Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
File:                     f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json)
Hash identifier:          OenH/iY+khE9tD/B10rv2X8eVDy6j89/nbe+6EpVknU=
Subject key identifier:   12:C0:6A:8A:F4:DB:D5:B7:DA:FC:23:02:E4:9A:6A:F6:A1:DD:EE:FA
Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
Certificate issuer:       /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
Manifest number:          0880
Signing time:             Sun 26 Jul 2026 21:20:31 +0000
Manifest this update:     Sun 26 Jul 2026 21:20:31 +0000
Manifest next update:     Sun 02 Aug 2026 21:20:31 +0000
Files and hashes:         1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: c5MZBnHuJG9KLXOF0D3zj6chU56OaD4ywp4K5UeZdXQ=)
                          2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: +BeHLx7VaH6/51C+W2jAqccPL251vmtUI5jSFWjaXuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
                          rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
        Validity
            Not Before: Jul 26 21:20:31 2026 GMT
            Not After : Aug  2 21:20:31 2026 GMT
        Subject: CN=6a667a1f-2ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:28:a8:1e:ab:cb:07:8c:7d:f8:7f:48:c8:
                    82:e3:16:0a:ea:47:81:58:de:b4:10:85:f6:e0:45:
                    6d:b7:77:d0:d4:e2:9c:2e:5c:53:bb:d3:9d:13:e6:
                    53:b8:3f:16:aa:14:fb:da:cc:18:7e:4c:15:dd:04:
                    ce:0a:76:58:bc:f4:0d:88:c8:f4:8c:f9:37:66:14:
                    7f:48:53:32:45:07:cb:9b:90:45:b3:95:c9:b0:2a:
                    8d:e6:3d:bb:1e:64:f8:a7:d5:34:69:79:5b:d9:3c:
                    6d:ad:c6:cc:fb:e1:8d:2d:c0:08:e7:eb:cc:2b:48:
                    5b:9e:a1:54:d3:52:42:67:81:0a:5a:11:18:c2:62:
                    1a:6a:08:1c:e5:64:8f:58:fb:81:1b:9a:8f:7e:7a:
                    09:79:98:73:c5:0d:87:e0:cb:29:68:38:c6:30:76:
                    b1:cc:f1:17:07:56:b0:a6:16:e6:2d:51:42:5b:82:
                    5b:e7:28:8e:0f:d8:f7:59:57:73:f2:c5:1c:82:14:
                    d2:46:ac:82:7c:38:82:d3:a6:0a:8e:cf:17:6a:e2:
                    8f:d7:54:6e:c0:34:1d:6a:b7:06:b7:dd:5b:d8:01:
                    be:2b:b6:ab:4d:8f:72:a2:3c:2e:9a:53:d5:d7:fc:
                    7b:32:a7:8f:65:bc:3d:81:da:1a:cc:01:5b:40:bc:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C0:6A:8A:F4:DB:D5:B7:DA:FC:23:02:E4:9A:6A:F6:A1:DD:EE:FA
            X509v3 Authority Key Identifier:
                keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9c:3a:90:6e:31:32:de:e9:d3:a7:4b:d1:01:17:f9:13:57:
         21:5b:0d:43:f6:54:06:17:8d:7a:b4:10:7e:b3:b5:7b:8c:d0:
         f0:c3:65:ef:9b:b6:06:0d:00:09:42:1b:33:90:b6:1b:65:62:
         46:e0:fa:70:03:9a:04:c7:e1:d8:89:be:e5:f7:21:dd:72:ea:
         06:1c:4e:1b:da:4c:54:13:4b:71:2b:f4:fd:2a:95:5c:08:ba:
         73:14:d7:7b:57:8f:a7:e1:26:60:1c:63:d1:af:80:54:2b:af:
         42:3c:02:8a:45:6d:28:a9:57:8b:0b:1e:55:fd:9b:89:cf:d0:
         b5:0b:77:9a:dd:af:e8:aa:32:e3:e5:51:29:79:4d:aa:e6:fe:
         8b:56:de:99:a0:c3:93:db:11:36:ca:dd:4c:e3:27:c1:3d:24:
         47:41:bc:bd:24:0f:7f:c9:46:83:ce:4b:ed:23:69:87:c7:c4:
         59:26:ca:98:9b:4e:dd:1a:58:38:d7:f5:86:50:63:82:26:f9:
         0a:f3:f2:eb:8a:f7:a7:75:73:e2:1b:a6:9f:7d:a5:2b:6d:4c:
         af:d8:3a:70:f4:5b:13:8c:6a:31:b1:20:9d:81:29:ca:30:03:
         75:55:e2:70:63:68:62:fa:d2:b4:ef:67:8b:76:76:fb:16:f2:
         ab:79:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:23 2026 by rpki-client