Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
File:                     lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json)
Hash identifier:          pMoTXPI0DEW91aJrDuQhS0Z7F4ThTytVsY67ttpFUyA=
Subject key identifier:   CE:91:87:DB:19:08:9F:F5:B0:24:8E:BF:3D:69:44:55:8E:D3:DB:ED
Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
Certificate issuer:       /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Certificate serial:       032C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
Manifest number:          0326
Signing time:             Mon 27 Jul 2026 02:15:53 +0000
Manifest this update:     Mon 27 Jul 2026 02:15:52 +0000
Manifest next update:     Mon 03 Aug 2026 02:15:52 +0000
Files and hashes:         1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: mlFVQnyWatFg+Kgl2I/r9KxnBc0NSQtNNGlDwobEcDs=)
                          2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: xggHUqhGoBU2THPCHBd7SfkVooQu9NCISC2XN1yhp3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl
                          rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812 (0x32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
        Validity
            Not Before: Jul 27 02:15:52 2026 GMT
            Not After : Aug  3 02:15:52 2026 GMT
        Subject: CN=6a66bf58-0de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:39:53:34:e0:8f:23:de:11:09:88:4d:61:
                    76:a9:bf:fc:ca:93:74:b4:61:26:00:2e:7f:87:a7:
                    fe:1c:e4:ec:d5:6b:1a:a8:64:f8:c4:96:ec:9d:24:
                    90:ae:c0:d2:ce:eb:15:12:17:a1:b5:0d:e8:0c:02:
                    8b:6b:d6:35:dd:14:8f:30:a5:ad:91:3e:46:72:cf:
                    27:df:3f:55:5c:f1:27:46:44:41:1b:8f:68:54:d2:
                    74:57:33:af:29:6f:32:e5:cd:64:64:52:34:ae:01:
                    53:0c:3b:3e:41:42:dc:04:c7:84:49:ec:cc:fa:18:
                    a1:3f:24:9c:1a:96:d3:1d:82:66:73:d5:7b:9b:a5:
                    bd:e7:19:44:39:7d:6e:e8:c2:1f:95:cf:df:e6:25:
                    ff:3f:21:92:61:2c:19:e8:6b:ec:45:ba:6a:6b:e6:
                    50:28:f9:30:0c:ed:2a:c9:61:cb:63:ea:73:67:85:
                    3d:cc:cc:22:66:8b:0d:5f:65:9b:ef:ad:6e:6c:8d:
                    e6:60:e5:40:2f:3a:99:a6:e5:0b:06:c7:42:cd:ab:
                    bf:c0:8e:07:b4:61:8d:0d:91:c7:61:a8:5a:e9:6d:
                    ac:d9:f6:9a:a2:3c:e8:40:40:3c:af:b4:a7:25:ee:
                    8c:e8:15:96:87:52:b3:92:fc:63:f5:1c:be:27:de:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:87:DB:19:08:9F:F5:B0:24:8E:BF:3D:69:44:55:8E:D3:DB:ED
            X509v3 Authority Key Identifier:
                keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:76:0a:98:77:e4:22:fa:56:e1:b4:b6:b9:c8:68:7b:9e:84:
         d9:e1:ef:86:49:c2:29:a8:75:4b:b9:da:0e:e2:20:f3:33:e4:
         f1:01:40:62:ec:93:47:f3:fc:43:5d:ee:a7:07:0f:fb:bf:67:
         ee:c4:0f:c5:61:44:6e:66:64:9c:83:fc:6d:a6:21:b0:b5:75:
         4b:8d:03:66:73:b4:b0:d9:c5:71:d9:85:4c:48:09:dd:61:38:
         ea:3c:5f:1c:26:f8:58:90:a6:ba:12:68:e9:ec:51:26:99:f6:
         80:25:24:97:c4:ba:22:3b:46:6f:f3:bb:e4:05:95:1e:0e:e8:
         5b:08:af:4a:aa:72:ae:8c:ee:7d:a0:90:7e:10:64:10:37:7a:
         2f:2d:0f:b2:46:4d:58:80:e8:60:e6:a3:5e:48:f0:23:26:de:
         15:7d:b9:92:d8:01:23:76:06:b2:35:a8:f6:58:08:a7:c9:24:
         2f:25:b7:36:62:97:ad:28:dd:2d:6a:fe:ee:22:dc:8f:0b:f1:
         aa:22:5b:f0:16:43:99:b5:54:44:b2:1a:f2:a5:54:d2:69:a7:
         12:3d:d0:20:67:68:49:50:1b:5c:db:eb:e2:fd:9a:40:52:d5:
         a7:e9:cd:fe:40:36:fe:5d:c2:6f:01:fa:a3:bc:70:8a:a6:35:
         1f:a0:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:36 2026 by rpki-client