Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
File:                     X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json)
Hash identifier:          8wT2gorv4hEhvap5K95WVi7CzSLO14HDeQIgVZWXdPU=
Subject key identifier:   C9:FC:84:66:5B:D0:23:6B:40:03:CB:94:03:D1:A6:05:B7:D7:5B:95
Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Certificate issuer:       /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Certificate serial:       0763
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
Manifest number:          075C
Signing time:             Thu 20 Aug 2026 21:37:01 +0000
Manifest this update:     Thu 20 Aug 2026 21:37:01 +0000
Manifest next update:     Thu 27 Aug 2026 21:37:01 +0000
Files and hashes:         1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: WI7EV5iX77vovVmvixN7YVVceKyHj5479680OE8bqv8=)
                          2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: QIvXNw4SfpNnIslRP4MG8z3E8JePtXN3iNiIRQ5vklk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 21:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
        Validity
            Not Before: Aug 20 21:37:01 2026 GMT
            Not After : Aug 27 21:37:01 2026 GMT
        Subject: CN=6a87737d-69c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:1c:33:7f:19:76:a4:5b:fd:23:91:53:5a:
                    f9:a2:dd:9b:5c:1b:10:bc:5e:be:a4:ca:a7:3e:71:
                    4f:b7:2f:cf:08:7a:00:0d:47:22:fd:ab:40:51:fb:
                    6c:29:e9:b1:8f:44:ea:2f:22:1d:e9:11:0d:62:28:
                    d4:c0:b0:43:d3:ab:85:99:c9:5e:37:80:b7:b7:23:
                    be:0b:c8:59:82:d6:c0:fc:ed:5c:00:8a:65:de:5e:
                    ef:47:7b:85:62:c3:6f:5f:6e:32:51:b8:3e:19:4a:
                    90:f3:96:83:93:85:d3:cc:6b:26:47:3c:73:cb:e6:
                    f2:a5:95:82:b5:6e:d7:2a:d6:a4:2d:a2:b8:fb:4f:
                    1e:2c:00:db:c3:93:29:f4:84:09:a0:4f:e0:76:a2:
                    40:82:3c:f4:fd:86:2b:8d:77:32:85:09:1a:ac:9c:
                    fa:d2:69:6b:79:fa:2f:1b:00:db:53:52:68:98:e4:
                    bd:c9:1a:1e:80:a9:b3:f7:91:4e:9b:a5:09:94:50:
                    97:0a:97:09:4d:3b:a6:65:57:b0:49:b0:b6:06:08:
                    49:c6:fc:bc:4d:ad:ff:d7:4f:e7:47:d0:94:55:13:
                    56:ae:70:c1:2b:a8:8c:3d:a6:54:c7:34:93:91:d7:
                    cf:9b:af:1b:b4:2f:7b:ec:2c:a7:d9:13:80:14:8c:
                    62:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FC:84:66:5B:D0:23:6B:40:03:CB:94:03:D1:A6:05:B7:D7:5B:95
            X509v3 Authority Key Identifier:
                keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:1c:36:13:fd:84:25:5f:14:01:47:82:2b:f4:f1:b8:21:
         e9:d2:76:51:d9:11:7d:ce:53:fb:c2:67:61:9a:46:a8:89:61:
         8b:21:37:38:ca:6f:e2:05:5c:a3:35:de:f2:62:dc:13:58:d5:
         06:52:77:39:53:22:b8:37:a5:0a:4a:b1:eb:c0:63:8d:0f:92:
         fb:28:1b:e6:d1:10:14:b8:55:82:6c:b9:da:0a:e2:9e:a3:26:
         92:11:31:77:5e:e6:64:99:11:22:ab:6e:9a:41:e1:44:bc:64:
         f6:f4:81:fc:d4:d2:ba:d2:7a:65:0c:45:25:66:6d:d8:84:a7:
         e7:3d:81:ee:b6:5a:1c:2a:4b:4e:53:f8:81:c2:76:d8:dd:5f:
         42:de:b5:73:b7:6d:2f:e1:7c:1c:4c:5a:d8:c0:bd:6b:21:cc:
         79:83:aa:05:5e:72:aa:0d:82:2f:2f:68:a9:8a:8a:e2:22:c4:
         0d:4c:8f:ff:db:e1:a8:c0:16:b7:02:ad:7d:3c:21:9e:4b:5e:
         b9:9d:f8:e7:a6:da:3c:e9:98:3d:a2:6c:27:d5:8b:70:65:3f:
         a0:17:e8:de:54:f9:e8:42:6d:8b:a2:e7:5c:9c:32:eb:5e:23:
         ac:db:7d:8d:71:71:c2:76:ab:f5:cd:a1:94:ef:8a:f2:9f:5c:
         35:0a:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:49:52 2026 by rpki-client