Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File:                     S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier:          1egIYzw/qhrrva/CdoWZNI4Rxbf6EwgkkPLMvxlpc7c=
Subject key identifier:   AB:2E:64:B6:D7:2A:E2:DF:A5:90:3D:2D:F3:E1:33:B1:FA:2B:FC:EF
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer:       /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial:       0289
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number:          0282
Signing time:             Mon 27 Jul 2026 03:17:21 +0000
Manifest this update:     Mon 27 Jul 2026 03:17:21 +0000
Manifest next update:     Mon 03 Aug 2026 03:17:21 +0000
Files and hashes:         1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: RIRZ2dWw8JbqgzStMLUjYvnqzsA1fhc+DRM+PqsXjjA=)
                          2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: vfCasisl/udX1pawaHCEifoYin0FJKKdJCoRiOIHcf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
                          rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
        Validity
            Not Before: Jul 27 03:17:21 2026 GMT
            Not After : Aug  3 03:17:21 2026 GMT
        Subject: CN=6a66cdc1-514c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:1d:38:c3:0b:2c:2f:fc:f4:d3:52:fe:2c:
                    53:a6:e0:75:86:fa:e1:61:ed:78:20:b4:e0:62:33:
                    49:ee:2c:1d:e7:6b:71:3d:d8:04:97:c8:80:c8:19:
                    a4:b1:1a:64:04:4c:89:b0:58:72:3a:e0:35:18:df:
                    6e:a5:fb:8f:c0:66:4d:f5:65:ff:8e:36:f0:89:3c:
                    6a:d9:f3:b5:3b:ec:d8:51:6a:c2:32:8a:d4:7f:51:
                    8b:d8:a1:d4:d1:d3:13:a7:e9:ef:98:16:81:d6:25:
                    8a:00:da:24:0e:15:00:52:1c:b0:40:0d:3a:df:1d:
                    44:4c:3a:dd:13:d2:7c:4b:ea:b8:49:24:c1:22:df:
                    45:d3:d5:b5:e4:a7:d6:8b:39:d4:d3:cc:6b:64:d9:
                    74:f6:17:e9:15:3b:ec:be:99:9e:9c:f1:dd:0d:44:
                    04:e6:13:b5:35:a5:9f:cf:60:9a:bf:a2:31:67:a5:
                    3b:18:e3:12:d6:5e:99:02:62:1f:27:b8:6d:02:d4:
                    20:05:de:33:2b:42:f6:74:25:7e:89:36:4b:5e:a3:
                    09:83:44:00:c9:db:35:81:06:ed:15:d3:df:7d:2b:
                    4a:55:80:a6:98:02:1a:f6:4d:34:83:ae:2c:a1:9e:
                    33:74:6b:97:d9:47:3c:1e:7e:41:e5:65:13:f0:5a:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:64:B6:D7:2A:E2:DF:A5:90:3D:2D:F3:E1:33:B1:FA:2B:FC:EF
            X509v3 Authority Key Identifier:
                keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:cc:cc:2d:73:5d:8b:1d:e6:b1:33:32:a9:33:f7:5e:ea:dc:
         f8:ef:54:c1:5f:87:13:61:bd:b3:a3:31:6c:d2:09:6f:29:fb:
         a4:4b:fc:70:a4:f2:78:97:7d:50:a0:51:a0:06:85:ff:de:3f:
         65:82:69:d8:70:69:6e:28:31:9b:6a:b1:a4:53:ec:fa:51:ce:
         52:5d:e5:14:90:26:24:2d:2f:c1:e1:6a:3f:c7:0f:9e:be:e2:
         7b:86:ac:c1:b8:ae:a6:5f:cd:a1:7f:60:c8:9a:2e:ab:61:b3:
         e4:ba:a7:57:25:ec:83:c7:14:0b:f1:d9:08:c7:96:64:e7:ca:
         6d:98:34:fe:73:eb:f0:b4:56:c4:4b:ec:8a:d1:59:3b:01:7e:
         2a:e4:9a:2d:6f:96:8a:e2:e8:5c:c5:2d:0d:fa:96:1b:dd:43:
         38:75:24:0e:e2:55:3a:9d:98:6b:6c:61:68:57:a9:77:ac:5d:
         4e:48:08:7b:ad:30:9e:e1:a6:f8:3c:73:9a:8c:ef:05:9c:59:
         35:b7:be:5a:ee:23:25:eb:05:9a:7f:27:9f:88:27:a9:b6:40:
         9c:47:5d:bc:53:9c:83:fd:9a:6b:e4:2d:12:06:09:2b:d8:c1:
         c3:32:80:23:27:a2:98:f1:0b:59:18:40:38:d4:29:13:86:72:
         b1:64:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:13 2026 by rpki-client