Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File:                     h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier:          3k0wjlGhWPjQtFxIqyp8exjx5M1raDDrgzLrZyypd3g=
Subject key identifier:   A4:A5:0D:FA:AB:62:6E:9D:0D:AF:9A:71:27:89:3A:B3:95:5F:58:86
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer:       /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial:       0C7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number:          0C73
Signing time:             Fri 24 Jul 2026 19:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:41 +0000
Manifest next update:     Fri 31 Jul 2026 19:00:41 +0000
Files and hashes:         1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: j0yXkry6D1NhW+m6hAATOLaQdu1c6nzBD7UsOzi3VwY=)
                          2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: b+zymn1ltVuOppTrIVQmgPXI02QXRnzUgrsEcAqqyFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
                          rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
        Validity
            Not Before: Jul 24 19:00:41 2026 GMT
            Not After : Jul 31 19:00:41 2026 GMT
        Subject: CN=6a63b659-f1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:54:66:94:e9:48:cb:d9:de:dc:4b:ed:c8:
                    ce:62:f6:01:67:bf:3a:1e:b9:bd:11:0b:ac:54:45:
                    b5:53:2d:b3:58:ef:82:ef:4e:5a:7d:83:6d:88:f1:
                    9d:5f:10:97:3f:49:f7:0d:25:a1:90:cb:db:e3:7c:
                    02:7c:bf:2b:dc:22:2d:90:fc:22:e0:ed:4a:f6:0b:
                    60:5d:8f:bf:fe:c5:ad:02:ca:f5:71:ff:fd:7d:aa:
                    5c:ff:4f:d8:3e:d5:eb:a9:4a:ab:f4:0e:4b:3b:47:
                    69:fa:5d:7a:57:71:db:c9:2a:25:85:2b:5c:a9:6c:
                    5b:94:a6:85:78:b8:16:54:07:d0:ec:b4:c1:cc:c0:
                    1b:34:58:c1:2a:71:4f:24:69:a5:9d:66:88:59:60:
                    9e:1f:52:f9:fd:bd:02:72:bc:27:f1:5a:8e:d0:ea:
                    6a:97:a2:ee:d1:9a:02:3d:aa:e6:fc:83:86:0f:e5:
                    37:3e:4a:cc:2d:fb:7e:73:ce:12:2d:30:ab:53:6d:
                    81:19:7c:6f:c0:e6:d8:02:9c:29:aa:dc:32:f5:8f:
                    6a:de:c6:fe:02:26:c3:1d:96:c6:ff:cd:5e:45:41:
                    e9:88:c7:a6:97:c0:5c:2c:64:a6:52:9b:5b:c5:df:
                    3c:bc:19:92:f5:a1:f1:f2:f4:b0:ee:d0:c9:0a:03:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A5:0D:FA:AB:62:6E:9D:0D:AF:9A:71:27:89:3A:B3:95:5F:58:86
            X509v3 Authority Key Identifier:
                keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:39:f8:ac:2f:ad:af:52:81:08:75:a4:28:9d:88:a2:d5:cf:
         df:3a:49:92:ba:7c:e6:1a:b0:40:29:4d:9a:ba:24:2a:1a:0c:
         6e:30:b9:cb:5b:0e:1c:27:d5:67:81:22:f4:bb:5a:b5:61:7b:
         fa:aa:59:21:51:04:ab:cf:f4:08:a4:4d:f0:f1:6d:f9:93:94:
         d1:96:ce:ff:66:f7:17:59:13:cb:23:36:98:44:40:00:43:82:
         bf:2a:a4:d5:fe:83:7b:8d:ca:20:78:28:3b:ee:7b:50:a8:2f:
         40:7f:50:25:f1:e1:a5:f9:ee:fa:a0:59:7f:95:f8:f3:d8:80:
         99:cc:d8:38:81:f3:4f:8e:21:e1:e1:0e:f1:e3:5a:23:17:b3:
         7b:5c:f3:35:3b:0a:87:b3:44:02:12:e2:79:99:52:01:61:8f:
         42:7a:46:a4:05:61:fc:c5:24:96:28:ac:a5:57:b8:4f:6f:f7:
         3f:50:da:68:ec:19:87:34:a3:06:d7:88:70:6e:70:40:5d:69:
         d7:0a:8b:f2:d8:75:34:54:0a:65:69:a3:82:bb:88:39:85:40:
         17:89:33:4d:30:68:d1:ea:02:c3:9b:c1:3a:4e:d7:0c:7a:61:
         80:65:89:2b:20:6e:f4:25:b9:21:49:2b:dc:96:f6:62:2c:b6:
         88:c7:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:34 2026 by rpki-client