Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File:                     G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier:          AzlSNJE2pqHntt8NQCgAbS6dmLpNB+UyluaMbV/tZNQ=
Subject key identifier:   F8:11:51:9F:D3:92:FD:1B:5D:86:73:1C:4B:ED:B1:DD:5E:5E:2B:8D
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer:       /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial:       1C94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number:          1C7F
Signing time:             Mon 24 Aug 2026 16:08:41 +0000
Manifest this update:     Mon 24 Aug 2026 16:08:40 +0000
Manifest next update:     Mon 31 Aug 2026 16:08:40 +0000
Files and hashes:         1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: zLtl7bXhRslDK+477+bj+OHZG0VF3TiGD3mKivcgBWo=)
                          2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
                          rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 16:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7316 (0x1c94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
        Validity
            Not Before: Aug 24 16:08:40 2026 GMT
            Not After : Aug 31 16:08:40 2026 GMT
        Subject: CN=6a8c6c89-ada5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:48:ff:24:34:f1:8d:9e:ff:aa:1d:a4:1f:
                    8d:87:a8:62:de:a2:b9:d4:2a:98:5f:a7:4a:1e:43:
                    e2:c5:3e:dc:fb:c5:a6:a4:83:42:d3:66:9a:f1:25:
                    db:b7:dc:c3:c3:49:ba:18:f4:fa:6e:5c:c1:8d:0a:
                    e8:f9:46:1e:79:7a:af:74:ff:22:80:25:07:0e:ef:
                    15:cd:b3:98:58:78:90:16:c9:51:4a:4e:9e:a4:c2:
                    17:3c:e8:3a:cc:01:45:9a:9b:30:11:b1:59:a6:3f:
                    f1:45:b3:15:49:d3:0f:a8:8b:26:5a:69:53:fd:0a:
                    84:0e:4c:10:5d:0f:7c:fa:4e:25:6e:47:62:f4:dc:
                    e6:00:9d:9d:5a:23:91:67:5e:fc:fc:cd:99:ec:ce:
                    9e:9f:4a:76:2a:5f:5e:c6:5c:f4:4a:0a:86:75:e1:
                    a3:5e:cd:31:ae:bf:9c:81:c2:79:9b:37:03:33:03:
                    bb:7b:60:47:c7:9c:a5:7c:d0:29:79:f1:c3:ff:94:
                    b9:55:c9:31:97:bb:59:67:eb:9f:5a:0f:75:c2:84:
                    05:ee:5e:1a:57:72:6e:ca:f1:64:f8:5a:23:bb:04:
                    d2:fa:56:8b:e8:46:a2:dc:40:93:3c:7c:6b:1d:05:
                    32:1c:b0:74:ec:25:61:fc:a8:2e:1d:6f:4d:c4:c3:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:11:51:9F:D3:92:FD:1B:5D:86:73:1C:4B:ED:B1:DD:5E:5E:2B:8D
            X509v3 Authority Key Identifier:
                keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:ba:aa:dd:08:ee:df:24:1f:67:79:3b:2a:3d:3b:6e:1f:
         91:00:60:23:f2:ac:17:3a:77:ff:95:16:fb:41:5e:0c:18:5c:
         ba:65:60:a7:e1:bc:03:87:a9:ad:f9:f2:d0:25:ba:bd:d7:1b:
         18:bb:33:b4:9b:2e:f0:19:b7:b8:47:dd:6d:7b:ac:69:68:57:
         f3:42:7c:18:49:b0:06:5f:43:7e:74:fd:cc:4a:87:fb:2f:c2:
         7a:3a:64:28:14:b9:29:29:f7:c6:77:c6:c6:d1:7e:e0:58:fa:
         7e:37:18:4b:4f:8f:cc:4f:16:88:c4:e5:c4:2b:0c:eb:f8:bd:
         50:9e:e5:97:e7:13:ee:15:a6:24:f1:20:65:3b:b1:0c:15:3f:
         49:b1:5a:57:65:24:1c:15:fe:7e:fa:f9:e5:bd:e5:8c:f8:c6:
         d3:7e:9b:8f:d8:5b:69:94:cc:b3:0a:08:2e:94:61:7d:fa:2e:
         9c:b9:50:25:97:4c:24:4b:a8:c3:ff:44:b0:48:a1:d2:9e:9d:
         fb:ec:56:19:f0:b2:2d:d9:22:85:b1:b3:75:57:6b:d8:4d:eb:
         c3:3d:eb:31:b3:26:20:50:f3:14:5e:bb:d6:52:fd:28:c2:c2:
         ea:12:54:18:f0:6e:d1:6d:2a:e8:38:d0:d1:01:0c:f1:d2:3b:
         05:0e:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 11:47:46 2026 by rpki-client