Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
File:                     9A-TqdIRaxiksirqdTW59eNunlE.mft (raw, json)
Hash identifier:          IGy4Wcok7d6jW/punqmiWOtuK3V1rZN9HK+etctCdRc=
Subject key identifier:   47:B2:05:69:E3:15:65:6B:44:BC:BF:01:FC:DF:BD:F9:70:BC:98:57
Authority key identifier: F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
Certificate issuer:       /CN=A919C47E/serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
Manifest number:          37
Signing time:             Thu 16 Jul 2026 16:59:28 +0000
Manifest this update:     Thu 16 Jul 2026 16:59:27 +0000
Manifest next update:     Thu 23 Jul 2026 16:59:27 +0000
Files and hashes:         1: 9A-TqdIRaxiksirqdTW59eNunlE.crl (hash: oFGpsLl4hGBEiODf6858KLGNEvJru3pQ37Jx6GCjBng=)
                          2: 934C25D238C011F1AD0BCD9C99833773.roa (hash: w2PsXC0NzHE/Q5fkR14UN3mHcPylNIHmDef5Q25n5fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
        Validity
            Not Before: Jul 16 16:59:27 2026 GMT
            Not After : Jul 23 16:59:27 2026 GMT
        Subject: CN=6a590def-652e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:c8:81:6a:18:59:55:9b:37:f1:ab:9c:03:
                    0f:50:29:22:42:d8:05:e9:c9:34:e0:a3:1a:6c:b0:
                    17:f3:e2:af:62:b8:be:e4:07:24:12:b8:e4:0a:a9:
                    c8:0a:29:00:44:b2:54:a2:c7:99:79:71:0b:70:fc:
                    e3:8f:46:ca:31:f3:ef:c8:48:44:c0:81:d6:28:dc:
                    83:13:30:64:69:12:4c:91:22:fa:f6:eb:4f:4c:65:
                    e6:ca:90:f9:c3:40:f4:e5:02:6b:8f:10:dd:a0:2a:
                    e9:ac:45:82:03:f8:dc:03:78:de:26:db:52:fd:53:
                    66:02:f9:bd:b2:53:59:cf:f3:0b:67:62:dc:28:b8:
                    98:c9:b0:78:71:dd:0a:c1:21:17:36:d4:b4:81:c4:
                    e3:b0:3c:21:6a:c8:43:c7:20:25:c3:db:cb:dc:9f:
                    30:df:78:9e:f9:1b:d6:64:a8:eb:04:c0:c4:47:06:
                    13:ca:16:4f:c1:f8:1b:dc:be:e5:e5:f9:47:7b:99:
                    33:c4:75:1d:e2:3f:db:ae:0e:19:6e:3b:a1:0b:65:
                    8c:53:06:e9:e5:81:27:5f:c5:26:e5:49:0e:9f:73:
                    1f:4f:f4:35:46:3b:e6:3c:82:2d:7f:bf:85:86:31:
                    01:20:d9:f1:04:9f:e8:ac:c1:66:44:1d:6a:28:3a:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B2:05:69:E3:15:65:6B:44:BC:BF:01:FC:DF:BD:F9:70:BC:98:57
            X509v3 Authority Key Identifier:
                keyid:F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:29:98:09:5b:20:60:99:13:d2:3b:09:5e:9d:b6:a5:39:
         7a:b1:7b:a6:f3:13:0e:ca:7c:34:77:b5:07:cf:cb:84:e5:f0:
         3c:6f:b6:2c:07:8c:03:f7:e3:d4:60:0e:ec:52:fe:99:5e:47:
         a4:a1:d9:0f:f8:e0:78:1b:0a:8f:1a:60:7d:c8:fc:17:7e:81:
         78:07:7f:ba:db:94:d8:c0:66:53:75:cb:b5:aa:80:ba:97:40:
         68:bd:1b:31:fe:cb:e6:56:ed:b1:e5:d7:ed:8c:1a:63:db:1d:
         bf:79:d5:c3:6d:67:64:ef:7d:61:94:4b:8f:a1:d3:c8:ed:de:
         5c:e2:fd:75:71:4c:a3:12:54:d5:be:c8:80:25:a7:cc:7f:04:
         b8:3a:8d:12:4e:bf:49:7d:21:b1:2c:70:b6:22:aa:73:dd:ff:
         20:67:e8:18:ae:4a:da:6b:e5:6d:d3:d5:e0:38:68:9a:e6:0f:
         c5:2c:7d:a2:11:e8:08:a1:8c:57:74:b9:3b:21:1e:d0:4f:5b:
         d0:6d:5a:83:ca:21:18:56:85:0d:2d:af:62:ae:a7:47:a2:46:
         c6:1a:9c:67:56:af:66:c0:ba:9e:32:a9:9f:9b:ea:9a:ec:de:
         6e:9a:d7:99:59:81:6d:a7:bc:4c:89:15:60:cf:77:18:1f:c2:
         57:09:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:16 2026 by rpki-client