Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
File:                     v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json)
Hash identifier:          ghIAG1+aIFzgTSvq/g2brsgS+hAsfPVpKoq9I5m7jCU=
Subject key identifier:   BC:0F:20:ED:21:44:87:F5:1F:FD:BB:E5:1C:6C:5F:CB:21:D7:94:69
Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
Certificate issuer:       /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
Manifest number:          DD
Signing time:             Thu 23 Jul 2026 08:21:50 +0000
Manifest this update:     Thu 23 Jul 2026 08:21:49 +0000
Manifest next update:     Thu 30 Jul 2026 08:21:49 +0000
Files and hashes:         1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: i00Hw5iS8CUuFkdLhhn+MK4hjLHEmPSUW8T2kVQ72bM=)
                          2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: Z9wsNscGW8jTuOrPcKnc3KiOXLu3fKLaOWy4uh1nNqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
        Validity
            Not Before: Jul 23 08:21:49 2026 GMT
            Not After : Jul 30 08:21:49 2026 GMT
        Subject: CN=6a61cf1e-0eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:ef:a4:15:32:9b:95:4d:12:27:f3:84:57:
                    2a:4e:ba:d2:4e:ff:d9:49:9a:1d:17:c2:6e:24:a9:
                    4b:bc:93:bd:fc:b8:73:79:a1:c4:04:26:d4:7f:cc:
                    c1:36:91:19:5d:e6:98:32:95:80:8d:12:88:f7:f5:
                    b3:05:c4:2b:05:f1:0a:97:3e:ce:1c:9e:8c:47:a0:
                    c3:62:7b:36:a9:c0:af:18:9e:4b:66:87:1b:5d:84:
                    c9:27:bb:3e:17:09:72:05:ea:0a:f9:8b:c8:56:87:
                    9b:8d:07:1e:43:3e:37:87:16:16:2a:28:1a:53:91:
                    83:15:b9:57:41:cb:c2:60:a6:e4:39:f0:05:94:4d:
                    00:96:d1:07:e0:ca:f7:49:7c:53:15:a8:6a:c6:c0:
                    d5:d9:e5:21:31:39:ea:8a:b6:75:b1:16:8e:90:0c:
                    43:6d:7c:70:61:2d:26:01:a8:45:47:15:a7:8f:c6:
                    50:a7:6a:e1:08:b2:70:bf:02:d3:e3:f8:e6:30:52:
                    ae:7e:33:10:3f:74:9c:91:36:67:93:52:7f:96:72:
                    b4:88:54:7d:c3:ed:05:38:9b:86:91:ba:86:c7:6a:
                    f7:72:b8:e0:4c:93:ad:53:1d:62:43:bb:ea:db:62:
                    27:61:e6:44:86:50:37:db:ab:9d:a0:17:72:c5:42:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0F:20:ED:21:44:87:F5:1F:FD:BB:E5:1C:6C:5F:CB:21:D7:94:69
            X509v3 Authority Key Identifier:
                keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b1:9f:77:3e:2d:06:7e:2c:bf:33:16:bc:3d:c8:7a:c9:c4:
         38:e9:cd:01:2d:fc:d6:39:6a:8d:b3:ce:74:79:9a:08:da:4b:
         b7:b9:37:87:01:45:f8:6b:dc:b7:6d:7b:f2:c0:80:10:eb:9b:
         f4:fe:91:85:e4:a6:73:ce:6c:83:23:fc:d9:fa:94:f3:84:32:
         c5:e0:30:20:97:a7:56:e2:61:45:22:4c:d4:08:c3:ee:88:bd:
         04:00:d3:d9:e8:8c:b9:4b:c3:a2:f2:8e:9a:ce:e3:4a:1f:4a:
         cc:9c:5e:94:18:4b:f8:b6:da:c9:0f:6f:e4:0f:04:f8:bb:65:
         42:32:e9:08:c4:fc:f5:42:3a:e1:c3:30:0f:87:65:e9:b5:c3:
         21:94:aa:6b:23:47:1a:26:2e:cb:26:a1:fc:fb:25:fa:6c:c1:
         1e:df:88:26:22:1f:b4:43:a4:cc:86:4b:a7:8e:b8:e7:03:f4:
         3a:7d:04:dc:a3:74:77:3b:88:ef:e5:df:1d:74:01:be:8b:27:
         0d:d6:c2:36:3a:58:4d:6d:82:e8:af:a3:4c:56:61:b4:42:5a:
         e9:2f:9e:3c:ac:98:3f:17:c3:c7:32:00:ae:ed:59:37:d6:32:
         79:6d:7d:2c:9b:65:63:68:98:6a:7e:ef:aa:5e:e2:2c:06:c2:
         ca:39:ed:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:20:47 2026 by rpki-client