
         d2:3b:72:f3:f3:08:2d:6e:7d:e1:45:83:23:16:32:39:57:93:
         b7:d2:8a:ea:bb:06:42:44:58:d4:2a:d3:d1:14:78:a3:d2:ed:
         e3:3a:97:21:44:79:e0:67:c8:45:3c:68:06:6c:62:88:7e:be:
         5c:b4:19:50:f0:c5:2c:a5:01:a9:0c:18:cb:26:78:e5:2d:51:
         66:91:b0:4c:30:14:17:9c:9d:6f:d1:6c:13:dc:71:69:0e:a6:
         86:36:a1:b8:6e:91:75:b0:3c:db:b6:c0:37:ea:4f:68:b3:48:
         01:72:81:6d:5a:1b:9f:e4:93:c2:29:10:fd:1d:40:39:05:22:
         f0:dc:08:f8:88:a0:e5:35:d8:29:8c:dd:ac:48:f8:c8:db:fc:
         44:bb:c3:c6:0b:5a:18:5a:ba:a6:84:bc:37:68:6d:40:78:6a:
         ec:55:f6:13:83:a8:ec:91:15:aa:7e:a0:78:b7:fc:2a:20:1b:
         3d:2f:b2:4a:65:07:b9:56:ba:03:c4:44:6c:71:c8:32:c4:03:
         0b:bd:fc:ca:33:cd:76:e7:a3:d8:7b:d9:f9:26:cc:84:8f:bb:
         e6:f2:44:43:50:e5:77:c0:b1:f6:e4:d5:d4:17:02:eb:c9:95:
         b1:7b:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:42 2026 by rpki-client