Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File:                     MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier:          NMK/RhazbeX6J8hdgnHtcr9p2ZtMTyv3rCI+aAWdVSQ=
Subject key identifier:   BB:3D:CE:98:27:8C:DA:68:42:9E:FD:BD:87:39:9B:DE:23:BC:AF:21
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer:       /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number:          64
Signing time:             Fri 17 Jul 2026 09:17:02 +0000
Manifest this update:     Fri 17 Jul 2026 09:17:02 +0000
Manifest next update:     Fri 24 Jul 2026 09:17:02 +0000
Files and hashes:         1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: kj9nCCRlwqtvZ8tXLTnerVYHDi7FmRciR5P4Ug72MBA=)
                          2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
        Validity
            Not Before: Jul 17 09:17:02 2026 GMT
            Not After : Jul 24 09:17:02 2026 GMT
        Subject: CN=6a59f30e-587f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:c4:a1:63:8e:16:59:d1:69:1b:87:ab:4d:
                    30:95:aa:eb:10:a7:ef:5e:00:82:51:5b:a5:a0:91:
                    87:92:6c:b8:ce:9a:f1:de:29:bb:eb:d2:11:6a:f6:
                    a8:51:1b:e6:b4:1e:5a:cd:1f:d2:ae:19:9f:33:43:
                    d9:c2:4f:f7:32:ed:4d:bd:ad:ba:4e:04:3d:37:ce:
                    f3:a6:8d:b7:93:1c:e7:f0:47:d6:82:bc:2e:85:5c:
                    4b:c9:cc:82:4a:3d:44:12:4b:a7:a9:31:0b:2d:f4:
                    12:c0:fb:7f:af:10:4e:e3:67:80:69:9e:4a:c4:1e:
                    95:c6:7f:fd:b6:8b:45:bf:1d:78:17:7c:d8:d1:99:
                    28:e8:58:a0:f3:7b:6d:23:5c:15:36:d9:f1:da:1f:
                    33:ac:82:6f:92:75:2b:ac:ab:79:bf:f7:ab:20:1b:
                    1b:96:4a:f1:69:ec:a6:c3:c8:34:ac:46:53:e9:a2:
                    1b:c5:ea:ed:2d:d4:26:f2:8b:36:bd:76:42:af:06:
                    3d:f6:6b:e1:65:fc:c0:87:b1:80:22:8d:77:7a:1e:
                    5a:0b:60:a5:5b:b4:ab:db:5c:2d:3f:ee:5e:04:27:
                    50:75:76:ff:20:0b:68:4b:d5:ea:8f:64:04:f2:0c:
                    02:4a:7b:c9:f1:0b:7f:2f:b0:64:55:e4:c7:3c:b7:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3D:CE:98:27:8C:DA:68:42:9E:FD:BD:87:39:9B:DE:23:BC:AF:21
            X509v3 Authority Key Identifier:
                keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0a:19:45:da:54:fe:8f:80:1a:aa:6a:a8:db:e4:d5:1e:f5:
         78:7f:3b:0e:b6:75:af:68:4e:bb:8a:b8:dd:d9:00:35:7b:b0:
         76:f8:96:b6:3d:9b:17:5c:14:31:fe:94:4b:75:db:df:fb:62:
         ad:3f:3b:45:58:8b:a4:93:1b:04:93:4b:ba:32:c4:5d:48:46:
         90:61:cf:13:7d:07:f5:ce:77:fd:05:71:cd:bd:48:dd:71:a5:
         36:f1:52:c4:b3:c2:ca:5e:f0:48:43:84:94:77:8f:a2:b0:1e:
         6b:bf:a1:c5:d0:ab:93:2b:7d:a3:8d:b1:16:7b:d9:e2:73:a8:
         20:a5:5e:e3:3a:fe:3e:69:f2:00:6c:1a:89:ed:62:f6:57:bf:
         4d:0e:d9:5a:9d:27:ee:0a:67:50:8b:0f:53:70:3d:7d:c6:d3:
         20:c9:f0:c4:9a:7b:9b:12:ba:93:26:48:95:e9:d0:f4:03:65:
         b0:08:b7:45:d4:1a:53:4f:87:d2:a9:0f:aa:d6:e4:a5:32:f5:
         0d:9b:31:ed:42:7b:ef:9d:2b:f3:08:0e:4a:33:28:fb:2b:12:
         d1:4b:6d:80:ec:74:20:db:2d:b3:4f:ba:3d:02:c8:d2:9e:02:
         d2:36:c0:b8:d6:cb:d4:03:da:05:99:9f:d4:f9:53:ca:b4:3a:
         14:b6:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:16 2026 by rpki-client