Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File:                     9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier:          n5pN0AruXyXOkwpJrtBplkUZtWkUJK26PNCaVDhs6ks=
Subject key identifier:   76:30:B1:BE:DA:F9:0D:3B:E8:17:27:8F:61:B1:5A:4D:B5:75:0A:91
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer:       /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial:       1A09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number:          19C6
Signing time:             Tue 28 Jul 2026 16:29:49 +0000
Manifest this update:     Tue 28 Jul 2026 16:29:48 +0000
Manifest next update:     Tue 04 Aug 2026 16:29:48 +0000
Files and hashes:         1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: vyhZcoXNy5ErFiLjLS23Yf5ffHOplV8nWf3IYOKaD7c=)
                          2: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=)
                          3: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=)
                          4: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
                          rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6665 (0x1a09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
        Validity
            Not Before: Jul 28 16:29:48 2026 GMT
            Not After : Aug  4 16:29:48 2026 GMT
        Subject: CN=6a68d8fd-e7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a9:37:1e:ba:8a:73:fa:db:26:e5:3b:90:c4:
                    db:ec:92:af:e5:b8:41:6f:0b:20:77:b4:99:18:7f:
                    be:4c:ca:34:cc:f8:a7:2c:0c:7a:fd:3d:22:78:cd:
                    94:07:04:98:77:24:77:42:4f:c0:17:d9:dd:17:9d:
                    ac:a9:c7:fc:96:9e:f1:36:80:8e:84:44:ad:0b:e7:
                    6e:c9:ff:ec:87:d2:dd:86:21:ef:16:8c:ec:fe:42:
                    37:e3:50:8d:62:31:47:ce:d2:37:77:4f:0a:90:43:
                    2f:7d:0b:56:39:45:d9:ee:84:58:2f:8a:b0:c1:80:
                    26:de:3b:13:89:a1:86:ed:85:b5:68:ff:7d:78:11:
                    c8:97:e0:02:b7:ac:aa:3a:8f:c4:45:97:5f:aa:1d:
                    f1:4d:37:5a:49:81:0a:a0:56:f8:a0:74:a7:7c:47:
                    e7:26:c9:fa:e0:39:3e:06:cb:f6:6f:4b:78:e1:2e:
                    dc:a5:a9:59:d5:a4:2a:75:37:56:b4:4e:3c:86:52:
                    16:06:a5:2a:b7:57:74:89:47:74:be:70:54:57:fb:
                    9d:c0:5c:39:f1:59:d6:01:d8:52:57:7b:d2:41:94:
                    b4:7d:5b:cf:8a:11:cc:f1:f7:60:e6:14:33:80:ac:
                    41:5b:6d:d1:8f:07:91:05:e6:72:ec:f8:a5:3d:24:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:30:B1:BE:DA:F9:0D:3B:E8:17:27:8F:61:B1:5A:4D:B5:75:0A:91
            X509v3 Authority Key Identifier:
                keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6b:5f:5e:bb:98:ec:e7:a6:09:c8:de:0f:5e:4b:e7:05:8c:
         48:9e:57:b8:10:0d:a0:60:38:df:de:d4:47:56:69:5e:ee:18:
         43:8e:de:76:6c:40:ad:4e:44:75:ad:54:3f:2c:13:c4:81:52:
         1d:02:1c:68:36:e9:3f:fd:6b:04:29:01:94:65:85:ae:88:5f:
         fe:fe:61:40:be:ee:67:1d:c7:c5:65:02:12:a5:bd:f0:00:8b:
         94:c0:25:50:65:d1:96:68:b2:5f:8d:28:00:6a:72:68:98:ca:
         59:7c:cc:31:ec:97:44:d2:ee:6c:f3:31:f7:00:f4:e5:a4:3e:
         f1:6e:f6:88:1c:4c:53:f4:1b:05:5a:0f:c5:f0:1a:2a:c6:80:
         d5:3c:f4:19:3b:4b:1d:fa:43:6e:b9:d5:3c:e7:01:5e:42:35:
         a3:22:87:c6:95:ad:ac:0a:15:e0:86:61:e0:ab:3f:33:84:c8:
         b9:c6:61:ff:b9:a4:d4:e9:e3:6b:81:c4:37:9a:a6:be:ca:44:
         07:a6:70:35:4f:7b:a5:76:fd:7a:21:9a:2a:15:f4:39:75:b9:
         29:d1:db:15:3a:6b:97:c6:3e:61:27:43:9b:ef:fa:2a:79:e7:
         09:8a:22:0a:0b:ea:de:7b:5c:9a:ed:ed:04:76:fc:2c:d1:63:
         87:fe:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:50:54 2026 by rpki-client