Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
File:                     r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json)
Hash identifier:          87BKQkmJyuOLZ13hX5gR8QqqBIHL9XVstD4bE5+KFng=
Subject key identifier:   A7:35:16:72:36:3D:BC:5F:3D:E0:35:F9:1D:8C:91:29:DA:44:ED:74
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       04D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
Manifest number:          04B6
Signing time:             Sun 05 Jul 2026 00:23:17 +0000
Manifest this update:     Sun 05 Jul 2026 00:23:17 +0000
Manifest next update:     Sun 12 Jul 2026 00:23:17 +0000
Files and hashes:         1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: tnz5uOa/QXN1igB4jZXpGgsTyobELwZMSn4qXEJL97M=)
                          2: 488DBEDE508011F1A55F3568A4833773.roa (hash: 0IdhV/KCNA/ojcwThaYzEeluJBUJZFZ2dd7XnSYNWPA=)
                          3: FE7B43E0702611F18D33291E5EA30FBC.roa (hash: Q+eArnfIDLtygrr6Aol5UteYep7GUE2spzZ7FznPuig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 00:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: Jul  5 00:23:17 2026 GMT
            Not After : Jul 12 00:23:17 2026 GMT
        Subject: CN=6a49a3f5-ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:37:bc:52:87:61:5f:b8:7a:e1:39:16:9a:
                    88:23:6b:0a:8c:6e:1a:cd:64:b5:21:fb:0a:76:94:
                    ce:65:97:20:e7:49:c1:64:94:28:2e:02:1a:5a:15:
                    a4:0a:28:26:d4:bb:40:2a:5a:f7:00:83:cb:6b:73:
                    d3:54:89:fc:55:5d:b0:c8:59:f9:c7:2d:55:d9:a3:
                    46:b6:8d:a7:3f:0e:bd:57:c3:76:63:52:ab:71:f4:
                    e1:8d:66:54:ff:fc:98:0c:97:4b:e2:49:35:b6:6a:
                    17:f1:49:74:af:6e:d6:bd:f1:68:f8:f5:be:b8:d5:
                    e2:75:b0:45:40:5d:09:7b:55:71:ec:81:99:0e:6e:
                    13:0c:5e:0a:10:de:96:64:92:08:1a:77:56:12:82:
                    bd:ba:9c:6a:3d:29:2e:4e:2c:43:53:05:33:98:69:
                    fb:fd:f9:b7:66:35:9d:61:be:ea:e5:91:19:bd:e2:
                    92:fd:51:4f:62:0f:9b:b6:3e:16:75:e6:9d:dc:8c:
                    c5:c5:fe:da:07:b9:5b:94:1c:28:be:0f:e9:6c:25:
                    da:cd:dc:fa:ab:37:90:f6:31:8a:b5:0f:aa:af:29:
                    0c:88:5d:21:a0:b3:c6:00:be:6b:d6:cd:cf:04:60:
                    2f:14:82:9d:4c:0d:c4:02:69:88:cd:d1:9f:4c:6a:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:35:16:72:36:3D:BC:5F:3D:E0:35:F9:1D:8C:91:29:DA:44:ED:74
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c4:5d:f2:9d:67:48:d3:05:b1:fd:6e:51:bf:01:6f:40:e3:
         69:98:d6:cf:8b:e7:25:ca:08:84:79:5b:3d:bc:5c:38:a9:03:
         40:94:fa:f6:47:4a:7b:b6:b8:e6:c2:cf:10:4f:a6:68:dc:56:
         8b:30:85:3b:15:51:ce:22:bb:f6:0a:5e:5a:1c:26:f8:f9:d7:
         5a:fd:95:20:67:f4:61:6a:3b:45:3f:90:9d:e1:c1:bc:c4:96:
         99:d8:d6:94:ab:e7:51:d5:bb:62:db:59:67:0c:4b:df:b5:9f:
         a7:15:81:db:c0:57:17:ab:01:b7:4b:ed:a7:33:e3:34:c2:b0:
         29:67:9b:b5:f0:ef:1e:f6:5e:dd:5b:f7:e1:2a:05:63:4e:9d:
         a5:53:d2:31:cd:35:68:79:92:9d:82:f5:db:13:ce:1b:ab:13:
         f9:44:8a:18:4c:5f:bf:d1:7c:6a:c7:4b:10:1f:7d:a3:80:89:
         00:fe:47:f3:76:df:5c:c3:ae:3d:5c:d7:0b:57:f5:e5:9a:7b:
         1e:33:ab:52:75:a5:24:df:0e:f9:91:c6:24:dc:28:4c:9a:89:
         53:82:26:36:4d:48:f8:b1:bb:15:50:e7:54:66:ba:75:4e:bc:
         01:55:99:47:07:4d:2e:c9:52:70:a3:cc:a3:ab:94:38:49:9b:
         1e:d3:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:46 2026 by rpki-client