Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
File:                     C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft (raw, json)
Hash identifier:          afUFSC4vr/kMfWQWbd/XkvzTYl/rVi7jOO2JwZzumMk=
Subject key identifier:   2A:1E:E2:26:F8:4E:D2:AD:CC:2D:B6:4D:66:BA:1A:F0:8D:88:DD:08
Authority key identifier: 0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C
Certificate issuer:       /CN=A912C2EB/serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
Manifest number:          0F
Signing time:             Mon 27 Jul 2026 11:29:05 +0000
Manifest this update:     Mon 27 Jul 2026 11:29:04 +0000
Manifest next update:     Mon 03 Aug 2026 11:29:04 +0000
Files and hashes:         1: C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl (hash: aKUW9BxP6CGmbOh9d41JKzjUAvK+efkLZisC09FoZx8=)
                          2: E64DF1C2738811F1BF8D4D716EA30FBC.roa (hash: ta94cq6P3Y9AqMQ72/iTm11UyiyepXDOi/daYTMVMwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl
                          rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2EB, serialNumber=0BDB5BE0CF5FF8729E5DB0F1CB5219865E89C34C
        Validity
            Not Before: Jul 27 11:29:04 2026 GMT
            Not After : Aug  3 11:29:04 2026 GMT
        Subject: CN=6a674101-7af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:de:e3:e4:38:f2:3e:20:d2:5d:e7:a9:78:
                    f7:ac:41:ce:5b:30:59:81:d6:e8:14:09:38:24:30:
                    5d:6e:aa:11:cd:57:e3:f8:55:69:b4:5c:62:26:ae:
                    43:72:0f:b6:86:e6:03:05:9e:12:68:49:13:2a:0b:
                    74:51:b8:50:78:cf:70:75:f7:4e:e9:40:cb:27:f8:
                    9a:c0:57:1e:c9:99:c4:e4:b5:fa:c1:4c:eb:98:83:
                    bf:1b:17:f0:c1:97:de:1e:00:5f:07:80:af:17:b7:
                    17:a4:90:7f:d7:b3:2c:f1:d5:c3:c7:21:5b:95:66:
                    b5:eb:b3:e3:d0:bd:6e:8b:d2:7b:47:68:67:02:11:
                    fe:84:1e:3c:05:d7:d3:76:fe:f6:e6:5d:1d:c3:c1:
                    c1:46:db:57:73:61:94:1f:c4:1e:77:50:f7:5d:af:
                    f9:b3:8b:34:92:42:eb:c5:92:08:84:be:ec:0f:81:
                    ae:c6:98:09:1a:c8:93:ed:1b:bf:0c:bf:af:f6:4c:
                    81:d0:29:c4:3d:19:fe:37:15:0f:70:ed:2c:4a:20:
                    a9:5c:70:07:79:cc:01:d5:f5:6b:49:1a:f4:6c:1b:
                    fa:69:61:33:02:27:59:ba:72:49:81:95:7b:4c:d9:
                    a8:fa:b3:fa:1e:a1:27:7b:8a:14:92:58:12:22:45:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1E:E2:26:F8:4E:D2:AD:CC:2D:B6:4D:66:BA:1A:F0:8D:88:DD:08
            X509v3 Authority Key Identifier:
                keyid:0B:DB:5B:E0:CF:5F:F8:72:9E:5D:B0:F1:CB:52:19:86:5E:89:C3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/10E16D3E738811F19116AADD6DA30FBC/C9tb4M9f-HKeXbDxy1IZhl6Jw0w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:27:97:62:c8:7a:52:2b:6b:29:da:5e:7a:ad:6a:10:00:e8:
         09:91:db:4d:fd:93:31:28:88:3f:b2:f5:58:9c:32:9f:8f:84:
         4f:e5:45:30:7c:1c:ce:63:44:06:f5:ef:12:22:a1:63:62:13:
         e1:14:76:72:8f:a1:a7:8b:ab:b6:59:3c:c1:b8:7a:57:ae:14:
         21:22:58:fe:a2:99:1e:46:79:59:2f:d2:13:aa:a6:95:f7:71:
         66:bc:cb:67:9d:e9:99:2f:53:3e:62:b5:c1:1d:b3:45:54:5f:
         5d:ab:03:91:06:83:ee:b4:b1:7a:3e:63:fb:00:86:69:32:7d:
         fa:b2:95:1e:69:7c:b5:ef:72:8e:94:22:54:24:2a:8a:fe:2d:
         7a:9f:34:c0:fd:ba:70:3a:a6:89:a4:b7:0f:1f:3f:ac:bb:de:
         c5:dd:53:69:de:c8:c7:84:6c:14:1a:05:95:7f:29:f9:95:92:
         b3:06:4c:c3:ef:46:f0:2f:aa:21:60:4d:35:9a:ef:cf:49:78:
         23:c4:45:46:a3:3e:41:52:6f:8c:7b:e3:e9:9c:b1:64:f6:14:
         89:6e:1b:26:94:07:81:14:d4:d1:d4:13:5b:ce:f2:cd:d7:de:
         20:ae:0f:73:bc:7c:66:3e:cc:3f:ab:7a:11:97:4e:24:d3:98:
         1f:0b:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:54 2026 by rpki-client