Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File:                     d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier:          P+9zXRoHt03MxgQtz4VbuDkP+sxKy/KTTubzadiXsV0=
Subject key identifier:   AA:9D:35:04:D4:63:07:68:01:39:56:AF:41:41:C5:81:B0:A7:38:93
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer:       /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number:          01E9
Signing time:             Sun 26 Jul 2026 23:45:10 +0000
Manifest this update:     Sun 26 Jul 2026 23:45:10 +0000
Manifest next update:     Sun 02 Aug 2026 23:45:10 +0000
Files and hashes:         1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: QYpQ4+G2JREQ1Dr+46z5aNjHchZNTDqqd+z9WsgC0yQ=)
                          2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: CK9QQVOiiB542PQgUfZIdXYNAnS5iyZdXbxdEf+gFCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
        Validity
            Not Before: Jul 26 23:45:10 2026 GMT
            Not After : Aug  2 23:45:10 2026 GMT
        Subject: CN=6a669c06-2d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:2e:d7:8d:a9:5d:85:dd:42:da:59:5d:de:
                    f7:d8:32:20:41:e2:c4:5a:df:af:71:ec:d2:5a:16:
                    87:73:a9:e4:a3:eb:b8:27:a4:f7:1b:f6:66:b9:5e:
                    cc:f3:c0:f9:9f:a9:a2:2e:48:5f:9d:8f:7d:4f:ca:
                    a7:42:41:98:fe:e1:2f:14:2a:32:ba:55:f4:74:be:
                    7d:89:fc:71:e9:ac:b2:4c:fd:06:b8:ff:ab:61:e5:
                    5e:c2:e1:3b:72:32:9f:84:b4:a0:16:0b:56:20:45:
                    96:25:c8:44:f8:d9:07:f5:b8:9f:dc:3c:06:86:c3:
                    b4:49:3e:17:11:26:9a:9d:a2:d8:fd:cb:d7:c1:af:
                    e7:9c:92:05:d0:45:46:f6:55:6e:23:53:cc:24:28:
                    df:60:7c:6a:ce:9a:c2:e0:bf:84:64:d4:70:90:53:
                    d3:4a:16:21:cc:bb:c3:61:78:f5:d0:3a:03:48:2f:
                    90:6d:0d:c7:59:4a:ba:3b:bb:39:c0:86:e6:08:79:
                    04:6f:13:f7:af:35:44:26:fd:31:86:e6:97:52:cb:
                    db:b6:b0:3a:f8:00:ca:95:73:59:30:29:6c:e1:fc:
                    ad:b2:19:11:e5:3b:92:8b:01:34:3c:e9:a6:1b:d6:
                    20:af:d1:ea:c5:9f:a8:b3:d2:ba:b2:a7:48:4c:32:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9D:35:04:D4:63:07:68:01:39:56:AF:41:41:C5:81:B0:A7:38:93
            X509v3 Authority Key Identifier:
                keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:bb:22:1b:c6:8b:62:79:d5:e1:c7:9e:d6:02:cc:b8:bc:24:
         f8:da:27:02:a6:c2:46:b5:d2:ba:17:5b:0c:4a:99:1f:21:3c:
         46:06:36:83:77:20:63:6d:58:bb:71:ce:a9:aa:13:ee:37:a3:
         d1:9b:bc:62:e8:4c:fc:9d:38:ef:52:7d:64:dd:24:cf:7f:21:
         7d:b8:c4:b6:4a:58:20:25:75:67:d7:7f:92:a2:bc:b3:2a:d0:
         19:0f:69:01:85:77:8a:a6:f3:de:6f:2c:93:ca:98:c6:27:b7:
         db:cd:5d:f8:d7:58:34:c1:09:03:1b:3c:2e:f6:53:a5:2f:c1:
         b9:f4:86:4a:ea:c1:ec:1d:b8:7e:56:af:49:ff:1f:7f:41:0d:
         b1:97:38:bb:a8:0c:63:cd:b4:2e:6d:00:91:e6:e5:4a:61:07:
         d5:0e:7c:16:3d:e7:13:9b:de:0a:40:92:39:1e:39:8a:a5:b7:
         8e:ae:96:97:0e:fd:a1:36:6c:7b:04:df:c3:87:bc:ab:d9:6e:
         f9:40:08:17:ed:c7:57:09:50:b7:42:55:0e:78:82:4c:65:d9:
         a1:14:e6:60:a5:f8:22:a6:ab:9d:69:8d:fd:c8:19:f4:de:9f:
         5f:b8:73:9f:79:fb:69:f5:e3:c3:9d:13:e0:36:f0:22:38:51:
         35:11:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:03 2026 by rpki-client