Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
File:                     b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json)
Hash identifier:          UvFyLJX8dThhRqy60hMP3ROS7OI+cqSYp22zRNAbfjw=
Subject key identifier:   9C:A9:EF:31:2C:51:6B:0A:4B:C8:FE:59:99:DE:5D:0C:AA:BB:3E:E7
Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Certificate issuer:       /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
Manifest number:          0156
Signing time:             Wed 17 Jun 2026 05:16:22 +0000
Manifest this update:     Wed 17 Jun 2026 05:16:21 +0000
Manifest next update:     Wed 24 Jun 2026 05:16:21 +0000
Files and hashes:         1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: bh4sJ+10Tb32S/mnh+SdKQ7ZzTyaRSKXpiwYg8VuCz8=)
                          2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: GoBUmsaixA+94AMiq1K0M2Do/VJgCC/YQV6fr/kdH1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
                          rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
        Validity
            Not Before: Jun 17 05:16:21 2026 GMT
            Not After : Jun 24 05:16:21 2026 GMT
        Subject: CN=6a322da6-8310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:93:f0:69:95:94:fe:56:ff:1e:3c:10:19:
                    29:98:04:29:24:a5:57:a7:02:8b:22:2c:fa:99:c9:
                    76:60:3c:74:37:5f:f5:2c:81:f3:57:b2:3b:68:12:
                    9e:74:21:e9:4c:08:75:2c:89:d3:5b:9e:ed:65:af:
                    87:0f:3e:6b:32:e5:7c:b6:d2:e8:99:ed:7a:64:db:
                    9d:bd:aa:a9:34:89:20:d7:42:6f:2c:41:0f:8b:f0:
                    d8:c9:3c:91:d5:ff:d5:08:01:31:0c:ba:0a:cb:a7:
                    fa:7e:b8:15:42:c0:fa:64:e0:c8:2d:1d:2a:9c:44:
                    73:de:37:29:0b:92:a2:5e:ee:e9:2e:1c:fa:cc:46:
                    f3:88:ab:20:57:d7:a3:e8:20:ee:b4:b2:2e:89:88:
                    11:b8:e6:ea:23:f4:02:78:8b:e7:f9:48:16:8b:b1:
                    8f:04:37:e3:52:cc:0f:35:9d:3a:24:24:e8:ff:b5:
                    31:54:30:3d:ac:11:7a:e5:12:a5:7a:b7:21:6a:81:
                    3e:8f:5a:dc:fe:4e:c1:91:34:2a:aa:fa:30:ed:b0:
                    f3:8c:0c:49:9c:f1:26:a0:95:c7:9c:3d:db:71:82:
                    b4:32:13:3d:83:a3:d5:af:6a:49:9a:84:da:86:cc:
                    cc:fc:05:ba:f8:01:10:0a:5d:ab:df:0e:51:ea:56:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A9:EF:31:2C:51:6B:0A:4B:C8:FE:59:99:DE:5D:0C:AA:BB:3E:E7
            X509v3 Authority Key Identifier:
                keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:50:32:31:f5:a3:a7:5f:52:39:bb:7c:f5:55:0f:26:03:00:
         ec:24:fd:39:28:9f:88:58:ad:2c:f7:2f:c8:b9:c8:4e:32:68:
         3e:75:da:94:fc:ba:17:3c:f9:7c:65:3f:05:98:ee:dc:88:6d:
         ff:f1:b8:f9:7f:8d:5f:c5:18:06:58:d9:c3:49:23:f6:2f:1a:
         5f:13:36:57:a8:4e:41:7e:f3:19:be:3a:61:06:ca:76:49:70:
         cf:28:39:c5:b4:55:60:e1:03:aa:18:02:19:55:49:ea:96:0a:
         03:73:76:0f:40:9e:e4:8a:bc:46:c6:43:0e:87:1d:37:50:66:
         d1:dc:1a:b3:7a:16:34:14:98:6a:8a:ac:04:39:46:64:1a:77:
         c7:f3:3f:9b:67:21:18:9e:aa:d0:da:fa:3a:3e:6f:f4:c7:b0:
         98:24:12:b1:b5:e2:40:f9:ed:4e:70:a8:a6:cf:e5:ca:e6:4d:
         b7:73:b3:aa:99:f9:97:09:2a:5c:1a:6e:b2:f9:41:c5:b7:97:
         ef:26:fb:b9:7a:9a:1f:69:85:7d:7e:b2:ee:5e:8b:c5:6c:e4:
         f3:fe:4c:0a:6f:66:2f:9a:59:b3:1a:d1:15:62:e1:9c:69:49:
         df:81:91:0d:07:f7:f0:05:bc:7b:d7:ec:21:e2:c0:cd:5f:c0:
         a6:c0:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 00:39:57 2026 by rpki-client