Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
File:                     nhuiMnN6PQDX-qC03Dg02arwbfg.mft (raw, json)
Hash identifier:          6bcYLy+mSW8A9LOWqb6M3WI8xkyRUIbOQRRzue0/sRU=
Subject key identifier:   74:B6:CC:EB:A5:4D:0C:78:4F:FA:55:52:F0:D0:28:D6:33:DA:28:3C
Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
Certificate issuer:       /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Certificate serial:       0751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
Manifest number:          073B
Signing time:             Wed 22 Jul 2026 22:34:10 +0000
Manifest this update:     Wed 22 Jul 2026 22:34:09 +0000
Manifest next update:     Wed 29 Jul 2026 22:34:09 +0000
Files and hashes:         1: nhuiMnN6PQDX-qC03Dg02arwbfg.crl (hash: u32Ya1qE2i/7x2DIUMFKI87vaGYKv42ct8aVQaOKzA0=)
                          2: 3B3D9AA4162211F0AE684383C4F9AE02.roa (hash: L5MYi9GV2MF2nYiCUaELpjfDoeFXsqx8J1Jn5S2VIco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl
                          rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178297, serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
        Validity
            Not Before: Jul 22 22:34:09 2026 GMT
            Not After : Jul 29 22:34:09 2026 GMT
        Subject: CN=6a614561-18dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:99:0c:3e:fc:9f:23:24:03:c9:95:fa:0f:
                    a3:e8:30:e7:06:8c:08:95:96:8d:90:95:b0:96:30:
                    a8:af:de:bb:6e:c9:d6:04:15:fe:8f:c4:a5:30:b7:
                    73:72:fc:74:5f:e1:5e:aa:ff:41:df:e6:6c:7e:f1:
                    0f:e5:69:4b:04:77:ef:39:9d:f2:a6:f4:a4:24:86:
                    80:8f:26:eb:7a:0e:34:5c:22:25:ea:1e:ae:f5:e2:
                    bd:9f:70:ab:c3:0b:6a:4a:17:20:4f:6c:17:2f:83:
                    98:73:82:23:0e:e0:e6:de:31:1e:0a:13:ca:10:0b:
                    0a:95:b1:b5:08:28:92:78:60:72:e2:22:d2:72:cb:
                    e4:ab:70:a5:33:f6:f6:59:7f:28:1d:1c:53:59:b6:
                    fe:f8:be:5f:95:cf:57:b6:d0:35:1a:65:23:9d:53:
                    e1:6c:55:0f:4a:36:fc:88:0b:09:70:a8:dc:db:fd:
                    c6:bd:34:a5:b1:e3:fb:ce:ca:48:29:61:90:35:4b:
                    2f:4e:91:5d:d9:40:00:3a:4f:bd:71:56:64:c5:c6:
                    d8:bd:dd:ff:be:8d:33:9e:f3:9c:1f:2e:44:d7:d4:
                    3b:34:01:3d:bd:17:fd:1d:5e:9e:54:4e:d8:fb:92:
                    5f:63:b3:ea:0f:3d:7c:48:b8:b4:0d:6b:44:6d:a3:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:CC:EB:A5:4D:0C:78:4F:FA:55:52:F0:D0:28:D6:33:DA:28:3C
            X509v3 Authority Key Identifier:
                keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d4:85:84:10:d2:d2:ce:32:ab:32:3f:bc:d8:2e:0f:6a:ef:
         62:e0:aa:f5:9d:4f:ec:6b:74:2b:c8:c6:bb:ee:2e:fb:d8:0c:
         fe:5b:d6:18:72:92:29:39:d4:62:b4:b8:48:ed:9b:95:36:2b:
         80:bb:9a:d2:09:dc:e6:35:69:2a:a6:71:0d:53:80:b9:00:74:
         24:1e:20:7e:12:07:24:0b:a1:a2:81:20:38:6e:01:54:f7:d7:
         63:66:b9:90:cd:53:8e:ec:61:71:d5:a4:41:12:be:d4:de:e8:
         68:ff:96:1c:be:c0:0b:54:bd:44:ca:4f:75:ca:c2:af:f7:4e:
         08:e3:71:cd:a1:c0:45:b4:bb:47:96:5c:e2:00:29:5e:53:a6:
         71:74:c8:7c:ed:7b:e4:21:e2:e5:4f:7e:a8:38:d3:33:c9:b7:
         43:50:6b:7c:18:fb:2f:d0:7a:e3:62:e5:66:32:a1:4a:0c:11:
         85:a0:40:43:06:ae:43:ec:54:47:33:3b:e8:02:af:07:b2:ea:
         c5:16:08:23:23:6f:8d:d9:38:a7:19:b1:15:a8:b4:42:91:9c:
         7d:2b:f4:54:4d:36:70:b8:8f:44:66:aa:b9:ae:34:ae:1c:b0:
         27:57:ea:e4:0e:7e:28:8d:36:a6:35:7d:79:c7:91:69:92:e9:
         38:20:a6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:29 2026 by rpki-client