Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File:                     i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier:          CTS8C17CstUnVHlwawv3KqLBcadY3lRDnYhBbPinn5o=
Subject key identifier:   6F:C8:0E:C9:13:91:35:F9:C6:85:15:FF:D8:A3:C4:5B:7F:F3:46:58
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer:       /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number:          01F9
Signing time:             Mon 27 Jul 2026 04:52:24 +0000
Manifest this update:     Mon 27 Jul 2026 04:52:23 +0000
Manifest next update:     Mon 03 Aug 2026 04:52:23 +0000
Files and hashes:         1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: kc1Nax9xg82klCP1spH0z0CemcCp+U1oAdfCCXu4Aic=)
                          2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: hou+c7BsoKfVisvEwRZh9uWs6LCWRU5zcufZlx3RZD4=)
                          3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
                          rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
        Validity
            Not Before: Jul 27 04:52:23 2026 GMT
            Not After : Aug  3 04:52:23 2026 GMT
        Subject: CN=6a66e408-7868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:45:8a:fd:1a:8c:00:39:a7:e7:b1:bf:df:
                    25:92:62:ea:60:fb:25:e2:2e:d8:f0:f5:6a:72:6e:
                    5b:70:b6:14:4a:22:b2:8d:71:37:56:7c:da:e0:f7:
                    e3:11:3d:91:f0:0f:b5:12:70:0b:b5:ce:c7:4a:8c:
                    58:84:7a:ea:eb:cd:26:4b:77:fa:cf:41:8d:0c:f9:
                    ef:b9:8d:83:70:95:3a:a0:fa:33:3a:f8:cf:93:18:
                    43:27:ef:ee:bd:46:db:48:e2:6f:14:8d:39:f4:b6:
                    95:81:de:1a:6f:7f:10:f5:3f:53:8d:03:d9:cb:35:
                    33:0c:6f:b6:23:bd:2c:4f:06:a4:fd:41:ec:67:96:
                    d6:53:e9:96:4e:f7:ee:29:7d:cb:85:0c:e9:9e:26:
                    8c:04:b7:39:18:12:3b:55:ea:51:b5:c9:58:6e:ec:
                    6a:1f:1f:cc:19:d3:f8:24:c0:70:b2:5e:0a:b3:1f:
                    d5:29:c3:a6:a0:59:35:30:bf:e1:6a:09:4d:e2:31:
                    ab:77:eb:dc:a2:42:e0:53:fc:19:f3:d8:fb:bb:7e:
                    43:96:b7:b1:5c:cf:cc:cc:85:aa:56:28:b7:45:05:
                    3c:61:60:fc:42:95:1a:75:fe:2e:b7:61:c7:6e:a0:
                    15:f0:41:83:71:3b:2b:ce:37:d4:d0:d6:0d:31:24:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C8:0E:C9:13:91:35:F9:C6:85:15:FF:D8:A3:C4:5B:7F:F3:46:58
            X509v3 Authority Key Identifier:
                keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6b:61:ff:3d:7b:50:8c:a5:94:25:d1:fb:c7:36:1b:79:72:
         e2:48:aa:2c:e6:dc:25:42:11:73:b1:a2:33:47:55:d5:fa:ff:
         c8:64:17:06:7f:a8:eb:a2:e4:07:fb:f2:2e:6e:59:0e:42:88:
         3e:0a:41:15:af:42:a0:96:61:da:70:56:10:51:e6:1c:e1:9f:
         c5:eb:62:57:e5:d8:1b:45:82:6a:16:6b:38:ff:f4:2e:04:51:
         98:76:2c:e3:bb:0f:ef:72:bf:a0:d1:f4:8b:0d:f7:4b:ee:11:
         15:11:ae:03:c6:4e:64:6d:a8:9e:9f:b9:78:8f:ca:d6:7e:3b:
         0c:46:d5:68:1c:cc:ba:65:31:e2:0e:e7:c5:0b:9b:ed:11:c6:
         c2:ba:16:f0:74:d1:0b:86:eb:1a:5d:7d:b6:4c:69:ff:5a:34:
         a4:61:4f:cd:9e:3f:d3:12:4d:ed:49:da:b4:ac:07:72:57:b1:
         7d:5c:d4:31:d6:1e:b4:f6:c1:be:1f:78:d4:44:1c:a7:9c:47:
         0c:b9:25:c3:31:c2:6c:1d:49:b7:06:9d:d2:e2:5c:6a:f9:25:
         94:ce:10:cd:50:70:f8:ec:c2:84:6b:da:b4:cb:fd:c8:3b:66:
         8c:ed:97:c5:05:a6:0a:e8:43:24:d9:a1:e6:0e:c5:57:2f:10:
         13:7f:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:47 2026 by rpki-client