Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
File:                     vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json)
Hash identifier:          l2YurjgMKf4iYm36m9FmdOwcDQcNiNaHweNeWxdutjs=
Subject key identifier:   66:B0:E1:CC:29:3B:65:29:E1:E6:01:59:B8:C0:B1:A4:ED:68:59:3F
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Certificate issuer:       /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial:       02C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
Manifest number:          02B1
Signing time:             Thu 23 Jul 2026 02:32:47 +0000
Manifest this update:     Thu 23 Jul 2026 02:32:47 +0000
Manifest next update:     Thu 30 Jul 2026 02:32:47 +0000
Files and hashes:         1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: 2GBtt5fqdQ4WCupAogVIzSjE0vKEozGbVX0mcYwxKmg=)
                          2: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: ePfF/CUpcT9AQZe6qaQ1N1RSOdvv3ZT2eXxXmDrwqb8=)
                          3: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: /+jelo79YovQA7YZplF1xBN2qAqSTGjRE0MBwtFZbrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
                          rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
        Validity
            Not Before: Jul 23 02:32:47 2026 GMT
            Not After : Jul 30 02:32:47 2026 GMT
        Subject: CN=6a617d4f-c593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:76:e2:0b:55:ed:f0:40:6f:93:f3:72:19:
                    08:e9:18:cd:cd:db:64:9b:88:56:3c:14:13:1e:78:
                    29:d5:dd:0a:c8:15:de:1d:ad:83:72:24:ac:72:98:
                    bb:7a:21:ce:6c:4e:28:09:57:db:26:1f:e1:b9:5a:
                    99:a9:9e:85:88:d3:09:68:aa:c3:6a:c4:59:c9:fd:
                    e8:0c:06:e6:f5:bb:8c:e1:82:1a:58:b1:8f:6d:a6:
                    e1:7a:d2:d8:be:a2:e0:6e:19:39:f4:c8:27:c8:78:
                    e0:a4:7f:d8:64:25:03:19:16:85:55:82:ad:9d:c9:
                    fc:11:d1:d5:64:df:d4:bd:0e:e1:a7:b5:b3:e5:d4:
                    eb:26:bf:96:e1:e7:7b:44:8f:dc:e5:a2:23:82:22:
                    fc:b7:fb:1a:61:d0:46:47:be:33:fe:4a:97:57:32:
                    f1:dc:38:11:44:40:25:a9:19:bb:8c:90:d7:81:bd:
                    90:9a:b9:1e:90:04:77:e5:9a:71:4a:72:a4:8d:53:
                    72:3a:74:1a:af:b1:aa:d7:f0:b0:80:48:e3:6c:24:
                    ad:2e:34:d5:cf:92:1f:4b:b7:8b:8e:cb:1d:19:cf:
                    94:6b:36:c7:f7:88:8a:0c:27:ad:f2:a1:3a:17:db:
                    d7:a7:6b:c6:02:63:ee:23:ef:f6:03:99:f8:ab:01:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B0:E1:CC:29:3B:65:29:E1:E6:01:59:B8:C0:B1:A4:ED:68:59:3F
            X509v3 Authority Key Identifier:
                keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:11:44:cd:72:ac:89:4f:fd:09:db:1b:a0:c3:3e:40:69:71:
         bb:e3:11:3c:25:21:8b:dd:2d:e5:58:9e:8f:11:39:19:b5:c5:
         9a:a4:c7:e3:8d:33:2e:fe:6d:1c:1d:43:db:66:2d:fe:ea:d0:
         95:35:ac:ee:31:16:79:6a:2a:2a:1c:33:8a:e2:c5:67:00:db:
         f1:17:24:b0:4d:b9:7a:7a:da:dc:99:5c:2a:6d:89:eb:e7:31:
         b3:d6:1d:33:95:fc:76:3f:bc:ff:74:df:b0:0d:ac:3e:b4:41:
         01:08:14:8d:eb:65:1e:b8:fc:17:93:50:1d:be:bd:1b:63:ee:
         1a:9e:80:83:13:97:3e:7f:37:4c:0b:b8:3d:1c:0b:d8:3a:a2:
         a9:d5:ba:5b:e2:7e:38:fa:a5:8b:26:45:53:77:c6:16:91:73:
         01:54:45:b1:7d:cb:42:6c:a7:14:26:1e:c8:a5:2c:d6:6b:30:
         dd:cc:16:60:a5:a0:22:86:fb:59:fc:e3:e6:27:90:f9:3e:dc:
         03:82:1e:42:e1:90:23:83:29:dd:79:2c:bd:ed:0e:3a:db:74:
         98:6a:b0:79:36:8e:96:c9:e6:b1:d1:41:e6:97:1d:aa:cd:f2:
         b7:b2:0a:17:e2:86:7d:11:c0:e5:45:2f:22:c7:0c:f1:be:f4:
         ee:2f:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:13 2026 by rpki-client