Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File:                     BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier:          2c8E6haqGhkqwr0P6XOvEAnClYVQxk97gUBT5q7YStg=
Subject key identifier:   79:4E:9C:31:BF:A9:28:43:C2:EF:0D:57:A6:35:01:25:A4:F3:AD:0A
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer:       /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number:          0150
Signing time:             Tue 21 Jul 2026 06:39:39 +0000
Manifest this update:     Tue 21 Jul 2026 06:39:39 +0000
Manifest next update:     Tue 28 Jul 2026 06:39:39 +0000
Files and hashes:         1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: 7CYCTKVBPQ9kG35CfHQgXMJRcWX6jABlmy1BXKeUIbs=)
                          2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: B2RbKCpr/Pny6dSwJCiprlikwDlatrxJu+oMb/gtlQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
                          rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 06:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
        Validity
            Not Before: Jul 21 06:39:39 2026 GMT
            Not After : Jul 28 06:39:39 2026 GMT
        Subject: CN=6a5f142b-63fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:2e:27:eb:7b:e0:ce:76:9e:2d:ea:1e:ec:
                    27:5a:76:03:af:88:11:18:df:2c:92:e3:f3:77:31:
                    0b:7d:92:1c:1e:8f:a7:63:eb:87:1f:d0:93:3c:fd:
                    7a:39:5d:bc:32:a8:90:8a:d3:92:db:22:a9:93:44:
                    a6:a4:fa:56:35:2e:b2:1f:4f:50:5e:9d:1f:15:9e:
                    21:c7:47:d0:2d:93:c4:95:7d:65:f0:bf:89:2c:c4:
                    1a:eb:32:1a:eb:66:d9:4d:66:b7:e7:0b:72:f5:7c:
                    3c:36:28:1b:fb:92:b7:dc:3c:62:72:57:1f:44:b9:
                    6a:5a:0b:da:25:58:41:12:4d:4e:09:ec:b9:c6:d2:
                    85:9b:85:17:41:ee:3c:77:ba:cd:35:8e:07:08:e1:
                    c2:af:28:f9:17:bf:68:15:07:d7:cd:a1:de:45:bd:
                    ce:ff:53:5f:f4:13:f7:66:99:85:3c:9d:9a:11:dd:
                    8f:cf:f3:81:8d:8b:b5:58:32:cb:f9:4a:79:7f:b2:
                    30:08:18:d4:69:56:26:c1:96:69:3d:9b:5b:96:21:
                    b9:f8:f9:03:de:95:7c:f4:75:6f:21:d6:b7:3a:fb:
                    0c:75:6f:0a:24:93:fb:7b:41:36:60:65:0f:74:1c:
                    90:23:eb:b4:d1:9a:cc:3d:ad:85:8a:36:08:4d:0b:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:9C:31:BF:A9:28:43:C2:EF:0D:57:A6:35:01:25:A4:F3:AD:0A
            X509v3 Authority Key Identifier:
                keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8b:fe:79:27:5d:30:fa:06:04:37:1c:55:2c:0f:5a:d9:8c:
         28:be:a9:3a:95:90:0d:ff:2d:53:3c:ee:4d:05:3a:ff:13:e1:
         e9:47:0e:24:99:aa:b9:f8:f5:b0:3c:56:cc:45:38:17:c2:16:
         6d:ab:44:1e:26:d9:72:fd:31:1a:c8:5a:15:e2:d2:fe:b2:4a:
         68:28:86:6d:7a:c9:10:67:13:fd:aa:ca:cf:7a:80:81:81:6d:
         2d:5d:95:48:3f:67:2b:0f:3f:ba:41:8c:a6:c1:c2:3b:19:0f:
         b3:54:a6:d3:46:3d:22:a1:b6:34:54:8e:60:4c:77:c3:d2:6f:
         e9:61:6a:77:a6:48:af:c7:1c:fb:5c:68:b4:01:12:9f:30:03:
         80:06:5f:36:f8:7b:3c:4f:8b:b3:8a:c2:44:a6:7d:f4:9a:bf:
         7f:c9:14:d4:ee:67:c0:c8:9a:36:94:51:f5:bf:fa:05:a3:0d:
         e0:3d:d1:d6:d9:64:39:aa:f1:cd:b4:3d:6a:e7:2d:e3:5f:c4:
         30:82:3b:bc:3b:a2:c7:86:f7:d7:38:90:a1:58:b9:84:87:a5:
         c4:3b:53:7b:12:a8:58:a0:fb:df:8b:de:05:cb:b2:a6:e4:c5:
         68:33:01:f9:1f:79:35:90:6e:4d:02:78:e0:0a:ca:35:dc:93:
         25:59:a6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:45 2026 by rpki-client