Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File:                     bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier:          TsJcBw/5I2FMksJqilYnPIHnUCTBnaaTtHlvKwsiQR0=
Subject key identifier:   C0:92:92:38:01:2B:68:A8:3D:A9:15:FA:BB:B3:49:45:A0:7E:1A:4B
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number:          0161
Signing time:             Thu 23 Jul 2026 06:46:59 +0000
Manifest this update:     Thu 23 Jul 2026 06:46:58 +0000
Manifest next update:     Thu 30 Jul 2026 06:46:58 +0000
Files and hashes:         1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: 7KQp0eW+OtVSEc5L2zDHWygRV8eroi8qmm/D2agAaws=)
                          2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: MzzziUvdgBRD34K13czjAKz5Qa4KFePNv6ZSJaDtfDg=)
                          3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Jul 23 06:46:58 2026 GMT
            Not After : Jul 30 06:46:58 2026 GMT
        Subject: CN=6a61b8e2-572b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:cd:e9:eb:0d:52:c7:44:03:6b:85:2a:e0:
                    57:b2:ea:aa:91:b8:ad:3f:fe:27:02:b5:e7:bd:46:
                    0d:8f:67:d6:60:f2:4f:f1:59:d2:da:80:3a:e5:69:
                    44:b7:86:7d:50:8b:31:7a:00:9d:fa:6d:55:a3:69:
                    f5:fa:d9:56:80:61:96:13:7a:7a:ac:e4:42:c0:bf:
                    ff:30:f3:06:c0:a7:69:85:33:ab:97:ce:71:81:47:
                    06:16:e3:33:65:c8:4e:10:3c:8c:ae:5c:11:68:d0:
                    19:6f:8c:df:7d:fb:7f:fe:4d:a7:8e:c5:69:48:1e:
                    3a:4d:e9:98:69:9f:ef:af:09:b7:80:91:54:ec:7e:
                    59:c2:86:9c:aa:c9:72:9c:70:6c:77:97:02:fa:bd:
                    73:91:3a:b2:af:24:08:03:2a:0e:de:e1:19:40:06:
                    f6:24:c2:d1:64:1e:2a:a4:78:19:3b:54:61:b9:d3:
                    35:77:11:16:4a:b2:0a:74:bd:cf:6c:61:70:da:c2:
                    8a:64:15:e0:10:6f:88:9d:a1:ed:8e:69:f1:1d:c1:
                    cd:2a:29:a8:a1:be:da:9a:f5:c6:69:18:a9:48:e4:
                    75:f5:eb:5b:ad:cc:a3:e6:8e:50:6a:77:fc:3e:c3:
                    da:98:c5:02:a1:94:b9:7c:2d:be:80:68:da:54:2a:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:92:38:01:2B:68:A8:3D:A9:15:FA:BB:B3:49:45:A0:7E:1A:4B
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b3:3d:87:23:ee:1c:14:ff:84:95:bc:e6:71:87:30:d7:ff:
         00:c0:a3:94:fb:79:ff:63:0d:96:11:f9:db:d3:6d:e3:74:6e:
         d2:4d:88:94:62:dc:f6:01:9d:65:1c:a2:41:e9:05:c4:ea:9b:
         d4:4e:6f:da:44:48:88:98:32:ae:f7:14:03:78:31:57:40:2c:
         db:79:db:00:20:07:a5:59:4f:60:77:2b:e3:d6:b5:05:f0:3c:
         c5:c7:ac:5b:40:c6:6a:56:fc:51:3f:72:75:ed:95:17:63:cc:
         04:a1:74:a6:93:17:c1:12:dc:01:9e:b0:47:41:7a:c1:9a:ac:
         6e:5a:45:04:0f:ce:cb:41:36:cf:05:2b:a4:5e:90:11:0c:c9:
         94:68:59:54:a6:9b:c7:e2:68:cb:f3:26:79:73:01:cd:ea:0d:
         e2:2a:6f:3a:58:81:ef:73:37:0d:ab:71:51:31:81:50:00:fb:
         fb:b3:be:de:9c:f4:29:0d:77:47:f9:cc:ad:9f:35:7d:7d:a9:
         6e:ac:ef:b0:32:d5:db:d7:71:0e:65:ca:8f:c2:e9:e8:ca:4d:
         be:bb:cd:98:80:32:7c:da:93:26:0b:2d:13:33:1e:81:04:8c:
         c3:d7:8a:e8:47:7e:ab:2c:46:4a:4a:5e:5a:f2:74:a3:58:d0:
         c6:84:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:31 2026 by rpki-client