Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
File:                     s02Q9DN0N_l3bvB0le1r-joN4rI.mft (raw, json)
Hash identifier:          +qblhlvRns2dJf2jddqKQNIMpTP135AXwFpJwpyZ5yU=
Subject key identifier:   8F:1E:8F:90:98:0E:3A:F2:54:34:F1:28:4C:5D:76:60:DF:79:F6:F6
Authority key identifier: B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2
Certificate issuer:       /CN=A9182509/serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
Manifest number:          72
Signing time:             Mon 27 Jul 2026 10:10:17 +0000
Manifest this update:     Mon 27 Jul 2026 10:10:16 +0000
Manifest next update:     Mon 03 Aug 2026 10:10:16 +0000
Files and hashes:         1: s02Q9DN0N_l3bvB0le1r-joN4rI.crl (hash: QRzchv1KRs5IYHcEJZFPu+AhbiBFxIQ8LMrmC81IGUA=)
                          2: BE29D45EE48611F0890F621E446F56BC.roa (hash: hKsoH8oLZIQOc0nbhGD9YegDajB0Xhwk9YbaG8Vcg5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
        Validity
            Not Before: Jul 27 10:10:16 2026 GMT
            Not After : Aug  3 10:10:16 2026 GMT
        Subject: CN=6a672e89-b2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:db:bf:a8:2b:d8:2b:3a:6d:f3:a5:4e:77:
                    79:78:25:cb:6c:27:a8:a1:a9:34:d3:5e:b7:ef:07:
                    8a:ff:3e:2f:0f:fb:62:3c:b9:91:4e:c6:3d:69:32:
                    45:c2:6c:b6:73:a8:7c:ab:23:d3:b0:3e:3a:06:86:
                    92:a6:1e:ff:60:95:50:fa:7f:d4:16:18:5a:46:47:
                    4f:df:4a:38:6d:4d:11:5b:b4:09:1f:ab:46:0d:3e:
                    8d:d6:cf:16:9c:2b:a8:cf:75:01:93:e3:72:a9:11:
                    3c:53:fd:e0:ae:79:8a:6b:2a:fe:59:2e:c0:57:34:
                    65:4d:0d:ed:2f:da:d6:38:91:ab:32:a5:4c:c3:13:
                    f1:bd:40:9f:ea:02:0d:2c:0a:61:a6:ad:15:4e:77:
                    db:5b:32:dd:73:70:a9:c4:47:25:c3:33:5e:cf:b4:
                    42:f0:c8:04:f8:cc:dc:66:02:0d:c8:15:69:44:01:
                    74:de:67:b3:21:b1:a4:9c:85:c1:60:f2:1c:fd:16:
                    d1:e0:91:38:d9:e2:d0:ed:a9:b7:df:8d:df:59:7b:
                    1d:ff:d6:26:80:12:05:3b:c9:e2:b7:1f:88:36:0d:
                    9f:ec:ba:a2:a8:d8:d2:73:7e:b0:4f:a1:2a:ea:5a:
                    f0:d6:95:c5:2b:91:65:fc:ce:38:65:40:8b:3a:3e:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:8F:90:98:0E:3A:F2:54:34:F1:28:4C:5D:76:60:DF:79:F6:F6
            X509v3 Authority Key Identifier:
                keyid:B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9e:5b:8e:a0:2d:0e:43:87:c6:16:45:62:a1:cc:42:ae:cf:
         fc:e5:26:40:95:55:9a:0b:42:d7:82:84:5e:29:22:e3:65:29:
         dd:17:ea:13:a2:a5:d4:e7:28:f5:c1:f8:7b:d3:28:66:1a:67:
         74:b6:97:a5:cf:31:e8:59:03:9e:c4:da:26:0c:9b:45:0a:56:
         ff:58:b0:10:3c:38:40:0b:4c:ce:13:82:47:71:e3:51:45:f1:
         f3:4d:d7:d1:ab:ba:97:21:96:04:46:ba:96:cc:32:d9:25:30:
         7e:17:bc:ec:6e:6e:e9:5e:b7:33:0c:69:a1:82:2c:df:0e:ac:
         54:9d:b2:d5:54:9b:8d:ad:35:e6:4f:b5:90:9d:65:92:bd:5b:
         62:13:5c:02:fd:1b:06:f4:53:18:45:3d:53:27:1e:22:a0:ef:
         83:e1:5a:21:15:0e:54:4d:49:11:f6:28:82:8d:4d:f2:82:72:
         59:2e:3e:ba:c7:ec:6d:0e:ca:9f:3f:fd:d2:01:42:d3:54:44:
         85:22:56:04:35:b1:fc:79:11:01:d4:6a:15:d1:ef:13:21:c3:
         41:c4:18:6e:4e:68:6a:83:91:9a:97:97:be:95:69:6e:2c:8b:
         c8:b0:d1:8f:5f:d3:0d:5e:11:4a:72:3b:d2:f0:56:e7:75:37:
         cc:c5:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:26:59 2026 by rpki-client