Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
File:                     N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json)
Hash identifier:          oL8FHz09DkFf7p504QPJvt/QR/YN4ycQV8lr8b1jY3c=
Subject key identifier:   B0:24:7A:49:49:CF:01:46:6E:36:A0:8F:D3:F1:65:8A:E0:90:16:59
Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26
Certificate issuer:       /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
Manifest number:          0124
Signing time:             Mon 27 Jul 2026 07:42:06 +0000
Manifest this update:     Mon 27 Jul 2026 07:42:06 +0000
Manifest next update:     Mon 03 Aug 2026 07:42:06 +0000
Files and hashes:         1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: AOUGrfEcdgibVdV0X43UD6xp71hrk/Db+Vb4JtPXkAs=)
                          2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: VXJPLa2QkwTK9qAfsf4K4gTbZZAIxfCK2fVcEe5zOgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl
                          rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26
        Validity
            Not Before: Jul 27 07:42:06 2026 GMT
            Not After : Aug  3 07:42:06 2026 GMT
        Subject: CN=6a670bce-97f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:45:15:61:7a:ce:bf:35:ca:01:9b:fb:d3:
                    d0:44:e5:08:6c:74:ec:9d:50:fd:5e:91:41:33:85:
                    d9:05:48:3a:5b:48:99:35:03:9c:0a:45:7d:79:b3:
                    9e:e8:3e:a7:1d:a8:85:42:62:91:68:00:22:4c:8d:
                    8d:3a:a6:4b:f5:50:ae:bb:cd:95:22:5d:b6:d1:8b:
                    2a:ff:c5:ca:df:35:d3:e8:9b:64:b0:3e:04:eb:fd:
                    8e:79:1d:4d:14:ee:18:0a:78:84:44:1d:b7:89:b0:
                    ac:35:31:e5:e5:0b:ed:98:5b:41:97:21:9c:5a:dd:
                    fd:a0:64:15:7c:dc:7a:46:08:28:e3:a2:8a:88:5f:
                    a2:83:ac:e3:49:26:e3:4c:e0:77:6c:ca:07:c0:92:
                    74:66:25:6b:19:ba:c5:88:ee:cb:02:00:ca:86:87:
                    a0:b8:6e:69:69:f9:9d:5b:16:86:23:9d:59:a7:8d:
                    73:0e:c7:7f:11:60:29:ef:99:58:c1:66:dd:20:a7:
                    96:b4:92:52:8c:b8:74:26:f6:5b:83:94:d2:93:8a:
                    d9:bc:29:5b:b3:8c:f0:7d:26:f5:14:f1:b1:b1:04:
                    ce:a4:2a:86:78:4d:1d:fc:29:a5:b4:71:73:4d:90:
                    1d:a7:3a:1a:26:07:24:f7:d2:d3:70:e7:94:0b:18:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:7A:49:49:CF:01:46:6E:36:A0:8F:D3:F1:65:8A:E0:90:16:59
            X509v3 Authority Key Identifier:
                keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7c:15:cb:dd:28:60:89:d8:8e:2c:3d:e5:10:a2:50:02:c6:
         28:f4:cb:9b:2f:5d:05:44:9b:b7:d4:b2:ef:58:26:68:d7:34:
         8f:dc:4f:31:09:e2:04:e3:45:dc:46:7c:2f:74:97:fc:da:f1:
         dd:8b:96:62:f4:12:1e:b6:57:97:f1:a3:fa:d3:5a:f7:67:68:
         88:ed:b7:38:bf:2f:ba:e3:a3:d2:b0:f7:09:19:a0:5e:72:75:
         5c:75:25:92:46:07:56:6e:25:02:f3:ab:35:ff:05:81:d5:4a:
         8c:98:3c:a9:ac:9c:16:2a:f9:69:13:c6:eb:a4:77:97:59:b9:
         9a:cd:6f:03:03:7d:f6:36:f0:dc:b2:50:13:7b:4e:4a:23:1b:
         99:bb:0e:bc:a6:0d:97:51:15:cf:b8:74:d5:f9:91:45:70:20:
         84:5f:14:a0:2b:37:c3:71:9b:1d:a9:26:22:71:2f:22:88:4e:
         5f:ff:7e:9c:5d:00:9d:3d:b0:36:aa:4f:c9:cc:97:6e:52:69:
         05:ea:c4:41:8a:e3:21:24:c8:49:f0:1b:8e:0c:b9:b6:ef:30:
         4d:04:33:7f:c7:b8:ad:cb:4a:72:3e:3d:a7:ef:fb:92:0a:d6:
         d1:7a:1e:b1:34:e9:82:9e:c8:57:26:3f:04:ec:85:f0:dd:f1:
         29:93:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:26 2026 by rpki-client