Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File:                     4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier:          joEfisGnDdT1krDL5rdzVfqRkcgvQHoZhiRsbdbAxNQ=
Subject key identifier:   97:8A:97:F9:E6:FE:92:83:48:73:9D:2E:4A:0B:3B:B0:CE:08:C5:BE
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer:       /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial:       054A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number:          0539
Signing time:             Wed 22 Jul 2026 20:48:29 +0000
Manifest this update:     Wed 22 Jul 2026 20:48:28 +0000
Manifest next update:     Wed 29 Jul 2026 20:48:28 +0000
Files and hashes:         1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: N2/wcAB+kdVP9JgucOiu7o4wCYKrkhtx6YLyBspsNMk=)
                          2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=)
                          3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=)
                          4: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (hash: YA17LyHTfthDzdk1fJZ4Q1wQt3Gaa9uu+WHv2HF57n4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1354 (0x54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
        Validity
            Not Before: Jul 22 20:48:28 2026 GMT
            Not After : Jul 29 20:48:28 2026 GMT
        Subject: CN=6a612c9d-6c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:2b:35:b4:59:b6:8c:5e:1b:97:b5:d3:7c:
                    b9:50:e6:96:5d:ac:e5:0b:a4:17:89:1f:90:9f:9a:
                    b7:92:7a:fa:b6:5c:c6:d5:a6:aa:9a:0b:3d:2a:00:
                    8d:fa:99:43:40:21:b1:ec:66:39:3d:e1:d6:75:2d:
                    17:c6:16:82:ff:2f:9a:d5:f1:b6:64:53:a5:4f:89:
                    fa:08:35:21:44:40:7d:e0:49:bd:d7:e1:13:c1:be:
                    67:86:f2:ab:81:00:6a:d0:79:d7:a2:58:f7:18:5a:
                    79:38:a4:1b:2e:03:a5:27:f8:f4:9c:20:11:f8:39:
                    d4:95:b0:2c:be:8d:d1:59:bf:08:07:ea:4e:30:85:
                    29:81:0c:97:69:3c:58:1e:cd:76:12:4c:d0:f0:9e:
                    91:60:83:27:6b:86:cf:40:9e:30:05:7f:67:82:0a:
                    83:9a:35:66:4e:ed:43:6f:1a:5b:73:25:3e:c3:7c:
                    3b:a6:56:ef:22:13:87:29:ae:87:d1:9d:98:c9:08:
                    cf:f3:47:e7:d2:b9:bb:85:a8:cd:f7:6f:09:07:1c:
                    22:ba:ea:2b:b1:2c:d7:50:ea:88:5d:20:c4:9d:2b:
                    37:25:40:96:5a:52:bc:39:f1:47:65:02:6d:fa:ce:
                    72:18:ce:96:13:bd:42:ff:4d:59:12:16:65:23:14:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8A:97:F9:E6:FE:92:83:48:73:9D:2E:4A:0B:3B:B0:CE:08:C5:BE
            X509v3 Authority Key Identifier:
                keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:74:70:8a:f0:77:cd:42:67:9c:c4:bf:c5:e9:80:58:f0:
         8c:b9:0f:c2:ef:f1:dc:f3:57:19:7d:24:77:ef:c1:5b:7d:1b:
         1c:52:75:a4:0e:8d:20:5a:c2:49:15:00:9e:a8:41:d3:22:7b:
         bc:af:0c:63:a8:91:57:26:33:1d:ad:d7:f0:92:2c:5b:b3:7c:
         b5:e4:af:f2:e3:dc:03:78:1f:e8:08:dd:01:1f:65:aa:ba:f0:
         77:f7:14:a0:6e:a8:fe:bf:e6:f1:5a:3e:34:0a:b8:35:95:04:
         9f:c3:21:61:43:18:69:62:b5:d6:95:a5:9b:41:97:9b:cb:11:
         79:de:04:59:4e:23:50:65:cc:db:1f:8f:49:2c:5b:50:30:94:
         4b:48:ed:83:59:8f:c4:26:95:64:89:7c:75:a5:d6:38:b2:0d:
         6a:8b:48:6b:a6:36:ed:83:8e:bf:2f:43:4b:13:ff:73:32:df:
         4c:bf:85:40:5a:5b:d3:2e:0e:97:e3:ed:af:42:1e:61:35:57:
         51:cd:3a:c9:47:87:61:7f:dc:93:cd:a6:cd:c3:cd:67:cb:17:
         11:c6:4c:5d:7e:b7:d6:3f:e2:36:d7:1f:9a:4d:75:ad:22:32:
         06:96:3f:56:03:94:35:b3:a3:07:89:61:d1:d5:d0:4b:23:7c:
         da:69:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:17 2026 by rpki-client