Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
File:                     AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json)
Hash identifier:          INZ5PVUpVVmImJ3zbMn1sPoibDezE0mUq2N7kb/wEh8=
Subject key identifier:   15:89:84:E8:0A:48:B2:6C:C9:E1:D3:66:5A:41:C8:55:DF:2D:79:F8
Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F
Certificate issuer:       /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
Manifest number:          45
Signing time:             Thu 23 Jul 2026 10:25:28 +0000
Manifest this update:     Thu 23 Jul 2026 10:25:28 +0000
Manifest next update:     Thu 30 Jul 2026 10:25:28 +0000
Files and hashes:         1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: eAuBrcHjbw2z4tir0oeQt8yGgpi3y8aVuuU3+8bssCU=)
                          2: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=)
                          3: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl
                          rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F
        Validity
            Not Before: Jul 23 10:25:28 2026 GMT
            Not After : Jul 30 10:25:28 2026 GMT
        Subject: CN=6a61ec18-372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:3d:0c:56:79:c7:0b:70:5b:8d:06:b5:d9:
                    44:12:15:e0:22:ea:33:eb:19:5d:cd:71:23:96:6f:
                    e1:27:ae:3c:7a:7c:6a:27:83:cd:05:74:7c:5b:12:
                    0c:66:22:69:fd:34:f1:cb:f7:bf:5a:fc:f5:bd:e2:
                    66:c8:94:bd:85:4a:54:89:27:06:2d:5e:9a:a2:f8:
                    e5:ee:d6:5e:5c:d7:47:f2:ec:29:d0:74:73:2c:db:
                    f6:0f:ca:dd:ed:f8:13:82:cd:76:18:10:b1:83:a3:
                    04:c1:5c:3c:59:85:5b:30:37:8d:6c:e3:64:1a:70:
                    0e:b9:22:1f:3a:3d:d8:be:f1:04:d8:60:2b:9d:45:
                    73:da:95:73:e8:3f:ff:5a:45:92:a8:bc:58:31:e0:
                    c3:e6:3d:33:ca:0b:fa:16:c7:69:42:56:08:0a:08:
                    c0:a8:d4:31:81:5a:0a:b3:04:ac:c8:e0:83:53:f9:
                    01:93:7a:75:6f:5a:19:9a:c9:d7:ad:b8:de:ad:c6:
                    58:80:56:99:f2:5c:3c:c2:0f:2d:85:46:47:5b:89:
                    ef:88:e3:40:5f:b3:f3:28:50:f2:34:91:42:6b:01:
                    e8:b4:3f:76:02:3d:c8:e3:c5:48:ef:43:6c:4d:7c:
                    d4:0d:8a:ba:5d:97:f0:00:fe:0c:b2:17:4f:92:61:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:89:84:E8:0A:48:B2:6C:C9:E1:D3:66:5A:41:C8:55:DF:2D:79:F8
            X509v3 Authority Key Identifier:
                keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:47:25:11:98:12:80:a9:2a:ec:d5:15:bd:13:18:6e:c4:ef:
         0d:46:24:a7:80:f7:27:59:53:0c:d6:b6:9e:10:87:e7:6c:8b:
         fb:a0:a4:f2:e0:a5:b4:96:3d:e1:76:dd:64:80:0a:98:21:f9:
         0a:8a:9d:70:bb:86:6e:e1:32:ef:7b:ab:db:98:7c:71:d6:16:
         ec:0d:b5:96:32:11:a3:4a:f1:83:e3:5f:e6:40:b4:f0:44:92:
         0a:c2:7f:9b:1d:39:56:96:a2:c8:d9:8e:33:11:f5:a0:8e:14:
         41:3e:4b:ff:c7:4c:3a:c8:9f:33:76:f8:bf:f7:be:88:61:44:
         4a:8b:21:f0:5f:5f:1c:28:50:f8:61:b3:a4:33:58:9f:2e:fa:
         87:6b:12:38:eb:79:d0:c3:7a:f3:eb:48:65:61:51:b5:df:d0:
         e2:e9:aa:ab:cb:a4:f1:85:7e:91:1e:ad:63:48:a7:96:bf:c7:
         32:1d:8e:fb:67:f4:a9:68:2b:71:0b:fc:46:ce:0c:cb:4f:b5:
         9e:a5:41:3d:4e:f9:ad:95:6a:64:8d:bd:1d:e1:43:7e:59:59:
         81:81:28:7e:b4:c4:57:f3:68:45:12:e8:2d:eb:5e:6d:6f:f5:
         13:f1:b6:79:29:41:76:04:19:f0:11:76:11:06:39:6f:22:39:
         a4:77:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:25 2026 by rpki-client