Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
File:                     vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json)
Hash identifier:          u4+h/5CI6oqrMa+OiDxte14cH7KGNUnwrcrHE6LKdRk=
Subject key identifier:   55:52:64:60:98:0B:60:F9:C4:CB:DD:4C:D4:B1:E8:89:62:9C:33:81
Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93
Certificate issuer:       /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493
Certificate serial:       08C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
Manifest number:          0872
Signing time:             Thu 23 Jul 2026 08:41:14 +0000
Manifest this update:     Thu 23 Jul 2026 08:41:13 +0000
Manifest next update:     Thu 30 Jul 2026 08:41:13 +0000
Files and hashes:         1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: 89DmXiXbsL0VPRoqZSqMkCLaBb5MYPfjVWCtvetCBK0=)
                          2: 3DB1BB00867211F1A49B353F5EA30FBC.roa (hash: ciyJTYbsJu4EqjJPQTwPgA9seL8CchhfPXFNoQk7kF0=)
                          3: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: VUsT3WhLr2UUwr4UuxggYtOUr91kn2k/gbUtrN14jIM=)
                          4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: 9NjZ97yfcAcC59kufHt/CpdvnTx281jOzn4vAO45hOo=)
                          5: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: dNqNutT/nTGY7soYWesTr9kDIRasDZG/jPBBAFjkNwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl
                          rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493
        Validity
            Not Before: Jul 23 08:41:13 2026 GMT
            Not After : Jul 30 08:41:13 2026 GMT
        Subject: CN=6a61d3aa-7b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:06:62:ff:39:8e:bd:b6:ea:2a:41:e7:af:
                    a6:f1:94:e0:92:d2:41:f4:8b:de:9c:4f:c9:9b:5c:
                    11:8f:ad:ef:e9:0f:14:26:37:74:11:be:07:c8:50:
                    0a:86:7a:b9:8d:c2:91:ae:b1:75:f0:81:f5:c1:94:
                    e3:f8:4e:e0:76:b3:43:f9:16:36:32:33:19:ec:e3:
                    78:f5:62:2f:3a:9f:9b:17:cf:94:f0:71:08:6c:f0:
                    03:c2:dc:e9:27:c8:07:38:ac:4a:f7:61:34:99:d4:
                    f1:b8:57:29:df:25:06:fe:f7:27:4b:ef:26:32:88:
                    13:93:09:ed:67:d3:3b:08:5f:0b:2a:0b:f0:b5:9b:
                    00:af:ed:6d:af:b8:e8:c5:72:3b:3d:01:fb:1c:da:
                    fb:75:91:a7:87:c2:b3:45:3a:2c:c4:10:6d:ee:21:
                    5e:e2:ed:69:5c:f7:3f:1e:1d:19:5d:9a:a0:5c:6c:
                    bb:b1:1f:52:07:72:ae:5b:94:bc:d6:18:e7:c3:80:
                    73:78:24:48:ae:58:f8:93:79:38:41:d3:67:3b:c3:
                    53:6f:cb:c1:67:3d:33:f1:90:1c:0b:0f:1a:21:3c:
                    14:a8:7c:96:0f:fa:da:5d:e3:31:3c:a4:30:ce:0d:
                    64:2e:3d:c8:a9:5a:30:0e:18:fa:57:92:15:30:1a:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:64:60:98:0B:60:F9:C4:CB:DD:4C:D4:B1:E8:89:62:9C:33:81
            X509v3 Authority Key Identifier:
                keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e9:18:ac:0e:d0:6a:1a:7b:ff:fc:85:d6:88:8e:d0:2a:1e:
         b5:b2:86:ed:b0:19:70:1e:cb:68:b7:2b:32:53:65:1a:8c:cc:
         18:26:2e:f9:01:cb:95:2d:e4:44:5d:59:de:aa:1c:e2:bd:a7:
         3c:bd:d9:97:b5:9d:9c:48:60:f4:28:20:68:e4:4d:70:42:33:
         e7:22:0e:77:56:24:c7:f3:a2:33:a8:c4:7b:64:45:12:a3:8b:
         4f:18:32:0e:b7:1c:4c:95:2e:aa:6c:de:df:1f:eb:92:5a:0e:
         7b:48:60:84:4a:31:a5:fa:77:2f:18:f7:1d:69:f6:6f:d9:59:
         70:d1:3a:cb:e0:6d:71:b7:a7:41:cb:1f:96:02:90:d0:3f:2b:
         cc:16:5b:54:50:f6:f3:4d:ae:37:b8:7d:f2:f7:b4:f1:82:97:
         6e:32:4e:18:8d:24:f6:e4:98:03:d9:88:3f:0d:84:b4:dd:e1:
         f5:48:3e:60:1e:b1:6f:cd:d0:ee:d9:46:47:82:ae:fa:be:e5:
         2a:23:4d:c8:1b:11:b6:03:62:b9:b4:54:ce:37:4a:6d:d0:60:
         d8:05:5f:0a:d6:45:77:9d:63:40:fb:ab:c3:b2:fe:4a:6f:96:
         2e:19:3f:85:8b:f4:f2:ca:96:55:9e:da:af:52:6e:e3:80:40:
         39:9e:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:51 2026 by rpki-client