Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
File:                     pThhh8LmHJfmRGCcsqc3tTA4jXo.mft (raw, json)
Hash identifier:          1CufsFL2fVZzQ9YcydfKfODY4Doo6RaGTvHMnG6ETnw=
Subject key identifier:   F2:44:8C:39:39:8F:45:20:4E:76:05:AB:94:0D:1A:85:19:13:79:38
Authority key identifier: A5:38:61:87:C2:E6:1C:97:E6:44:60:9C:B2:A7:37:B5:30:38:8D:7A
Certificate issuer:       /CN=A9118A92/serialNumber=A5386187C2E61C97E644609CB2A737B530388D7A
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
Manifest number:          1B
Signing time:             Thu 23 Jul 2026 11:02:31 +0000
Manifest this update:     Thu 23 Jul 2026 11:02:31 +0000
Manifest next update:     Thu 30 Jul 2026 11:02:31 +0000
Files and hashes:         1: pThhh8LmHJfmRGCcsqc3tTA4jXo.crl (hash: GwB2frMifQe4wbUgvUKfs3Cd3aVBFOBP1yWOwqQMfmw=)
                          2: 15E32A7E624F11F19BDACA0A7F47A888.roa (hash: f+BLQcaOqMt4rYqZW7bp/2oqh0zJPb7OZ8Oeu/bHU0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.crl
                          rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A92, serialNumber=A5386187C2E61C97E644609CB2A737B530388D7A
        Validity
            Not Before: Jul 23 11:02:31 2026 GMT
            Not After : Jul 30 11:02:31 2026 GMT
        Subject: CN=6a61f4c7-68f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:cf:72:45:d6:af:ac:57:17:88:f5:45:db:
                    bf:d0:9f:76:ad:bc:40:14:e1:db:31:27:62:55:1a:
                    55:20:a5:1b:ac:3d:87:a5:e5:45:d6:a0:d1:2d:be:
                    67:8d:cb:57:8d:a2:d5:58:e9:57:7a:ca:11:87:cb:
                    9a:df:fd:02:be:74:a4:b6:2c:b2:83:d7:c0:7b:98:
                    5c:da:a6:41:cb:0a:30:f5:0b:2f:17:b3:0a:57:1c:
                    4b:a5:c3:d0:9b:ee:d6:35:2d:0a:06:de:49:9d:b1:
                    5f:cd:4c:86:13:39:4b:2b:b7:76:5b:79:3b:5c:63:
                    e7:00:9e:8b:c8:5f:33:c7:44:32:7c:f7:17:d1:6e:
                    f9:0b:51:20:cd:59:72:0e:83:2c:5c:3c:7c:43:df:
                    7a:ea:1b:5d:fd:84:65:e0:09:89:5f:91:4a:66:a0:
                    eb:a1:f8:81:ab:46:d4:19:90:cd:22:9a:bf:e6:4d:
                    96:eb:80:f2:ce:9d:86:90:71:bd:ab:51:01:32:fb:
                    9a:4b:8d:31:8a:f4:1c:79:51:0f:2a:99:3b:0d:99:
                    02:cd:65:70:be:e0:4b:e6:c0:e7:58:5c:73:05:f7:
                    24:6b:47:6a:35:01:d4:4e:e5:d6:69:40:5d:0f:20:
                    c0:af:b2:45:b7:08:32:7a:b2:ba:f4:9e:b2:f9:df:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:44:8C:39:39:8F:45:20:4E:76:05:AB:94:0D:1A:85:19:13:79:38
            X509v3 Authority Key Identifier:
                keyid:A5:38:61:87:C2:E6:1C:97:E6:44:60:9C:B2:A7:37:B5:30:38:8D:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:24:c9:6f:89:0b:71:40:43:b1:02:01:63:33:00:be:85:
         ac:d0:24:b5:75:b8:f1:4d:7e:6f:63:46:4e:09:9f:e1:e1:27:
         d6:70:87:6c:40:82:31:a1:b6:88:2c:8f:91:d8:9b:e0:e8:32:
         f7:9c:18:49:b1:3d:c2:02:c1:e6:7a:e7:a2:40:17:fa:44:93:
         73:d2:a2:da:d6:53:6c:41:3a:1c:4b:4f:a1:e3:a6:42:ab:0f:
         41:b6:bc:76:9e:eb:a6:bd:02:a5:e2:c8:65:2f:ba:69:81:9e:
         c1:ae:70:6d:ea:37:2e:65:18:3d:31:70:02:b6:d6:36:09:ac:
         4e:92:75:f2:bb:dd:30:dd:98:df:16:5f:8b:6d:b1:bf:1b:fe:
         ec:da:e5:dc:6e:b2:60:c1:9f:d6:29:f3:ad:73:50:09:0d:f8:
         6e:21:68:bb:a2:75:f5:f3:36:c8:d5:9f:2a:2e:0a:bc:1a:96:
         7b:b1:a0:2e:f0:1a:0d:77:d5:c9:f2:40:a5:e4:7f:dd:51:76:
         ab:d4:00:ae:be:d6:97:71:09:1d:c5:40:1c:9b:a9:2d:a9:bd:
         52:90:cc:cd:1d:03:d4:71:65:22:b1:95:26:dd:05:5a:e3:b0:
         96:5b:3e:09:da:ff:7f:26:59:c4:99:3e:4c:05:80:36:5b:10:
         38:6f:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:31:17 2026 by rpki-client