Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
File:                     9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json)
Hash identifier:          Is5Wk81ax++LvKj1PfVrp77pLCsy6lDv9tg9f5yQpL4=
Subject key identifier:   C7:D5:4A:0D:23:88:28:AF:99:FB:C8:96:4D:D7:43:F8:30:31:03:5C
Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83
Certificate issuer:       /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
Manifest number:          0228
Signing time:             Thu 02 Jul 2026 19:44:36 +0000
Manifest this update:     Thu 02 Jul 2026 19:44:36 +0000
Manifest next update:     Thu 09 Jul 2026 19:44:36 +0000
Files and hashes:         1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: iFcHau+uKzhaBG+vosyqdAtnaYmsParPaLO4EE/czZo=)
                          2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: hnwuStPXa2PnbC6upyuld+U4W5MZABYuzZ1Adf6fwaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl
                          rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 19:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383
        Validity
            Not Before: Jul  2 19:44:36 2026 GMT
            Not After : Jul  9 19:44:36 2026 GMT
        Subject: CN=6a46bfa4-2046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:ed:72:aa:ff:2d:79:2e:0d:3e:95:43:91:
                    96:a8:15:00:af:23:90:6e:85:df:65:9d:c5:11:7b:
                    71:75:eb:92:64:4c:d6:a0:3e:ba:fb:9b:a5:ce:2d:
                    d8:24:cf:cb:44:ce:7b:27:71:98:74:56:6e:e7:36:
                    b3:22:82:33:aa:a1:6d:83:3c:e1:55:a9:75:eb:be:
                    9b:8e:70:4b:39:92:4a:27:4e:5f:04:b8:92:3b:02:
                    6e:4a:c3:ac:c7:35:9b:18:0f:bf:fd:c2:61:5d:58:
                    fd:62:c7:5b:32:b2:fa:6c:12:af:fd:44:14:61:44:
                    96:14:e0:0e:97:c5:f3:15:56:2e:1b:92:74:3b:5a:
                    22:7d:37:34:fd:40:96:15:22:df:11:f8:07:cf:7b:
                    c4:48:3e:5a:39:dd:c9:53:ee:88:89:aa:1a:a9:2d:
                    fa:6e:f4:b2:03:a4:82:eb:59:8d:95:54:3b:ea:54:
                    9f:45:8c:a2:d3:d5:9a:60:bf:25:64:95:48:d7:ea:
                    3c:88:2c:4a:a6:6a:e8:1a:3d:a9:7f:14:8d:d8:e5:
                    63:47:65:3a:a9:fd:4b:cf:aa:ef:9f:a2:bb:74:a5:
                    72:97:05:4f:ec:09:2f:5c:97:86:17:01:e3:93:78:
                    25:ca:da:62:d5:38:93:c3:4e:01:91:46:c2:98:82:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D5:4A:0D:23:88:28:AF:99:FB:C8:96:4D:D7:43:F8:30:31:03:5C
            X509v3 Authority Key Identifier:
                keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:8c:35:88:38:84:e1:14:86:28:e6:2d:dc:1a:ff:19:dc:
         90:e7:c0:1b:8f:53:07:7b:d4:74:69:8c:0d:0b:68:3d:01:d4:
         8c:0d:57:a3:f7:f0:eb:db:78:2c:41:c7:eb:3a:36:2e:6f:9e:
         15:d1:ff:98:ae:d4:e5:b4:02:c4:b0:70:f7:40:f8:29:55:0c:
         1b:8d:8f:5f:1c:38:e5:8d:53:de:c7:5c:dc:ea:6e:77:36:c1:
         f0:71:e0:55:52:f0:6c:f2:34:24:ce:c1:53:72:14:d6:f1:0c:
         db:b5:82:54:84:be:93:9a:2e:1d:1d:04:51:26:a8:21:c6:cc:
         8d:58:c1:15:5d:7e:0b:cd:c7:9e:f7:d7:41:19:99:b4:30:e1:
         93:80:ed:5e:21:af:59:7d:0d:db:9b:d9:7c:ac:dc:c0:55:93:
         5d:41:b0:d8:90:bf:1b:f8:45:bb:51:7d:32:f5:32:96:e6:ca:
         40:5f:18:ec:8f:6a:38:39:8a:e0:01:7e:53:b8:e3:3b:0c:d3:
         82:d5:c9:45:51:d7:a7:cf:76:fa:35:88:c0:df:c1:94:80:2b:
         1c:dd:51:68:f9:01:bf:3e:ff:09:05:fc:c2:3b:6a:79:ec:ac:
         60:49:01:4b:50:33:fd:69:20:28:c8:8e:75:b3:cb:3b:02:80:
         8e:a7:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:48:41 2026 by rpki-client