Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File:                     tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier:          MC0tXY77ZYDmJwRDNkj4j6hPO61GiEd/hFUKlATTttM=
Subject key identifier:   86:CC:E9:88:7A:4E:FF:DC:1A:DF:EF:07:49:C8:21:F9:C4:8C:4F:4A
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number:          CF
Signing time:             Thu 23 Jul 2026 09:20:04 +0000
Manifest this update:     Thu 23 Jul 2026 09:20:04 +0000
Manifest next update:     Thu 30 Jul 2026 09:20:04 +0000
Files and hashes:         1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: er1ng6Qzven6S3kKyI4Fgc/f+nHeSzlFUgpK6kUiHvU=)
                          2: CFF23F5457FA11F1947AF89298833773.roa (hash: 70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=)
                          3: 5B9CF7B8541011F193006E3293833773.roa (hash: UEPdDUTRui+ayW3AbcnrWggT880Cdd6becbTRiUrqEI=)
                          4: 23967BF24A7711F1A7BED77BA6833773.roa (hash: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=)
                          5: 7E20B24444FB11F1B2B16DC3CD833773.roa (hash: Z/aKf77qoC/D2esHAmrCa6cvuliS7eMoobwi4UM9D1o=)
                          6: 0F05CF767A6011F1976E05638BA30FBC.roa (hash: 7B1bqD+6h9jyiiQRYsB8Q16/B9nLv79GenM8klf3G4g=)
                          7: 1A44C40648FF11F1AE16E45D93833773.roa (hash: q7YWA5SPxz9lm686m7SUsJ/DXFlxCYiGkRbWYzw7qBs=)
                          8: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=)
                          9: A7349B8A499E11F19CE2905A97833773.roa (hash: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=)
                          10: 0D0B98CA4E7A11F19ABC63EAAE833773.roa (hash: MYyEucLCCxrI3FOhoLhSAqiBaqtBwcoKacKk+luCAfA=)
                          11: D2D5E3A2429111F1A9B50A47B2833773.roa (hash: JNJnwJdlLDhaD1G/+iNzHqjRU67B9dzGcdSz2okho74=)
                          12: B83FA29680DD11F1836EF1645EA30FBC.roa (hash: w2ElC61/vAQm+7bnyJttAYhounZrV79k5+yvdBXVa+s=)
                          13: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
                          14: ABCCE66C445C11F1AD9768EE92833773.roa (hash: 9iBZLQ9uktWZ65mu8nlRlZWV5ecR8Ndx/Ji4IWLuSGw=)
                          15: DF3E21307BFE11F198B5A8F78EA30FBC.roa (hash: NT30pur8xhY9PcKqmg6IwjPQmddy3T3G46Qh5vdQmt8=)
                          16: 4E51574483D011F183EEA27F86A30FBC.roa (hash: 21dNdC/KYiVPXa1jlkcf8bMU3p3AIHj9idTqBDJTSzU=)
                          17: 0E6E84F47A6011F1976E05638BA30FBC.roa (hash: HtUuAkol0mHQrD42lO6MoPJ+Ejb03iZZDhqfCwpcfTY=)
                          18: A2517D166EAD11F18743D71861A30FBC.roa (hash: EXYW07HU+PDuF2Sjxw7qGLvDdb4Ds1WxfwmESxYCYx4=)
                          19: FB82DC8A6A1C11F1881DA3A97247A888.roa (hash: FJDR9Q0fg7oHU187h+yL9+qMxbc318Uq6tNh6JulIUM=)
                          20: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
                          21: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: 4HZ72AqLXMi7Oo7fFl4c7MxtfYI6Hr7/6V24G0+ZxdI=)
                          22: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: KJ//K7GtgLc3Sie2BItNl434WLtJNinu64G7n9RU6IE=)
                          23: 300E55D2645B11F19DFE990E7247A888.roa (hash: B8rZI43b2LUCXU8rE+xRAPdthQYs+K3MurmJh+dDXVg=)
                          24: 8FFB3BA07E4A11F1907D372082A30FBC.roa (hash: 2pEoKCofwg8TjGaQHu2CywBBegMX4ui6vfX3Ybywow4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul 23 09:20:04 2026 GMT
            Not After : Jul 30 09:20:04 2026 GMT
        Subject: CN=6a61dcc4-bc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:51:3a:91:2f:ef:cc:32:a4:ea:6c:d1:3a:
                    b7:76:72:4c:2e:06:b8:87:ab:99:0c:91:e8:31:0a:
                    28:70:20:06:d9:c4:8d:9c:96:b5:e8:19:34:db:4c:
                    a2:df:09:5f:03:25:58:1d:bf:06:e1:5d:0d:f5:30:
                    6b:64:f6:1a:81:0f:64:d9:cb:e2:ba:4e:6f:1d:87:
                    a6:2c:86:0a:19:5c:96:ff:a6:07:a3:bd:dc:d8:8b:
                    a6:8f:1a:36:bc:ea:ea:8c:aa:bd:0d:1f:fb:68:92:
                    75:24:27:7f:0a:26:25:6d:e3:d6:93:04:b2:56:90:
                    64:20:bd:2f:03:71:90:37:00:07:92:84:dd:f2:fe:
                    f7:de:65:64:09:8a:b4:c1:3b:ac:02:ab:dd:63:9c:
                    71:53:5c:72:0b:39:56:c7:b0:93:34:3c:e1:54:4c:
                    f8:2c:b1:d9:3d:08:d6:af:88:8c:b3:15:0e:45:c5:
                    0a:85:fa:9a:f5:62:11:09:c4:f6:d2:a6:3f:b2:0e:
                    4a:63:16:54:80:4b:f4:0c:6d:cf:37:55:bc:bf:4a:
                    9a:2b:97:1e:e8:c6:bd:fb:2e:de:5c:97:94:68:2e:
                    b1:8c:18:46:24:c5:e2:da:1a:ce:5c:1b:38:f5:14:
                    56:94:16:85:29:94:5f:b3:3f:94:d9:0a:d7:57:9f:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CC:E9:88:7A:4E:FF:DC:1A:DF:EF:07:49:C8:21:F9:C4:8C:4F:4A
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:94:38:86:45:ff:91:80:bf:22:81:5b:79:e2:2c:e4:d6:a7:
         de:f2:49:56:b1:8d:be:3e:a0:24:f0:84:2e:65:d3:5f:3f:5a:
         bd:20:48:a6:52:5b:09:02:ba:cc:26:31:81:c2:16:e5:41:54:
         35:d6:ad:33:56:fd:ff:7e:e1:7a:18:a3:5e:d7:2f:8b:7a:3f:
         34:ab:70:c5:54:a0:8c:5e:9b:54:5f:06:7b:ce:e9:6e:4e:52:
         30:8d:41:29:15:71:ca:0b:73:3c:94:60:55:b0:5b:60:92:2a:
         70:e0:08:84:1a:83:f6:0a:d7:66:70:4f:ac:3d:fb:67:27:3b:
         42:ec:92:3c:7d:ed:59:60:26:3f:47:3a:23:f7:12:e6:5a:1f:
         8b:40:fc:24:35:94:5e:98:ec:8a:4b:99:77:96:5b:62:0c:46:
         f6:71:3d:d2:c7:16:a4:bc:1f:10:71:ed:5e:41:82:57:35:a6:
         6a:15:b1:55:92:7d:9c:45:0b:87:23:4f:43:ee:f3:3e:31:de:
         9b:fb:e3:9b:48:c1:40:4c:e3:28:ba:9a:ac:69:97:b9:30:d0:
         88:ca:3a:31:a8:cd:eb:9b:d1:95:f9:7c:be:cd:b9:c5:bb:71:
         4b:12:0a:e2:67:af:ca:22:af:7d:7e:c6:ba:73:12:6e:a8:44:
         b8:16:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:12 2026 by rpki-client