Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
File:                     4hHNheByVQ4z5MyGpj-8360dNTI.mft (raw, json)
Hash identifier:          od1rrkGfjNHYcZ3St/MpnNwtazqlL1fwwYm+Eeejzmg=
Subject key identifier:   8F:15:43:88:92:76:00:9F:BB:89:BA:8F:58:06:A9:19:15:7E:24:45
Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
Certificate issuer:       /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
Manifest number:          08F2
Signing time:             Wed 22 Jul 2026 20:50:34 +0000
Manifest this update:     Wed 22 Jul 2026 20:50:34 +0000
Manifest next update:     Wed 29 Jul 2026 20:50:34 +0000
Files and hashes:         1: 4hHNheByVQ4z5MyGpj-8360dNTI.crl (hash: 7LtWjEk4ghXSuVthW7M5FJtD4NA4ipuOVbWyIXZ5ug4=)
                          2: CEDD71FAE48811F09BEEC367446F56BC.roa (hash: v+w6FMXM2xR0r2SO7jbmxEeAiii0dpp5GEOdFjQ8hTM=)
                          3: 57BDB7A85E7011F1A73FCCD7147AAC22.roa (hash: D1vi/CU/2Qa3UAwk8ROF6/81kLEg5XQ0HrFSPG7aFBg=)
                          4: AF3304C65E6F11F18B912BC3147AAC22.roa (hash: mugZ6N0u6WAwoUu9/alz8CzePymZa9nygy/+jo0Dw6g=)
                          5: 624086E2E99611EA930A5B74C4F9AE02.roa (hash: gGjRkko3vUXG2uHIO8NHVPfpIWdSndydd5tBp7Lr7bM=)
                          6: 0694DE925E7011F18D994AD5147AAC22.roa (hash: 1VTps7TMblVtTtQQmFdN1wLLHWYElV09OvYdQPb9W90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
                          rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
        Validity
            Not Before: Jul 22 20:50:34 2026 GMT
            Not After : Jul 29 20:50:34 2026 GMT
        Subject: CN=6a612d1a-d880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:32:4f:2d:c6:3f:f2:a9:8f:f9:12:64:19:
                    9e:9b:0f:f7:d4:84:62:3e:4e:95:cd:b4:f4:76:b0:
                    f7:be:df:fa:2b:46:1a:60:4a:7c:ce:bf:1d:6c:cd:
                    7e:f0:f4:95:e8:36:60:eb:f3:fc:64:29:7d:aa:d8:
                    c9:1d:55:04:8b:6f:96:ca:0f:75:5f:59:fb:d2:55:
                    79:09:9b:f4:48:fe:14:b2:64:84:75:4b:b4:84:fa:
                    15:65:37:1f:37:19:58:98:04:ec:ea:3a:64:de:82:
                    49:3f:bb:2d:c8:fa:28:92:f2:87:a8:78:c2:0b:96:
                    6b:45:e9:3d:85:78:11:fb:53:61:1a:98:18:10:a6:
                    e1:b1:58:65:35:fe:c2:32:89:a7:f7:47:90:a2:a7:
                    21:1d:65:2c:0b:b4:32:64:18:f4:66:83:39:37:41:
                    35:b0:a2:88:c6:6a:c9:dd:2b:f1:08:60:54:39:bd:
                    aa:0d:a8:8b:81:d3:06:17:07:56:37:71:11:a7:99:
                    97:21:01:62:c8:c4:58:1a:5e:dc:79:56:52:57:84:
                    14:f0:35:e6:22:38:57:be:f0:eb:49:5c:32:ed:97:
                    b1:09:6e:1b:33:1a:c9:e0:0e:5f:ca:f6:f9:90:8a:
                    e0:86:c7:7f:6e:ad:6c:1e:96:b4:0e:4d:8d:d3:38:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:15:43:88:92:76:00:9F:BB:89:BA:8F:58:06:A9:19:15:7E:24:45
            X509v3 Authority Key Identifier:
                keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:07:d4:1c:91:75:80:53:8f:ca:f2:66:a6:28:f3:52:88:8c:
         05:80:b9:f2:da:e9:bf:6b:25:63:35:59:74:37:f9:cd:64:63:
         96:4c:0e:32:48:28:4b:c7:9a:48:df:07:0e:bd:db:5e:90:b5:
         43:4b:94:e2:01:73:b0:6a:87:d8:d4:83:be:47:fd:ac:03:5c:
         a2:60:13:4d:58:62:5e:62:64:69:62:0a:46:ff:08:57:69:0e:
         d2:8d:46:2e:b8:04:d3:d9:2a:d0:bf:ce:29:be:c8:40:f4:63:
         31:37:03:a6:df:db:7e:7d:6f:d0:d6:46:40:a1:8d:58:fd:83:
         bb:86:e2:86:3a:04:c0:9b:50:71:c3:0d:19:a7:59:cf:01:a8:
         df:b0:61:ee:65:9f:be:cd:04:69:46:ac:6f:8f:ee:6d:0d:6e:
         7a:4e:43:70:20:32:2d:a2:05:e7:08:6e:db:1b:a9:b3:41:b9:
         69:69:14:20:80:a7:5b:32:cf:b7:ec:87:ef:89:0f:46:2e:4a:
         54:4a:80:f5:dd:92:14:a5:d5:1e:ff:55:63:15:86:79:e3:5e:
         af:e4:82:ca:ae:d9:30:28:b1:1a:47:0a:1d:ff:91:41:15:8b:
         94:9f:c3:00:ec:68:c0:98:f2:cd:d1:57:ae:6b:0a:c7:13:e9:
         c7:de:6c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:17:34 2026 by rpki-client