Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File:                     RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier:          94Q9NuaPfgmUsclE0ttVFakDwVZd+i5IWB6j044GYMs=
Subject key identifier:   66:C6:05:97:C7:8C:F4:08:6B:5A:80:FA:0D:69:BB:74:44:7E:E9:B7
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer:       /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number:          9E
Signing time:             Mon 27 Jul 2026 09:27:24 +0000
Manifest this update:     Mon 27 Jul 2026 09:27:24 +0000
Manifest next update:     Mon 03 Aug 2026 09:27:24 +0000
Files and hashes:         1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: xQdFD9ikUzM4SrNVa6L9Cn2hP5GiRSKX6a+6x0iMoI8=)
                          2: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: KZeGyK+XEJU2VjuaLIn3E2fbp7OCAvLZENE4Plyufvk=)
                          3: QKlY2qk3wyq97mdii7HAvqN6ae4.asa (hash: wPAhVkEsZHfP0Gam9zd2C5xJRpIz9eYqo9PqvM2pW2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
                          rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
        Validity
            Not Before: Jul 27 09:27:24 2026 GMT
            Not After : Aug  3 09:27:24 2026 GMT
        Subject: CN=6a67247c-1193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:09:fc:6e:db:e0:01:81:62:0c:9d:1f:37:
                    5e:60:97:f7:b7:ce:c1:4d:4c:e1:0a:29:e2:b8:e6:
                    c0:0b:c7:6d:25:dd:a3:fb:65:b4:27:1e:4d:5f:8d:
                    51:90:38:6e:ab:03:fb:2f:32:a2:f3:c6:23:06:8d:
                    19:23:28:67:ae:be:80:00:75:76:72:30:bc:0b:44:
                    dc:c9:4c:37:36:9c:c2:09:8d:26:c0:3f:6c:d4:5b:
                    dc:04:12:2d:24:a7:27:6b:fd:66:9e:22:6f:6d:ae:
                    87:97:0d:78:a1:e2:45:12:89:5b:09:0c:25:3e:e2:
                    c6:f1:6a:2c:b7:92:39:b1:88:3e:3d:06:4f:fe:46:
                    52:dd:91:80:07:2e:e2:48:88:9e:5c:41:a8:a3:d9:
                    32:d7:3f:77:a1:d7:1b:9e:dd:6c:a2:2e:70:8f:e9:
                    41:53:44:5a:5f:3d:e3:97:7e:b5:c0:a3:f8:45:ee:
                    ac:5d:dc:dd:c3:bb:b2:ac:72:8e:3e:26:46:7d:ab:
                    88:02:47:ee:1d:9a:38:e8:1e:b4:69:bb:c3:f1:82:
                    01:6d:74:f4:dd:00:6b:0b:22:3a:25:3d:0a:12:23:
                    75:d2:bd:04:83:5f:b2:d2:25:98:3a:be:e4:d0:85:
                    90:76:19:66:56:9b:4f:90:58:9a:38:31:d5:aa:04:
                    fb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C6:05:97:C7:8C:F4:08:6B:5A:80:FA:0D:69:BB:74:44:7E:E9:B7
            X509v3 Authority Key Identifier:
                keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:75:66:c0:51:00:26:ae:36:18:c8:c2:39:c2:3f:bb:74:6d:
         6d:fa:94:13:96:a7:69:42:31:e3:c2:04:c0:9d:7a:4f:5d:e0:
         41:f7:1c:91:7b:67:85:3f:e1:0f:bf:08:b6:bc:a0:be:85:be:
         8f:46:cd:4a:b9:7e:2e:0d:db:33:7e:b8:48:e8:84:4d:76:28:
         8a:1e:c7:57:fc:0e:b9:e5:32:21:1a:20:b1:25:48:ee:42:63:
         01:c7:e1:c3:c9:cb:2e:b5:e2:d5:d3:31:59:cd:bb:04:2d:af:
         e7:d7:01:5f:cb:97:93:d3:d9:87:54:60:ca:6a:0e:94:af:62:
         a1:9b:00:3a:33:a1:6a:77:b0:41:57:09:dd:75:e6:72:be:1e:
         b6:8b:2e:0d:40:e9:1a:f8:40:5d:9e:6a:74:fa:84:da:bb:96:
         c0:01:32:e0:34:15:96:7c:74:f4:4d:8b:56:fa:aa:01:7e:09:
         59:63:95:38:4e:69:69:7f:34:63:d0:ed:03:c4:0a:ec:9a:ee:
         1e:e6:0c:2e:2b:24:95:45:b2:e8:4a:69:9f:2a:40:82:7c:b4:
         f8:be:c8:9f:17:4d:71:38:f3:e7:f7:45:93:67:2e:cb:5e:ee:
         89:41:63:cb:76:84:aa:29:e0:6e:f2:81:70:3a:74:70:69:6d:
         90:c3:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:10 2026 by rpki-client