Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
File:                     tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json)
Hash identifier:          UYhq+xNZDovq0WtXc5Thi+SE5lU0BXTHcFKZHZlbMcI=
Subject key identifier:   10:12:1D:36:ED:54:41:72:11:47:9D:79:53:97:60:E1:9B:03:DD:46
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Certificate issuer:       /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
Manifest number:          04EE
Signing time:             Mon 27 Jul 2026 02:21:53 +0000
Manifest this update:     Mon 27 Jul 2026 02:21:52 +0000
Manifest next update:     Mon 03 Aug 2026 02:21:52 +0000
Files and hashes:         1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: 12TCurrtZdAGrUNeCPnMCQJlro7Bv2DlwnuH4OE/o4s=)
                          2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: vheM5uAeinqDGQFeaGFPdqZpD7OIlMbyVmkXjE8fDNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
        Validity
            Not Before: Jul 27 02:21:52 2026 GMT
            Not After : Aug  3 02:21:52 2026 GMT
        Subject: CN=6a66c0c1-47ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:12:5b:ca:ed:b5:55:f2:eb:83:7e:65:40:
                    dd:dc:b6:a0:2e:cd:b8:84:e6:b1:c4:9c:bb:65:44:
                    3b:bb:64:77:1e:0c:7b:5b:df:8a:88:a8:41:20:e7:
                    9d:70:38:e4:c3:b4:3d:46:97:83:9b:8a:f1:01:84:
                    d6:d5:ed:d4:c0:f1:7f:90:63:47:ee:f5:9f:28:2b:
                    a4:60:7b:7b:f4:0e:f0:74:95:f7:49:27:3f:8d:58:
                    b9:bf:c8:a5:17:5c:29:66:9f:bb:07:d3:ad:40:01:
                    cc:9e:d4:10:3a:c0:4a:e9:03:a0:70:79:02:54:e4:
                    a9:d7:2e:aa:a2:f9:22:52:82:02:0b:86:aa:48:94:
                    ce:3e:23:23:0a:2e:de:41:63:e2:45:1f:e6:94:f5:
                    17:80:29:52:dc:47:1b:ee:9f:f4:ab:57:05:c8:37:
                    3f:62:0e:77:e0:85:2f:4c:f1:d6:6f:51:ca:8a:e8:
                    5d:9d:ad:b6:df:b3:f7:0c:76:bf:aa:d7:87:52:a5:
                    84:7f:af:ba:ac:3e:bd:ac:38:3f:f9:38:b2:75:44:
                    b0:07:da:de:44:9f:91:28:29:b6:80:20:72:c5:d1:
                    e4:d5:f1:c3:16:ef:77:5a:26:e1:43:52:9d:e8:a6:
                    ab:65:73:ba:dc:b9:28:c9:24:c2:bd:10:3e:50:30:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:12:1D:36:ED:54:41:72:11:47:9D:79:53:97:60:E1:9B:03:DD:46
            X509v3 Authority Key Identifier:
                keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:11:ae:a5:3d:6f:48:f0:cb:85:28:dd:39:c1:46:8b:9d:
         37:dc:58:1c:bf:08:0c:ff:47:62:b7:72:20:a0:c4:da:79:cb:
         0c:5d:bc:ee:e0:c3:b8:ff:e5:1a:dd:b5:ba:e2:ec:84:c3:13:
         45:35:c3:78:c5:65:10:c4:be:65:9f:9f:92:ea:c7:ce:7f:ff:
         57:92:08:5e:a3:10:2c:6a:79:ab:08:05:c9:b6:18:b6:5b:b3:
         9c:36:3e:29:81:61:39:9a:5f:3f:bd:67:8a:39:0b:d2:24:4b:
         0d:02:65:18:22:fe:34:0b:55:8e:ae:16:06:a1:66:ab:51:44:
         b6:f1:e1:c5:5e:c8:c1:eb:a1:73:bf:9f:12:6b:28:38:49:47:
         91:87:6e:36:1f:1f:a6:31:ed:70:f7:80:27:c4:7f:3f:7a:5a:
         e7:8a:1d:ee:11:4d:d9:cf:b8:eb:37:65:b2:91:56:4e:af:40:
         b6:75:4b:98:b3:7b:ad:ad:e5:2f:10:57:14:34:c9:27:16:67:
         ca:57:be:29:78:4e:62:eb:05:7c:1d:c6:29:ad:1a:de:14:e1:
         b5:70:74:78:c8:20:8a:f1:f4:c9:0c:fd:26:05:af:65:6d:2f:
         24:1a:fc:33:fa:ef:39:41:32:a0:0d:12:2f:12:1e:2b:04:79:
         99:5b:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:07 2026 by rpki-client