Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
File:                     J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json)
Hash identifier:          HI2m3nx46a3snXQrN5Cbysn/+ABG7n/zZczE+bNUuQE=
Subject key identifier:   A7:E3:23:0A:89:23:3D:DD:BD:6D:2C:A5:42:07:9B:AA:04:0C:45:30
Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
Certificate issuer:       /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Certificate serial:       0FAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
Manifest number:          0F92
Signing time:             Tue 28 Jul 2026 17:38:21 +0000
Manifest this update:     Tue 28 Jul 2026 17:38:21 +0000
Manifest next update:     Tue 04 Aug 2026 17:38:21 +0000
Files and hashes:         1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: Ue+0iQbwE1HADw/KtRJ54OFmYWcSZMeS5YcASf7lsZk=)
                          2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: RliNwJOrh8ohq0egdtLbM01dmRkfXxaSAwBvI0aDXvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
                          rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4012 (0xfac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
        Validity
            Not Before: Jul 28 17:38:21 2026 GMT
            Not After : Aug  4 17:38:21 2026 GMT
        Subject: CN=6a68e90d-69ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:9e:1d:69:1f:81:47:cf:d7:1b:8f:a4:2c:
                    a0:b1:2d:da:18:87:ac:d9:1d:83:25:e6:c2:fd:7a:
                    d6:78:46:3c:00:aa:5d:0a:9a:66:e7:0b:7d:f6:2c:
                    62:05:80:70:c2:99:6a:ae:15:a7:24:aa:19:ef:06:
                    2a:e4:42:8d:26:2a:de:65:cc:a5:b4:21:73:7b:c5:
                    31:46:74:44:be:86:e5:24:87:99:24:3e:04:c4:5f:
                    84:c3:99:b4:28:68:e5:20:53:bd:da:99:3d:91:86:
                    90:80:4b:b9:d3:d1:34:69:43:d6:9c:38:7a:83:b6:
                    9f:9b:eb:b2:34:1d:7b:66:db:f8:e7:ba:cd:71:7d:
                    cc:3b:10:8f:d6:83:09:89:07:9b:74:44:01:46:f4:
                    a6:65:4e:d5:63:10:73:28:cc:69:06:71:29:fe:ff:
                    1d:2c:e9:f4:98:5d:f5:29:65:af:0d:d6:43:7e:36:
                    f6:15:bd:de:0c:04:1a:c7:d2:07:3f:e6:40:17:4b:
                    18:fe:7f:02:32:3b:12:7d:e4:e8:82:85:91:d0:4b:
                    be:32:8d:aa:1e:c8:5a:f0:bc:a5:0f:28:8b:2d:8f:
                    40:a6:e6:5a:6a:63:f3:45:b1:80:21:07:b3:71:5c:
                    c5:9e:ae:80:6a:6d:b4:53:6b:a5:e3:3e:f4:25:3c:
                    46:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:23:0A:89:23:3D:DD:BD:6D:2C:A5:42:07:9B:AA:04:0C:45:30
            X509v3 Authority Key Identifier:
                keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bc:de:39:72:a6:a1:5d:95:f4:7f:01:b9:4a:dd:fa:6c:ae:
         d0:25:1c:36:a3:ef:0b:3c:e5:7e:74:c6:c9:29:6a:e4:40:73:
         4c:5c:9f:73:40:42:26:cb:7b:34:62:ff:a3:32:64:2c:88:48:
         91:7e:ad:a1:59:bf:b6:7b:4c:bc:3e:eb:ba:09:22:57:67:9e:
         91:3e:8c:d9:f0:0c:7d:65:38:3c:ff:7c:8b:55:77:ba:4e:7e:
         f7:f7:d0:10:d0:28:07:82:a1:6f:2c:3a:9e:bc:77:31:9f:ef:
         60:11:4c:bb:c3:a2:5b:9a:14:d2:d2:77:4b:fb:f1:88:7c:84:
         49:f6:e6:9a:b5:be:f9:2c:f1:3f:39:1b:8f:08:22:4f:10:73:
         91:76:6e:0f:c6:93:5b:c4:20:e0:b6:c3:93:e2:2c:06:94:d0:
         d9:18:0f:8e:78:51:35:42:bc:ab:4e:1f:30:21:a4:e8:d6:d3:
         c6:3e:dd:a7:52:95:eb:a7:1e:34:27:ff:27:83:b3:38:2b:39:
         92:80:38:01:25:bb:84:82:01:a9:74:d0:dc:94:e4:d7:2f:2a:
         91:1a:98:67:7c:b8:3e:25:4a:b6:b7:71:3b:67:95:53:13:ec:
         c2:f0:1b:8e:5e:00:32:19:46:fb:4f:a0:dd:a6:b4:7b:11:f9:
         e4:1a:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:10 2026 by rpki-client