Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
File:                     3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json)
Hash identifier:          OCOJGddFG+h0Ti3p1Ri4u8kJHscssMqYj2PcKDSmd4o=
Subject key identifier:   DE:59:B6:12:FE:49:73:67:FE:7F:B1:BD:21:86:D6:56:E8:44:EB:5C
Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
Certificate issuer:       /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
Manifest number:          9A
Signing time:             Mon 27 Jul 2026 09:38:32 +0000
Manifest this update:     Mon 27 Jul 2026 09:38:32 +0000
Manifest next update:     Mon 03 Aug 2026 09:38:32 +0000
Files and hashes:         1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: 7xFzEzsawK6AY+aQq+AB6SlF61ONstKRaDt3YvcLrig=)
                          2: 9CBDB3D273C211F18F47108281A30FBC.roa (hash: QzjpXPwZ05RXkz8fbxHltT903W4r3GjO2bGz/Fnh4bQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
                          rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
        Validity
            Not Before: Jul 27 09:38:32 2026 GMT
            Not After : Aug  3 09:38:32 2026 GMT
        Subject: CN=6a672718-8b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:0b:79:83:47:bf:d1:4f:28:7c:e1:ee:c2:
                    26:d7:9a:53:de:d3:d5:e6:9b:78:24:8a:36:44:00:
                    52:16:18:89:3d:9f:72:df:da:37:f1:b4:31:3b:c2:
                    32:35:d5:64:cf:f8:35:3d:e6:21:c0:83:82:ed:1c:
                    00:be:4e:fe:63:2e:64:05:9d:16:0f:3d:d3:67:6d:
                    dd:de:f7:c8:4c:91:6c:9f:0e:0c:a8:dd:39:e9:6a:
                    5b:cb:16:53:2b:ab:95:b0:ed:eb:3c:37:a9:ab:b4:
                    f3:69:7e:d0:a4:95:da:22:1a:d0:9a:0c:78:67:d2:
                    70:1e:b0:9d:0d:06:58:a8:b7:60:07:47:28:ff:c0:
                    56:f7:62:49:3f:65:74:31:be:52:af:02:28:13:39:
                    39:2c:ba:6c:b5:de:89:54:c6:a8:7a:ce:b1:32:9f:
                    08:cc:53:7c:fd:99:22:1d:47:01:12:df:f4:4a:39:
                    b4:1a:be:25:48:1f:6c:fc:e2:a5:8a:f7:5a:e1:24:
                    63:f3:be:1f:51:7f:b8:8a:cc:ed:55:af:60:5a:64:
                    e6:1d:e2:91:a5:0f:57:75:ea:f4:da:18:18:f7:33:
                    5a:4b:1c:1b:e3:0f:5c:ff:1b:72:27:c3:6b:7f:60:
                    4e:86:ac:2f:26:40:1d:8b:16:45:ad:f5:8b:48:27:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:59:B6:12:FE:49:73:67:FE:7F:B1:BD:21:86:D6:56:E8:44:EB:5C
            X509v3 Authority Key Identifier:
                keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:64:9c:f7:e6:b4:be:19:b7:71:d6:06:fd:bd:92:04:f6:e0:
         4a:a8:58:89:56:68:24:ae:6a:f9:6c:f1:38:5e:fc:b9:e8:59:
         f6:23:f9:0b:e1:7d:05:9a:b3:30:42:ce:05:b3:fe:b2:f9:e2:
         63:2d:e7:20:bd:b3:19:8c:ba:36:48:b8:89:c5:62:99:26:9b:
         b6:48:8a:d7:0a:b0:66:9b:e0:3c:8b:6d:70:b8:19:42:3d:83:
         9d:e0:f5:42:a6:b2:c6:02:36:3f:dd:70:4d:3a:2b:e3:43:43:
         51:c8:5c:8e:6a:db:54:c5:84:91:cb:ef:31:f4:d0:ad:7a:e2:
         db:61:0c:90:86:43:5f:8f:0a:98:8b:ad:08:10:e2:1b:79:65:
         b7:84:3a:16:30:5e:b1:33:7a:d6:ba:83:39:f4:d3:33:08:bf:
         1d:8d:10:da:d7:9a:af:0e:b6:d4:eb:fd:a3:87:74:4e:8b:b4:
         fb:b7:2f:1f:b1:f2:86:17:81:22:d9:f5:17:77:06:15:64:35:
         e1:ab:42:25:c2:db:67:60:62:54:12:1b:c3:9a:19:97:1b:95:
         21:eb:5b:16:f7:ab:12:4e:64:b9:7a:cf:a4:d3:f6:09:f0:1c:
         51:b7:9c:ea:2d:f4:29:98:60:17:52:34:59:95:97:c7:25:23:
         25:4a:d8:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA2NTYxMTAvBgNVBAUTKERDOTkzRkFFODgxMEU5MzE0RjVBN0RGMDhENkYwQ0Q1
N0VBNTkxNkUwHhcNMjYwNzI3MDkzODMyWhcNMjYwODAzMDkzODMyWjAYMRYwFAYD
VQQDEw02YTY3MjcxOC04YjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnILeYNHv9FPKHzh7sIm15pT3tPV5pt4JIo2RABSFhiJPZ9y39o38bQxO8Iy
NdVkz/g1PeYhwIOC7RwAvk7+Yy5kBZ0WDz3TZ23d3vfITJFsnw4MqN056WpbyxZT
K6uVsO3rPDepq7TzaX7QpJXaIhrQmgx4Z9JwHrCdDQZYqLdgB0co/8BW92JJP2V0
Mb5SrwIoEzk5LLpstd6JVMaoes6xMp8IzFN8/ZkiHUcBEt/0Sjm0Gr4lSB9s/OKl
ivda4SRj874fUX+4isztVa9gWmTmHeKRpQ9Xder02hgY9zNaSxwb4w9c/xtyJ8Nr
f2BOhqwvJkAdixZFrfWLSCcXjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5ZthL+
SXNn/n+xvSGG1lboROtcMB8GA1UdIwQYMBaAFNyZP66IEOkxT1p98I1vDNV+pZFu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDY1Ni81NDFDQzZGQUIw
MEQxMUYwOERFNEVEN0JDNEY5QUUwMi8zSmtfcm9nUTZURlBXbjN3alc4TTFYNmxr
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNKa19yb2dRNlRGUFduM3dqVzhNMVg2bGtXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDY1Ni81NDFDQzZGQUIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi8zSmtfcm9nUTZU
RlBXbjN3alc4TTFYNmxrVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoGSc9+a0vhm3cdYG/b2SBPbgSqhYiVZoJK5q+WzxOF78uehZ9iP5C+F9BZqz
MELOBbP+svniYy3nIL2zGYy6Nki4icVimSabtkiK1wqwZpvgPIttcLgZQj2DneD1
QqayxgI2P91wTTor40NDUchcjmrbVMWEkcvvMfTQrXri22EMkIZDX48KmIutCBDi
G3llt4Q6FjBesTN61rqDOfTTMwi/HY0Q2tearw621Ov9o4d0Tou0+7cvH7HyhheB
Itn1F3cGFWQ14atCJcLbZ2BiVBIbw5oZlxuVIetbFverEk5kuXrPpNP2CfAcUbec
6i30KZhgF1I0WZWXxyUjJUrY3w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:32 2026 by rpki-client