Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
File:                     _WrtCj06ctaut_1HjqdiMTiBlKA.mft (raw, json)
Hash identifier:          iY9iW6UokhfPrh649rf1Pj/j/kB3BtfB4qTRY5puGgo=
Subject key identifier:   BD:92:1D:D6:78:53:82:A6:A4:0F:63:36:D7:53:4F:CA:6A:63:A4:81
Authority key identifier: FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0
Certificate issuer:       /CN=A9189337/serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
Manifest number:          8F
Signing time:             Fri 17 Jul 2026 08:40:49 +0000
Manifest this update:     Fri 17 Jul 2026 08:40:49 +0000
Manifest next update:     Fri 24 Jul 2026 08:40:49 +0000
Files and hashes:         1: _WrtCj06ctaut_1HjqdiMTiBlKA.crl (hash: XJ9/vkFYKvhh6WSjDhX3h/vDiEPQD3TwCqZwSElq7II=)
                          2: B4506158A8FB11F09EF52F87C4F9AE02.roa (hash: DdLLYx2lL6G3M6CO9K5PbK2Qo9NH6F9taSWfJMl1grE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl
                          rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189337, serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0
        Validity
            Not Before: Jul 17 08:40:49 2026 GMT
            Not After : Jul 24 08:40:49 2026 GMT
        Subject: CN=6a59ea91-526f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:33:0b:c4:59:af:42:aa:91:34:89:74:c9:
                    ea:32:11:44:6d:0f:97:a1:45:ac:66:df:91:6a:0b:
                    50:6c:bf:89:a1:5f:63:82:0e:97:1e:f9:83:2e:8b:
                    c6:ef:50:7a:d0:47:a6:b6:db:54:7a:8a:13:d3:59:
                    4f:80:1c:a7:9d:19:7b:c7:98:89:b5:d0:b6:bc:b3:
                    c8:05:eb:07:40:03:77:76:b0:14:1f:37:3a:fc:97:
                    4a:3c:b5:17:ec:8f:1c:54:87:1c:c9:77:5a:52:3a:
                    91:6a:5f:a7:3a:96:2b:02:09:62:e1:18:5c:0e:af:
                    86:3d:82:6f:37:fe:87:2d:34:a0:17:ee:91:b7:a9:
                    8d:0b:af:75:4a:86:a0:ff:3f:eb:4f:9d:52:bd:5b:
                    e6:cb:e2:fb:de:42:92:51:20:23:3c:9e:f8:f6:4e:
                    fa:b2:fc:38:3a:34:9c:f7:42:08:9a:8d:c0:dd:54:
                    f9:5c:13:8b:01:38:35:b7:0e:81:fc:ce:ed:0b:1e:
                    47:a1:fe:c5:58:0b:61:8d:df:00:bb:81:ae:9a:e2:
                    c0:a1:7f:ce:d1:39:1e:24:1d:6a:db:82:ee:58:ad:
                    07:ec:f6:87:0c:7d:07:b1:fb:82:4b:ba:a3:db:9d:
                    f1:b2:60:02:c2:af:b7:cd:78:d7:63:bb:fa:78:e8:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:92:1D:D6:78:53:82:A6:A4:0F:63:36:D7:53:4F:CA:6A:63:A4:81
            X509v3 Authority Key Identifier:
                keyid:FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:fe:79:92:76:66:7a:6f:fa:1c:9d:1c:80:9e:86:d9:e0:
         18:2e:f4:6a:7b:3f:77:61:17:9a:25:94:cf:3e:2f:72:86:b1:
         fb:3f:25:93:75:37:14:fd:10:79:61:a0:24:6c:cb:03:c2:6d:
         ca:da:ad:00:d6:52:5e:b8:1f:81:f2:1a:cb:c1:cd:74:e0:bc:
         be:83:83:f6:02:c0:74:cc:a8:15:a8:82:4a:60:b8:4b:a8:5f:
         ee:7d:e4:7c:66:51:c2:fb:1d:3c:d7:8f:b4:4b:90:e4:19:25:
         58:95:26:2b:7b:b9:f4:29:28:50:3f:ea:a9:72:06:61:16:cf:
         bf:9a:68:83:d5:76:6d:69:f0:6c:9d:1b:56:f7:01:eb:c5:7e:
         0f:bf:84:98:62:99:48:9e:b1:c9:31:d0:d0:a2:ff:d6:04:b7:
         86:b1:9f:3b:3f:41:c3:93:ef:e7:16:57:df:fc:56:b6:7e:d7:
         f5:b7:e1:2a:d4:a5:a6:2e:9e:37:5a:fc:97:a4:9e:06:5e:43:
         01:36:a9:50:b1:55:48:22:48:35:8f:a4:8f:6f:85:3a:59:d0:
         44:94:7a:ef:36:21:95:58:55:82:b9:18:a6:5a:e5:75:7e:cf:
         de:f4:27:43:36:e7:18:09:de:9a:33:eb:44:15:24:0f:f2:09:
         f9:96:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:21:31 2026 by rpki-client