Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
File:                     C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json)
Hash identifier:          GbXk+BrRfyIyeeGqVPyKvj3dSFKcg8B1ErXuUeEQewA=
Subject key identifier:   E2:EF:7C:7A:87:5D:53:D3:D3:AC:1B:0F:9C:74:C8:A0:1D:2C:30:4B
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Certificate issuer:       /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial:       31957D51FA67948BC1B92E6C9174E962F9A0A9B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
Manifest number:          030A
Signing time:             Tue 28 Jul 2026 03:26:09 +0000
Manifest this update:     Tue 28 Jul 2026 03:21:09 +0000
Manifest next update:     Wed 29 Jul 2026 05:58:09 +0000
Files and hashes:         1: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: 1srxNLkDySS6fiifB4DPOaG5PvvAtOGaPaRHXwTpNyo=)
                          2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=)
                          3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: OxfvWzPkD6HThX8sbxreZQb3PqUPl42+ZNqZb2dB2hs=)
                          4: 3130332e32352e3132342e302f32342d3234203d3e2039343537.roa (hash: B+ADVjoTHnyVRxwPayXW8Wr41jua47v7vFKOzXKix6M=)
                          5: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 7e1q16oVO9npHirMK4v5g3vSkY20JTKKgzdAw4kY6GE=)
                          6: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
                          rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 05:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:95:7d:51:fa:67:94:8b:c1:b9:2e:6c:91:74:e9:62:f9:a0:a9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
        Validity
            Not Before: Jul 28 03:21:09 2026 GMT
            Not After : Jul 29 05:58:09 2026 GMT
        Subject: CN=E2EF7C7A875D53D3D3AC1B0F9C74C8A01D2C304B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:b3:6d:e9:61:8c:8b:09:03:28:f1:08:c6:
                    f5:7b:b3:ad:50:f0:09:f7:4c:3d:fa:7d:27:dd:f8:
                    2a:11:9d:39:06:be:75:e9:29:db:3c:bd:bf:31:7c:
                    21:b8:40:f1:47:83:80:79:67:a7:3a:fe:4d:4d:55:
                    77:9a:ec:85:64:5f:a4:11:8c:c5:23:8a:4e:a6:35:
                    2f:e8:0c:37:b0:88:46:79:ad:96:d8:98:f0:79:33:
                    5d:a4:45:a4:7a:b8:52:e9:42:45:78:ff:af:70:46:
                    e3:d4:b9:e0:ea:35:a3:99:53:c8:70:ae:7e:c9:48:
                    22:7a:d6:01:36:80:74:f6:a5:57:1d:11:10:d2:34:
                    0b:ca:81:a0:03:e3:13:e9:29:e2:fb:20:1e:c9:99:
                    b1:4a:c3:be:27:af:99:18:6e:34:8c:00:f7:ac:f6:
                    a7:ac:86:ba:7e:ea:40:a0:bf:b2:c4:a0:ac:b7:56:
                    fe:b6:c6:7a:b7:56:19:2b:ac:b8:41:52:17:1e:9a:
                    ab:37:59:ac:67:40:20:88:52:54:78:f8:60:f5:b6:
                    3f:8d:3e:40:12:4a:67:d8:a2:50:83:69:ad:9d:b0:
                    83:38:93:05:94:45:b9:42:47:eb:fc:c9:15:65:59:
                    81:25:01:1f:ee:1f:72:fb:b3:28:74:a7:99:cd:e5:
                    3f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EF:7C:7A:87:5D:53:D3:D3:AC:1B:0F:9C:74:C8:A0:1D:2C:30:4B
            X509v3 Authority Key Identifier:
                keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0d:a5:10:65:a4:63:0f:b4:49:0c:1b:f7:90:9a:bd:da:6b:
         49:de:89:a3:63:b2:0d:12:17:37:7c:69:a2:69:69:cf:91:d6:
         af:b7:ef:01:41:41:1d:92:d2:59:7b:a0:60:4f:e7:78:43:ef:
         29:2c:2e:b1:81:2f:52:44:1c:77:3c:58:46:bf:9a:d9:6d:f8:
         f1:5d:ea:c0:a7:2f:7d:26:9d:64:2a:1c:aa:af:f4:a2:92:e2:
         b6:e8:6c:51:26:cc:14:3e:49:54:39:2e:07:db:a4:93:f5:3d:
         f9:af:6b:c4:6b:04:f0:ea:0a:69:4f:75:dd:6d:b3:01:e3:a1:
         ac:9a:ec:20:47:70:60:32:9d:83:91:4d:ea:66:35:0a:6d:ae:
         40:4c:17:d8:2a:f4:94:d7:0d:f8:34:07:c8:11:ba:40:c4:48:
         5f:ae:09:b5:77:fa:92:35:9e:01:93:66:36:42:f5:18:f1:47:
         dc:60:8f:df:40:3d:97:db:c9:19:73:d5:b0:42:9b:e4:2f:1e:
         62:c2:33:e7:6b:78:bd:59:d9:33:a2:2c:c9:74:43:26:ce:9c:
         a8:28:23:e4:a0:23:17:a3:82:a9:b2:7e:ee:a5:c4:3b:f8:2f:
         f4:14:b9:5e:32:d3:45:c1:47:cb:04:6c:cd:2f:81:9f:20:3e:
         e0:77:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:20:02 2026 by rpki-client