Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
File:                     r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json)
Hash identifier:          QGxCYRWVgDTlCjbkjDjxbCyikyBu6wHH89RL0kKAo68=
Subject key identifier:   D4:7B:2F:94:F8:6D:64:70:72:19:EA:0D:18:9D:2C:9C:B5:61:E1:8C
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Certificate issuer:       /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
Manifest number:          02A1
Signing time:             Mon 27 Jul 2026 03:11:16 +0000
Manifest this update:     Mon 27 Jul 2026 03:11:15 +0000
Manifest next update:     Mon 03 Aug 2026 03:11:15 +0000
Files and hashes:         1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: XVcZosEn+t4I58XJlRf2imFsXgSGSH1R02gh6mz6AZ4=)
                          2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: zL+0GILNq3N6RlaPpOmQcCTITpel7i2coFIgiZ3nFug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
                          rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
        Validity
            Not Before: Jul 27 03:11:15 2026 GMT
            Not After : Aug  3 03:11:15 2026 GMT
        Subject: CN=6a66cc54-95fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:ea:92:79:49:46:63:9e:79:fd:eb:9c:cf:
                    a1:8c:75:c8:9d:aa:13:1f:4b:9c:fe:6d:fe:d8:bb:
                    eb:d1:0f:1d:df:d7:f5:0c:a9:21:89:bf:2f:6a:10:
                    ff:75:92:8e:20:28:5e:5a:24:c7:e2:d1:34:9c:ac:
                    dd:23:7d:f3:85:c6:90:63:35:c8:76:02:66:87:1e:
                    04:90:8d:9d:66:1b:18:24:27:d1:e0:96:f3:5f:ed:
                    57:22:04:dd:18:e8:0e:9d:e1:b4:1a:19:ce:af:d6:
                    66:9e:d4:18:b5:9c:46:79:9e:1a:6e:ee:44:d9:8d:
                    73:0b:4d:38:ba:e1:3e:b3:9e:0c:27:68:8b:5d:58:
                    f9:4d:64:17:b6:f3:92:86:bf:df:ef:19:26:2b:eb:
                    bb:01:84:29:06:07:69:c8:6a:9b:e1:f6:57:a6:d9:
                    c2:ca:59:0a:99:d9:99:fa:2b:3d:a0:65:a3:0b:f5:
                    43:c7:f7:57:de:46:ae:4e:8f:12:24:8b:1c:1e:7e:
                    1c:79:ed:b3:0e:49:ce:9d:6f:45:28:2e:70:0b:c6:
                    4f:4b:4d:59:a4:29:23:bb:87:d0:4b:3c:93:a7:98:
                    5a:92:02:f4:7a:7f:57:27:d1:eb:4f:8c:7b:b8:c1:
                    e9:47:72:28:b1:14:6b:93:09:38:83:13:b1:81:9c:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7B:2F:94:F8:6D:64:70:72:19:EA:0D:18:9D:2C:9C:B5:61:E1:8C
            X509v3 Authority Key Identifier:
                keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:43:ec:55:ab:0a:05:ea:90:0a:bb:f5:14:0c:c9:bc:b5:
         39:55:72:a0:9d:b5:77:a7:8c:d1:54:83:ad:fc:e6:5c:c8:09:
         46:98:00:8d:32:44:20:4d:da:44:ac:c5:4a:21:ed:82:e6:71:
         34:9f:59:f5:72:1d:02:4f:c8:a3:39:cf:cf:d8:0a:09:97:09:
         86:45:2b:a4:65:2c:b0:2a:08:f6:ce:0c:bd:ca:a1:8b:65:f4:
         6c:92:5d:c4:ba:c6:01:f5:34:02:a1:49:84:14:ef:0f:3f:b8:
         98:01:e3:7a:fb:18:f4:77:9e:e1:1a:b5:34:8e:4e:df:68:76:
         b3:bb:76:f4:9f:0a:87:ed:a8:28:4d:57:83:ce:f6:f7:c0:ac:
         48:fd:51:d5:b9:84:d2:22:5d:b2:91:30:58:02:27:22:eb:d4:
         92:15:b7:2b:d0:b0:ae:46:f6:5f:2d:fc:11:eb:5c:f5:01:53:
         05:34:2e:92:dd:59:5f:84:19:3d:37:d2:c2:8b:50:be:e6:1f:
         68:5a:11:9d:b2:a0:18:d3:f3:21:e7:28:13:34:22:a1:ea:04:
         b3:96:84:ca:5a:c8:c7:a8:e5:d7:09:8f:96:ee:77:83:68:1b:
         6d:0a:d4:76:97:5a:22:ed:4c:32:2e:3d:51:d6:15:86:ad:56:
         bc:0a:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:29:43 2026 by rpki-client