Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
File:                     AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json)
Hash identifier:          MA9TIygYwpRbsNU1NwicV4c6ffeAj+0d6WrFsGUCwp4=
Subject key identifier:   DC:71:15:8B:F1:78:54:DA:C5:E9:9C:AE:71:B6:B1:88:FF:F0:02:F9
Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
Certificate issuer:       /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
Manifest number:          0257
Signing time:             Mon 27 Jul 2026 04:00:06 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:05 +0000
Manifest next update:     Mon 03 Aug 2026 04:00:05 +0000
Files and hashes:         1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: mk390Si+x+bO/Q5s2yBUc99HmqA4nuvhhFcVMXoYQZI=)
                          2: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: akuOHZWMxhdBgYqE6Ifrb7JtsIz0NQwxFPmVS9VWAZI=)
                          3: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: CJlRP/VDSjivJDg1KUXNqi92MzCGV7Ydo4BmSJUkkAY=)
                          4: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: ir+ohPjIccF3vHpqVtefjBEm+cD7sV1/e2b1iEqR4BI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
                          rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
        Validity
            Not Before: Jul 27 04:00:05 2026 GMT
            Not After : Aug  3 04:00:05 2026 GMT
        Subject: CN=6a66d7c5-f555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:06:0f:6c:57:87:5e:3f:72:3d:3d:b7:09:
                    b2:f4:cf:dc:50:6d:91:31:01:1c:7e:9e:ec:bf:45:
                    c0:d9:a5:1b:c6:4a:6b:8c:27:5b:f3:c9:17:5d:cd:
                    aa:18:91:0a:1a:1b:76:14:9b:6f:3b:d3:2c:11:a7:
                    ea:cd:e3:ca:be:9a:7e:9c:f3:df:ab:f7:f6:d5:c5:
                    d1:32:c5:a9:6e:49:ca:45:20:3a:73:84:8b:d6:63:
                    e9:df:92:d2:a8:1d:40:9d:05:5c:2c:cf:e2:5b:f4:
                    46:ee:07:84:b4:39:e8:a6:fd:32:91:72:ad:ec:85:
                    d3:e3:fe:82:16:ff:49:7c:a3:e2:6a:1d:1f:08:f2:
                    9d:4e:80:d6:a8:e5:6b:dd:ef:eb:77:a3:40:72:da:
                    d3:9f:83:2c:f4:cc:d8:5d:ef:81:4a:46:eb:fa:48:
                    83:5c:ba:cf:37:92:6d:7e:33:4a:71:b6:b3:c1:de:
                    31:d3:1e:89:06:9c:c7:1b:ce:fe:5b:b2:3d:f3:58:
                    2e:62:1c:ed:ee:ca:9b:98:04:dc:20:ce:bc:7f:78:
                    37:30:c2:3f:a8:37:6f:1d:35:20:ee:fa:b8:cc:98:
                    2e:fe:2e:dd:41:5c:9b:30:bd:bd:08:5c:f2:24:b2:
                    ac:cb:2f:9d:90:22:7e:60:89:ea:8a:54:48:40:87:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:71:15:8B:F1:78:54:DA:C5:E9:9C:AE:71:B6:B1:88:FF:F0:02:F9
            X509v3 Authority Key Identifier:
                keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:d3:06:e0:82:d9:d5:45:10:8f:44:7d:ac:15:96:55:39:
         8f:9f:24:c7:c8:48:fe:35:5b:fa:91:43:5d:b6:ff:8f:32:0d:
         de:69:df:2b:5b:25:18:d5:28:90:bb:a3:0e:b9:83:4a:98:7a:
         54:5c:48:88:df:90:fd:49:6d:6f:96:47:09:4c:04:51:5d:ed:
         e2:ed:c4:64:bc:d4:a2:d2:5c:82:f7:61:fc:75:eb:5b:ec:1a:
         5d:cc:2a:02:ee:1a:9c:60:24:b0:f2:22:b0:40:83:8b:12:62:
         2c:70:c2:bd:ba:2d:99:1c:76:66:b1:75:e5:66:a9:bb:1d:0b:
         db:e8:7f:bb:e0:e6:ca:4e:f4:79:f3:40:9b:cb:80:79:f9:28:
         d7:d2:0e:1d:ff:de:6f:19:9b:45:86:c4:3f:88:4b:c9:0b:51:
         78:77:7b:14:72:fe:0e:69:1d:8f:ad:57:d7:3c:37:45:6c:26:
         63:65:da:ba:b4:bd:b3:e6:13:5e:93:3e:d8:b2:bb:5c:fb:b1:
         42:64:ad:12:70:69:97:87:4d:9d:0f:c2:30:fb:54:83:63:e2:
         8c:98:72:9c:9e:02:5d:d9:cb:3a:1e:6f:8c:2f:df:e9:96:d0:
         33:f4:af:06:9a:a5:92:e4:c7:2f:7b:eb:44:e7:60:86:f8:34:
         55:ce:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:22 2026 by rpki-client