Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
File:                     RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json)
Hash identifier:          c17GNPB33zm1bi2uiNk+b1D03hcKAFycBZV1pTfbx4o=
Subject key identifier:   94:E8:2B:05:F2:28:56:35:99:91:1C:0D:B5:BE:A3:14:75:7D:56:A4
Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
Certificate issuer:       /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Certificate serial:       11A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
Manifest number:          1199
Signing time:             Wed 22 Jul 2026 17:19:14 +0000
Manifest this update:     Wed 22 Jul 2026 17:19:13 +0000
Manifest next update:     Wed 29 Jul 2026 17:19:13 +0000
Files and hashes:         1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: 0ZezMjyD+gwZv1SbxKjLKtPDRhB/EfoFHoGYeMc/KKU=)
                          2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: ei/KvFaC24XXw0sfw8PzNcUmeph2F1of8SKZD0r3ZLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
                          rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4515 (0x11a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
        Validity
            Not Before: Jul 22 17:19:13 2026 GMT
            Not After : Jul 29 17:19:13 2026 GMT
        Subject: CN=6a60fb92-4b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:4c:75:ad:74:f8:57:5c:df:fe:ea:a0:34:
                    21:54:62:78:89:ed:11:04:b8:56:11:dd:75:ab:fd:
                    3c:93:1a:fb:4c:d7:96:e8:3a:05:a2:74:41:5a:36:
                    33:79:97:62:78:e0:0d:0f:ba:a8:cc:83:83:60:e1:
                    1a:1c:ea:9d:5b:4f:7b:10:a7:fc:29:71:da:da:27:
                    25:30:c6:74:4d:90:a9:f7:e8:5f:66:f8:9b:65:fa:
                    ec:54:f5:20:f3:80:e3:6b:95:ff:96:02:f1:57:d8:
                    57:d1:77:a3:2e:da:c0:c0:5d:92:13:c3:0c:62:1e:
                    3b:a5:ca:da:d5:21:1d:2e:c7:2a:37:32:49:d3:aa:
                    2d:60:67:5c:fe:8d:7f:55:af:de:21:3e:05:4c:73:
                    e2:34:1e:77:e8:8b:45:35:50:4e:21:a1:59:20:8e:
                    df:3d:7f:d1:76:99:16:28:6c:49:4b:fb:2b:27:32:
                    32:21:16:f5:3a:e1:17:40:2c:fd:18:0d:c4:d1:43:
                    e4:5e:6f:c4:67:d3:46:3a:a8:4c:17:4c:0e:fe:f0:
                    08:98:1c:c2:ae:0d:2d:91:bb:db:3e:f3:94:c9:be:
                    52:66:43:04:98:2f:cc:f6:cc:a8:90:9a:de:c7:42:
                    04:8e:1d:4b:c5:9b:e4:fe:8c:6b:3c:09:fc:30:5e:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:2B:05:F2:28:56:35:99:91:1C:0D:B5:BE:A3:14:75:7D:56:A4
            X509v3 Authority Key Identifier:
                keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:ff:b8:27:89:d9:a7:57:1e:94:50:b0:c9:30:1b:2e:f8:
         15:7f:f1:bc:6a:c1:6f:58:fd:9c:71:c7:ba:51:c0:8b:e8:4f:
         c7:85:1f:68:4a:51:e8:e6:36:80:45:2a:f3:ba:cb:7f:8a:fe:
         c5:56:9d:ff:b4:97:87:9c:40:5e:b5:83:ae:54:74:7e:e8:2e:
         b9:27:9a:41:6f:30:69:1b:5c:5d:70:99:4a:8d:2f:99:08:99:
         f1:b5:c8:1e:fa:46:66:32:57:66:98:44:64:21:96:0a:3d:fb:
         5f:76:80:53:51:8f:22:24:2f:c3:a5:0c:5d:66:fe:90:1e:30:
         ae:06:5e:0e:9e:f6:15:94:b3:dd:63:0d:23:01:fd:fa:6b:cc:
         31:db:9d:00:68:19:ff:19:18:ba:5f:f3:18:c3:31:34:8c:5f:
         af:89:35:39:b9:86:c4:95:64:7c:e4:94:09:78:df:bd:e7:cc:
         78:7b:57:19:5f:f8:b6:4b:95:46:86:7d:5b:44:61:8e:b3:f7:
         77:dd:29:49:eb:c8:00:7d:49:24:d9:36:d3:5a:a2:5d:b9:4d:
         0b:87:9d:f3:09:e2:14:74:2f:64:b5:ec:3f:ee:3e:9e:d5:9f:
         45:c4:14:7d:db:92:c0:b0:92:c7:3c:e8:cb:91:11:14:23:b4:
         e5:a9:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:09 2026 by rpki-client