Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File:                     9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier:          AZEoIK4NuY5xM4QGKff5R/NwsWnpuroXtdxHJlZ12Ck=
Subject key identifier:   F2:1B:CF:7E:3F:B2:54:70:CB:E3:B5:07:68:E1:ED:6C:81:92:91:A8
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number:          02C3
Signing time:             Mon 27 Jul 2026 02:41:07 +0000
Manifest this update:     Mon 27 Jul 2026 02:41:06 +0000
Manifest next update:     Mon 03 Aug 2026 02:41:06 +0000
Files and hashes:         1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: KbxlXf3i+nYfgfb/BMq55YOZRLeDH8UGnryooWIjeOI=)
                          2: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: BaPq5hdUUw6M/UYNr2TfdFGU9d7sgsjjuYBYSErSa0E=)
                          3: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: k4ktbvDzNMFlZcj8AA2wIV1+SLib12XIvSfJT6zbmGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Jul 27 02:41:06 2026 GMT
            Not After : Aug  3 02:41:06 2026 GMT
        Subject: CN=6a66c543-434b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:06:b5:6f:e7:5a:c6:8e:7c:5f:d0:a9:85:
                    63:4b:85:9d:af:57:db:27:e0:2a:1c:fc:50:58:73:
                    9f:32:f1:21:01:7a:58:19:d2:38:59:c5:2b:1d:91:
                    81:90:d3:e7:42:0b:d7:ae:c5:6f:a0:e1:9d:b3:7b:
                    f4:8a:9c:b8:53:6d:3b:bc:3f:b3:d8:38:02:5d:6d:
                    78:db:51:6a:2f:c6:40:a6:d7:aa:09:5e:a2:5d:c3:
                    30:5c:54:84:ba:6c:da:4f:8b:93:fd:6d:e4:20:d3:
                    f0:8d:4d:29:38:fb:fc:f1:67:63:c0:74:bd:cc:6f:
                    36:ff:50:c0:bd:05:81:17:36:16:ce:ee:34:5c:25:
                    a6:f5:01:7a:98:8f:ef:ce:c2:11:31:5c:bc:24:01:
                    08:a1:ab:21:36:ff:92:33:98:57:09:d0:f6:ec:78:
                    26:cd:02:c8:a2:e0:e3:1c:af:fd:f7:26:86:f9:32:
                    e0:a1:8c:20:53:fd:c9:2c:df:1c:e3:a9:8b:12:a8:
                    30:6d:40:99:9e:40:9c:86:9b:eb:25:c0:14:39:ee:
                    54:eb:09:2e:4e:18:e8:25:88:86:72:80:7d:80:09:
                    c8:64:0a:a3:8e:5d:1b:64:fd:f0:02:05:a7:b3:fd:
                    51:80:9c:01:3e:df:cf:a9:41:1a:b2:a3:a1:53:90:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:CF:7E:3F:B2:54:70:CB:E3:B5:07:68:E1:ED:6C:81:92:91:A8
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0c:f7:95:42:0d:8c:80:79:be:08:e0:a5:bc:d6:90:3a:2c:
         93:c5:bf:11:be:21:3c:42:97:41:36:03:d5:d2:e4:fa:ab:02:
         b4:f7:d4:df:b6:a0:af:ca:ea:52:a7:b8:fd:aa:e5:0a:74:06:
         7c:44:b6:2d:64:8d:df:d9:bc:3b:09:fb:70:75:fd:f4:60:87:
         7f:a0:08:2f:94:70:c9:52:95:47:aa:f6:83:83:b7:34:84:04:
         36:7f:ea:ba:6c:53:26:b7:c4:b2:05:db:b0:c8:1f:e2:5a:0d:
         f6:e8:25:27:39:5a:b6:57:5e:68:49:1f:b1:cf:72:c2:25:70:
         7f:11:5b:e3:0d:33:82:96:db:5f:a5:de:6f:76:97:9a:0c:92:
         f9:8b:31:e6:b8:72:be:ff:48:c7:14:f0:be:7b:b0:be:37:5f:
         3b:63:f8:9e:d4:af:d4:bc:3d:b8:8f:a2:93:ba:f3:68:f1:5e:
         b9:16:fe:5f:2b:f5:34:ed:6c:10:19:c7:f8:04:ce:9b:33:af:
         cf:3d:27:19:e5:6a:6a:ba:02:de:a9:93:4d:43:31:09:42:b6:
         53:94:6f:b1:67:86:e4:79:58:5e:57:62:70:78:48:34:34:87:
         9a:e4:e2:14:7f:93:10:a1:ce:88:b7:4e:9a:3f:f9:c2:0f:d0:
         e4:a0:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:46 2026 by rpki-client