Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File:                     mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier:          +2/QVlTC5HYNLzCDZC2SL8LepWO/S3gWW2VpFWbsb8g=
Subject key identifier:   CC:9D:DD:06:B9:EA:0E:A9:7F:CE:EB:DC:D8:31:1E:A2:57:B7:31:80
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       04B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number:          04A3
Signing time:             Mon 27 Jul 2026 00:57:46 +0000
Manifest this update:     Mon 27 Jul 2026 00:57:46 +0000
Manifest next update:     Mon 03 Aug 2026 00:57:46 +0000
Files and hashes:         1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: UcxSwGtIU+mKb1Eit5IpLkoIWsTICMjkHhTA1xlzVWo=)
                          2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: wJwYPO+fwG1DzfXIB7tLWx4w4Z7LBKlhdGTpVmUtFJk=)
                          3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: S9wcoj+b296y5ZY0Qh+LyMtLbA5mAbavBiIMN9qcung=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Jul 27 00:57:46 2026 GMT
            Not After : Aug  3 00:57:46 2026 GMT
        Subject: CN=6a66ad0a-74cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0b:3e:43:a6:34:d1:76:44:c2:fc:a6:e9:fd:
                    e3:aa:ef:09:37:1f:81:5b:56:a4:3a:55:1f:e6:6a:
                    3d:d8:a7:db:c9:35:72:a6:72:99:39:88:6e:f9:e3:
                    ee:09:07:33:33:0a:1d:41:93:7f:8e:77:e4:c9:b6:
                    29:2f:4b:8f:0e:6f:2b:4a:89:b1:a7:0d:c6:f1:d8:
                    d8:58:91:24:08:a6:03:2f:7c:f1:d5:b1:1a:d4:b3:
                    81:9a:e5:54:a5:9c:09:6c:3d:2e:73:8d:64:59:c0:
                    f5:3d:c3:07:b5:1c:9e:0d:4c:2e:5e:dd:17:f6:d3:
                    41:dc:5f:8c:d2:77:cd:04:91:2a:36:84:7b:7f:e1:
                    95:9d:6d:72:22:df:b1:2d:6d:f2:d6:68:96:7c:34:
                    d7:5d:77:7d:3e:16:73:e0:d2:d0:b3:9a:92:4b:fc:
                    43:81:a9:08:20:57:a8:b1:a4:44:76:5f:6c:7c:4b:
                    aa:d0:b6:22:8b:d2:80:20:40:77:2c:36:00:ef:b8:
                    ae:59:26:19:50:b6:14:11:d0:a0:c6:b6:74:89:7a:
                    9d:99:a0:7e:3c:c5:b2:2c:e1:9d:58:83:6b:ce:0a:
                    fa:a2:36:28:ae:60:b0:83:f4:b3:a9:b9:e6:ea:50:
                    3a:28:b9:0a:f9:02:b1:7c:98:68:6b:f4:a6:6c:6e:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9D:DD:06:B9:EA:0E:A9:7F:CE:EB:DC:D8:31:1E:A2:57:B7:31:80
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3c:7e:64:aa:86:60:f9:a0:85:6e:aa:1e:ad:45:b2:ec:8f:
         c1:14:58:b5:ee:5f:4e:c9:24:9c:c5:8a:d1:97:cf:08:c2:bf:
         52:75:d4:df:0b:e0:5c:b0:14:d6:01:b1:0d:a0:7e:4e:c8:bd:
         69:9c:e4:6a:94:72:7d:00:da:e8:0a:a8:98:e3:9a:dd:12:9a:
         97:d9:87:4a:53:e3:c6:f2:ab:7d:91:90:bd:9b:05:76:55:48:
         85:c3:ed:b1:d5:af:49:90:30:a0:29:67:be:fd:43:fc:e0:15:
         26:47:19:df:33:58:6f:87:e3:3d:c7:e8:5c:16:6a:7b:51:68:
         93:9c:c9:21:69:d2:22:91:27:9a:8d:c8:35:19:40:74:99:51:
         66:81:a2:7d:16:81:22:6a:bc:ea:c1:b5:c8:99:1f:23:e7:61:
         fe:5a:d6:83:e8:24:86:19:7b:97:99:78:f2:f2:a4:ee:8e:a5:
         58:d3:c6:a0:36:47:83:0f:b7:3d:4f:e4:84:49:ef:aa:f8:4f:
         b9:4c:9b:e1:77:0c:c3:54:2c:d5:1c:7d:c2:24:99:88:d2:1a:
         7e:5f:20:3c:5b:78:6a:cb:3f:80:0e:41:9f:f9:a5:f9:0b:4e:
         9f:6a:ce:14:a9:f3:a2:5a:26:7f:dd:c0:65:50:f6:42:9c:91:
         12:aa:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:48 2026 by rpki-client