Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File:                     9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier:          XZYDel0zRevb6aAd17o248uFOTZMVL76zGk/ARZJ+o4=
Subject key identifier:   05:3C:62:3D:01:86:74:CC:FC:23:E4:94:A6:2D:51:74:85:BB:77:02
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer:       /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial:       04D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number:          04CC
Signing time:             Mon 27 Jul 2026 00:48:39 +0000
Manifest this update:     Mon 27 Jul 2026 00:48:38 +0000
Manifest next update:     Mon 03 Aug 2026 00:48:38 +0000
Files and hashes:         1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: Iqe7axDK+UgmHCZFLx6BDJK/qOeFfhWXOehPagC+aBg=)
                          2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: 2rQJWPdUgZ0hNF0HMVFMTi4ImpvJKJ7bVW+COUiFLto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
                          rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
        Validity
            Not Before: Jul 27 00:48:38 2026 GMT
            Not After : Aug  3 00:48:38 2026 GMT
        Subject: CN=6a66aae7-8236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:20:56:db:98:45:2c:1d:18:08:ea:3e:65:
                    41:f5:e1:a3:7c:25:20:8e:10:9e:5e:a0:9f:c3:7d:
                    20:0e:c9:36:83:10:8c:3c:eb:be:30:ac:13:8a:c6:
                    2d:88:dc:15:ba:6e:3c:ec:56:fc:41:b1:54:dd:56:
                    af:24:80:b5:31:30:64:17:85:20:24:99:da:a5:6f:
                    8b:73:d9:5b:96:b2:d3:c7:b9:ba:40:0a:17:63:72:
                    9a:b9:b7:24:24:45:09:74:c3:96:61:ba:35:7e:4f:
                    ce:5e:24:c2:b7:3e:a1:77:e2:31:6b:a7:96:72:97:
                    88:e7:76:36:a7:9e:0a:6d:1c:32:1d:3f:eb:df:e8:
                    fd:26:5a:6a:7e:2e:3e:6a:b1:20:c1:f2:1e:c5:41:
                    1b:3e:ed:bd:c5:e2:82:2f:b5:83:b5:f6:1b:d1:c8:
                    64:f7:e7:a0:4f:2f:cd:d5:bb:64:6f:65:16:8c:39:
                    16:0e:5d:0d:c4:78:20:99:da:55:c5:2f:57:e8:1a:
                    8f:75:9a:5c:ba:e4:02:cf:cf:8e:2e:40:b9:30:1d:
                    53:4f:89:df:80:cf:ca:5e:17:72:82:b6:68:fb:49:
                    3f:3c:04:29:88:95:43:ad:15:f9:cb:9b:58:ae:61:
                    30:cc:73:b6:40:91:e0:44:2b:1d:5b:04:90:59:6c:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:62:3D:01:86:74:CC:FC:23:E4:94:A6:2D:51:74:85:BB:77:02
            X509v3 Authority Key Identifier:
                keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:17:6e:7b:3f:13:5c:0b:e3:c6:f6:90:ea:ae:82:45:48:
         84:72:c9:82:f5:98:2b:f6:cb:4b:54:87:6b:ed:24:d5:f4:0b:
         88:cb:18:4e:61:62:a4:ee:cd:2a:64:66:61:5a:b3:58:9e:e2:
         c8:de:2f:98:9c:17:35:6d:3f:db:ff:e7:90:69:18:3d:f8:ec:
         3d:ba:e8:4d:da:4e:f1:b5:9b:8f:12:42:5d:69:d6:bf:62:ce:
         41:5d:b1:8a:c1:e9:14:c5:1f:35:22:0e:2f:6d:5e:ba:64:71:
         5e:0f:ee:27:0c:fc:c6:91:11:98:7a:1e:1d:fa:3a:f4:b6:84:
         48:64:b3:71:f8:fa:a0:67:dd:75:9f:10:21:2b:bd:9a:b9:96:
         d7:06:ee:b6:f1:fe:ae:2a:1f:75:d1:41:02:95:5d:b5:f8:f2:
         51:64:16:11:7d:03:57:95:53:b6:9d:38:57:73:03:75:8d:b5:
         20:6e:56:e8:b6:3e:23:ad:38:38:84:a9:0d:41:9d:91:91:f3:
         8c:b1:43:e5:3f:ac:64:45:83:6a:fc:9d:6a:66:be:33:b5:9f:
         29:0b:6e:10:7c:75:6f:3a:af:9e:cb:6d:f9:7a:09:41:40:24:
         27:c5:4c:2d:1f:c1:8e:05:08:0f:a3:06:5f:d2:12:4e:a8:9b:
         16:8e:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:38:24 2026 by rpki-client