Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File:                     rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier:          iZv9e4Ejo3wMKla+xcgDaNTrgPTOsH23yssz+iPDdA4=
Subject key identifier:   9B:32:F7:2A:C7:23:CD:3D:CF:E3:3A:2D:7F:39:7E:E4:71:D6:3F:85
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer:       /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial:       35A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number:          358B
Signing time:             Wed 22 Jul 2026 14:27:16 +0000
Manifest this update:     Wed 22 Jul 2026 14:27:15 +0000
Manifest next update:     Wed 29 Jul 2026 14:27:15 +0000
Files and hashes:         1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: 3FJuK8TDWnUxPEMrnWwLfagiiTPzsExu1eN9+6Cxa9M=)
                          2: 44D3107874E311F1BDAFA91462A30FBC.roa (hash: z613TlXOFDZX8VeacWwPxz5X8yxz+f2S641kEG8YGW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
                          rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13735 (0x35a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
        Validity
            Not Before: Jul 22 14:27:15 2026 GMT
            Not After : Jul 29 14:27:15 2026 GMT
        Subject: CN=6a60d344-6715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:ee:45:75:af:c9:53:e8:50:ce:05:05:11:
                    88:0e:8c:8f:37:dc:cf:3d:48:58:1c:8f:01:28:12:
                    7f:67:78:e8:df:82:30:0e:3d:b8:7b:00:0f:36:8e:
                    80:04:8b:c2:14:8f:c8:c1:e0:d3:45:34:b1:cd:75:
                    1f:7f:da:fd:3b:5b:03:4e:d3:24:9b:10:88:8b:89:
                    87:1d:df:88:53:a3:88:68:f8:a5:f6:ee:56:ef:85:
                    82:31:35:a2:9f:58:f1:1f:0b:ae:f2:40:ef:08:1a:
                    c6:f1:41:2d:7e:3f:ec:b4:ca:a5:3d:7c:08:57:f9:
                    58:1a:c7:7f:9a:cc:34:1f:76:e0:83:ab:1a:aa:a1:
                    03:bd:72:6c:ac:15:30:29:da:88:a7:39:40:b9:5d:
                    6d:e7:08:0f:19:46:b1:67:3e:55:14:28:8e:64:41:
                    57:d5:78:1b:71:7c:f8:2b:76:1f:a3:1c:93:ee:c7:
                    a7:19:63:91:f1:2c:ee:35:a0:e0:5a:71:56:8c:1e:
                    4e:f0:50:93:61:26:10:b2:e6:cf:8e:85:3d:03:77:
                    4e:64:df:44:c6:7e:89:98:fa:4f:71:9f:a5:ed:45:
                    f6:0d:a5:b5:71:4f:56:ba:94:a6:fb:22:46:8b:d7:
                    63:e6:7b:16:47:9d:a2:a9:72:9d:fb:94:8c:5d:1a:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:F7:2A:C7:23:CD:3D:CF:E3:3A:2D:7F:39:7E:E4:71:D6:3F:85
            X509v3 Authority Key Identifier:
                keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:67:3a:27:17:11:64:32:a9:84:cd:ae:02:46:a1:e0:13:
         87:c3:65:09:91:57:97:85:d8:42:9c:48:51:d4:b7:24:ba:53:
         7b:80:c2:9a:3b:62:82:fe:b4:b6:45:a1:3a:a0:66:ff:b7:40:
         f1:92:e4:18:70:e8:5a:43:72:fe:7a:3c:e8:ec:6a:d2:a2:00:
         4d:52:77:18:c5:af:d6:49:62:e8:16:10:74:67:ca:92:e5:c3:
         8d:a9:0b:51:d2:8d:77:88:cc:2e:e6:4f:cd:15:34:da:7d:9d:
         83:a6:c1:cd:08:f0:9a:4f:b3:54:52:6f:ea:3e:82:02:79:a7:
         b3:7c:d0:98:78:5f:4a:f1:2e:f0:2c:11:49:07:cc:81:fd:32:
         ff:c5:c5:29:76:5a:f4:16:5e:97:46:ff:e5:51:ca:38:47:b8:
         98:82:3a:38:90:c0:b1:68:65:06:c5:a1:43:42:c9:9a:8d:46:
         dc:34:4e:04:07:09:13:a6:ce:c2:00:a8:87:37:20:6d:7c:17:
         98:d8:7d:8a:ed:d9:f0:ea:e7:60:72:dd:13:f6:2a:e9:23:76:
         2c:ad:71:98:5e:91:7d:73:5f:63:15:60:93:9e:63:08:45:fc:
         e8:fd:46:22:75:23:86:96:fb:26:07:86:ed:08:16:7e:76:79:
         8f:b6:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:52 2026 by rpki-client