Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
File:                     tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json)
Hash identifier:          FUTaynW4X5eTlWtXA1Uiy/JVtkhG0UgP+QtW1r3wJb8=
Subject key identifier:   85:41:B5:E7:69:50:A3:34:12:B5:6A:BD:C2:88:93:1C:9C:C3:9E:3A
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Certificate issuer:       /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
Manifest number:          0135
Signing time:             Thu 03 Sep 2026 05:49:34 +0000
Manifest this update:     Thu 03 Sep 2026 05:49:34 +0000
Manifest next update:     Thu 10 Sep 2026 05:49:34 +0000
Files and hashes:         1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: 72HT7nLjKdu0ur0kk7TKUyS4ILPIqkCw841PJqGK6Ro=)
                          2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
        Validity
            Not Before: Sep  3 05:49:34 2026 GMT
            Not After : Sep 10 05:49:34 2026 GMT
        Subject: CN=6a990a6e-6768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:16:fc:b7:d9:45:fb:fe:e2:cd:dd:66:f8:
                    22:6a:c5:91:d7:e5:1e:b9:59:eb:c6:85:13:93:a1:
                    da:0a:3c:d5:2b:7a:97:c4:26:3f:1c:39:50:62:33:
                    fa:f4:36:1e:0c:91:7a:1a:69:2d:ba:a0:0a:95:2e:
                    72:d8:c7:7a:d2:89:d0:26:e9:25:9c:be:3b:27:aa:
                    80:d9:bb:6a:c9:2a:f2:e3:d9:b9:a5:2b:ac:c4:ba:
                    11:f3:b2:48:97:40:be:ed:72:fc:13:5d:80:92:88:
                    46:03:a7:1d:bb:cb:32:0e:93:54:f4:c5:74:02:33:
                    5f:bb:f4:d0:b7:a3:a7:c1:4c:05:03:6a:8c:fb:88:
                    b6:3a:e1:c3:59:69:af:57:f1:37:0a:09:b6:cf:b0:
                    3c:49:a6:32:c9:1a:b4:2e:66:4b:15:43:0e:82:98:
                    d1:9c:8e:95:63:9f:2c:8f:d4:d7:c0:a6:4f:4f:83:
                    a7:28:ff:ac:bc:6b:c2:11:bd:0d:0a:4b:32:4f:2b:
                    51:dd:19:c7:d4:d6:48:fc:02:7e:c0:ca:1c:1d:f7:
                    c3:30:81:12:98:8f:f7:49:3e:0b:48:86:ef:fa:04:
                    b5:de:20:e0:77:f8:1f:5a:16:82:04:77:99:92:e1:
                    7d:15:46:20:9f:28:90:f1:76:f6:40:7f:59:9b:bc:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:41:B5:E7:69:50:A3:34:12:B5:6A:BD:C2:88:93:1C:9C:C3:9E:3A
            X509v3 Authority Key Identifier:
                keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:f3:22:bb:34:52:c9:e3:c7:5f:d6:44:76:93:d3:45:8c:
         5b:f1:18:18:52:d2:6d:67:39:4f:cb:40:91:b6:70:e3:5d:9b:
         4b:75:d6:b9:2c:da:f2:9f:d6:bb:e6:e8:85:5d:68:05:3f:26:
         e2:0c:f9:8b:cd:e9:9e:54:b5:ea:34:76:75:37:5b:4e:4c:33:
         70:0e:73:31:b6:55:03:27:ac:e0:ec:d9:04:a5:b3:bd:c3:35:
         0c:82:c8:df:2c:04:b2:3a:20:2c:33:06:86:07:a6:7f:3e:9a:
         69:1f:77:a5:40:6a:78:fe:60:70:1c:53:50:21:ac:5c:14:44:
         3c:d4:6e:78:22:7a:49:8f:03:e6:63:cd:6c:3f:db:85:d9:2a:
         db:78:74:a9:b0:a6:cf:f5:21:9a:08:73:5d:8c:dd:48:78:42:
         49:0e:e0:dd:f3:23:3c:73:4b:17:a1:d3:6c:52:80:be:5e:61:
         fa:5d:8c:21:bf:a6:86:70:e4:31:12:a6:9a:49:a0:35:47:2a:
         49:90:db:2b:a2:45:bc:50:b9:e9:5f:4c:5c:d3:09:8d:0d:b1:
         59:7a:52:5b:60:f2:b2:67:7c:cc:46:60:f1:c6:28:8a:70:86:
         6d:eb:9c:1f:6b:15:76:bf:aa:f0:61:5a:88:c9:98:34:35:1b:
         f3:66:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:47:43 2026 by rpki-client