Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
File:                     DrxJg4xa-JUImQoidYOOwMFWsLc.mft (raw, json)
Hash identifier:          vH4J7Mukb/Ci5rHWESk6ntRCYphphkIE83q0x3hitBE=
Subject key identifier:   A8:3B:80:FE:2D:40:F6:11:39:0C:B7:B1:87:B0:5F:92:AE:D2:A5:31
Authority key identifier: 0E:BC:49:83:8C:5A:F8:95:08:99:0A:22:75:83:8E:C0:C1:56:B0:B7
Certificate issuer:       /CN=A9139C18/serialNumber=0EBC49838C5AF89508990A2275838EC0C156B0B7
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
Manifest number:          3D
Signing time:             Wed 29 Jul 2026 10:10:04 +0000
Manifest this update:     Wed 29 Jul 2026 10:10:03 +0000
Manifest next update:     Wed 05 Aug 2026 10:10:03 +0000
Files and hashes:         1: DrxJg4xa-JUImQoidYOOwMFWsLc.crl (hash: hEYV9rsW2LDio3JN03NcWFbfb8E+V6Tiyv10Ei6fLl0=)
                          2: 87952B92341211F181A039BCC7833773.roa (hash: jihd2+gV5EBFkgpYBoUkD4cr1iajWa+KP7BF8vtY6VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.crl
                          rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 09:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139C18, serialNumber=0EBC49838C5AF89508990A2275838EC0C156B0B7
        Validity
            Not Before: Jul 29 10:10:03 2026 GMT
            Not After : Aug  5 10:10:03 2026 GMT
        Subject: CN=6a69d17c-df68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:4a:6f:fd:86:fb:39:a8:16:9b:e0:c7:a9:0a:
                    f1:9d:1e:00:8a:87:31:f1:f6:ba:7f:3a:48:66:95:
                    a5:37:94:3f:05:35:c0:ee:8d:76:a3:88:66:91:fc:
                    a4:c9:76:c6:3f:c1:f7:92:97:5e:2c:ac:45:e4:14:
                    ae:be:59:b2:15:15:46:a6:75:9f:0e:1b:fb:69:98:
                    d2:74:8d:71:3a:a6:31:07:26:62:3c:63:d2:26:d2:
                    e9:8d:91:f4:ed:aa:63:63:8e:da:17:ba:ef:7c:89:
                    a5:68:c1:18:11:ad:f8:27:e5:b6:6e:23:c8:2d:96:
                    9d:0c:84:1d:80:53:8f:f9:53:a4:02:ee:4f:0d:f4:
                    25:b2:fc:bf:e8:f1:49:fd:b1:d8:db:f7:ed:18:ff:
                    0e:bb:08:03:f6:83:08:60:27:4f:f6:0f:7f:35:be:
                    f9:b8:db:36:70:29:0e:6a:cd:cb:8c:03:fa:cb:7c:
                    9c:2e:b1:19:55:31:09:77:30:30:7d:83:0d:d6:01:
                    c7:98:60:c5:64:e9:45:a0:f0:2e:17:01:56:68:2a:
                    59:e7:34:61:0d:ab:24:e2:6e:54:26:37:6f:8f:d5:
                    96:23:98:22:5f:fa:59:08:81:8a:8c:51:e5:55:60:
                    64:e0:ae:fe:94:f7:d4:de:30:66:07:93:ee:29:9c:
                    b5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3B:80:FE:2D:40:F6:11:39:0C:B7:B1:87:B0:5F:92:AE:D2:A5:31
            X509v3 Authority Key Identifier:
                keyid:0E:BC:49:83:8C:5A:F8:95:08:99:0A:22:75:83:8E:C0:C1:56:B0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:3d:55:b8:f5:1b:2a:3f:49:8a:ac:a3:a5:9c:36:6a:f0:0d:
         ba:68:44:f8:47:88:e4:83:90:0d:b0:c1:81:ef:37:5d:01:d7:
         3b:e5:55:59:0c:c0:22:96:36:06:15:21:24:95:d6:5a:90:76:
         d6:c2:b2:b7:78:2d:f8:38:e4:b1:e1:4f:3e:83:d5:85:ae:60:
         17:ce:a2:19:ce:17:59:17:c4:a0:ec:d1:12:28:f8:31:2c:6d:
         3f:33:3e:64:7c:18:60:ed:06:31:00:49:f7:12:d8:4d:c6:7c:
         70:e9:15:e5:03:15:dc:db:ee:30:ca:60:80:fa:38:54:94:e8:
         41:0d:4d:b9:2f:3d:0d:fa:d2:fc:a3:6e:52:84:76:8b:64:83:
         a3:dd:1e:6c:04:67:28:d6:e8:8f:06:73:43:bc:96:4a:24:7e:
         1a:7b:b5:28:c0:f7:2c:6f:51:9e:4e:c5:b6:b7:01:24:bf:5e:
         5a:9b:16:95:c6:ec:14:1f:25:dc:04:09:45:8b:64:30:f5:79:
         29:17:71:be:de:a9:ef:50:df:d9:b8:e0:3a:7f:ce:34:62:73:
         f8:91:52:9a:eb:86:41:bd:fa:b9:8c:17:4b:ee:fc:32:61:1f:
         f6:91:ad:f2:8d:fa:ab:48:29:bb:71:4b:dc:9f:8a:82:7c:4b:
         ca:19:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:21 2026 by rpki-client