Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File:                     9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier:          +UZsj7IspmaqEi0EzaRUihOAXt7qn6vMjMze9I1PmLg=
Subject key identifier:   E6:22:28:C3:A4:6E:9E:15:1E:43:C0:81:D6:5A:2F:72:A2:4C:7E:FC
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer:       /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial:       0F9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number:          0F89
Signing time:             Tue 28 Jul 2026 17:37:31 +0000
Manifest this update:     Tue 28 Jul 2026 17:37:30 +0000
Manifest next update:     Tue 04 Aug 2026 17:37:30 +0000
Files and hashes:         1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: hhsALGhXr++qF0PwIDp7w2L0HFKMOmd8xStQSJUMg88=)
                          2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: xeSp+ee2o5QPG9Bonf7PC8aiLXnBIzPrcdEWH1qZB/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
                          rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3997 (0xf9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
        Validity
            Not Before: Jul 28 17:37:30 2026 GMT
            Not After : Aug  4 17:37:30 2026 GMT
        Subject: CN=6a68e8db-07b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:76:a4:20:23:05:be:41:8a:d8:2f:8b:de:
                    a1:42:e5:73:6b:75:7b:9d:4b:49:8f:ab:5d:db:13:
                    d0:ee:69:82:3e:bc:09:45:1a:f1:08:79:98:52:d0:
                    45:aa:6a:74:67:86:e3:d1:79:58:e0:b1:b0:d4:d3:
                    8c:c1:bc:ec:4b:3a:bd:7e:3a:17:77:b2:6a:36:ee:
                    fb:29:ee:3b:c3:14:72:73:b9:a6:06:96:75:28:02:
                    d5:5d:b2:62:cd:ee:c8:f4:34:1e:68:6f:70:1f:bd:
                    79:f1:b1:74:4a:87:a1:0f:6c:41:ef:41:e3:0d:dd:
                    41:e1:d4:4c:ea:f3:38:03:e5:73:09:fb:c7:cc:d0:
                    6d:9e:2e:6b:84:04:44:79:23:50:c5:be:0e:9b:48:
                    51:c6:4e:f8:c3:c0:cc:73:9d:8d:9a:60:36:4f:b4:
                    52:18:88:da:43:07:e8:2c:2e:2c:74:a9:0d:2d:27:
                    c4:c4:ff:28:6e:27:4b:3e:cb:83:19:e8:0e:98:7a:
                    32:b8:30:77:f2:bc:4f:3e:e0:0c:f7:26:93:4a:c6:
                    bc:0e:73:82:25:36:27:b1:96:ca:ee:c0:d7:51:dc:
                    b9:79:2c:77:28:ba:be:74:8e:47:67:4e:18:49:d9:
                    3e:a7:55:66:21:28:e7:36:6b:6b:90:0e:4c:c3:0b:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:22:28:C3:A4:6E:9E:15:1E:43:C0:81:D6:5A:2F:72:A2:4C:7E:FC
            X509v3 Authority Key Identifier:
                keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:8e:20:35:4b:f4:eb:38:6f:0c:19:9a:e4:4a:fb:c1:50:
         98:32:58:1e:f6:f4:40:96:76:91:ed:01:26:a7:97:28:2b:c0:
         bd:7b:9c:de:7f:b5:93:3a:33:f3:3d:18:dd:33:c9:1a:e5:36:
         bc:a5:f6:de:62:bf:dc:ca:6a:2e:60:c7:77:d0:0b:d0:b7:04:
         a3:68:23:81:0b:15:d1:fd:d8:51:3d:72:d5:cf:7f:b8:55:ec:
         a9:e8:67:a8:43:ac:3c:1c:e7:92:ed:fe:31:d4:77:ee:01:22:
         cf:72:14:7e:a9:19:45:39:16:50:70:ba:f3:a5:f9:87:a7:aa:
         4a:d3:51:1c:85:5b:b4:a7:e0:9a:5a:7d:54:8b:ca:02:bd:e1:
         4c:f3:fc:78:41:d5:77:15:2b:23:f8:9e:19:21:c9:ce:2a:ca:
         65:87:7a:d5:37:d1:be:f2:7f:ae:e9:4f:c7:59:13:cc:1d:c0:
         0e:68:42:4c:67:b5:e1:85:cf:d8:38:e0:a0:66:b3:72:81:8e:
         03:eb:b4:24:ed:2d:95:b0:4b:2b:37:bd:dc:0c:fc:5a:f7:c0:
         2c:a4:7c:a1:c3:75:a3:a7:f4:dc:41:c9:8f:79:16:c8:46:2b:
         33:8a:49:7a:75:c2:ac:2d:0a:e4:91:d7:9a:cc:3b:d3:96:b8:
         b6:a7:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:16 2026 by rpki-client