Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
File:                     4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json)
Hash identifier:          b7OQ6dfn/U7IDRJLP5FTRF2r46n9xqhEUmSsYxwJ+JA=
Subject key identifier:   E0:04:C2:6B:01:B5:F8:FA:71:2A:C8:40:10:A6:DF:28:1D:CC:1B:91
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       02C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
Manifest number:          02B7
Signing time:             Mon 27 Jul 2026 02:50:47 +0000
Manifest this update:     Mon 27 Jul 2026 02:50:47 +0000
Manifest next update:     Mon 03 Aug 2026 02:50:47 +0000
Files and hashes:         1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: YgJKQ19fkjGfUAGSh6RGQaEP654qwnXWVAWJ47KDImE=)
                          2: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=)
                          3: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
        Validity
            Not Before: Jul 27 02:50:47 2026 GMT
            Not After : Aug  3 02:50:47 2026 GMT
        Subject: CN=6a66c787-777d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:83:95:07:98:be:c4:08:10:93:53:a7:dd:
                    99:92:35:46:e0:97:56:13:a2:53:0c:3e:d5:e0:43:
                    68:c9:25:00:d6:79:5a:aa:43:52:32:15:8b:48:51:
                    68:f6:94:1a:f7:b9:3d:27:48:3f:0e:36:fc:5c:bd:
                    b2:68:d4:06:31:99:1b:d7:ae:2c:26:de:16:81:1a:
                    96:4f:bd:df:5e:b6:f0:e0:63:ce:c8:c3:b7:19:c4:
                    60:a5:96:6d:52:81:53:5f:c4:8b:c7:e4:6a:7d:d5:
                    27:ab:9b:b3:4e:68:dc:cf:b9:fc:2f:d0:76:ee:30:
                    a7:f1:33:90:89:9b:82:13:59:83:78:83:9e:85:22:
                    10:4f:94:ef:3d:9b:cc:af:b9:c9:89:5d:fb:f4:f8:
                    7b:16:b6:2b:9b:4c:4d:18:c8:12:ad:99:1d:97:08:
                    75:80:60:72:8d:e8:26:2b:74:ce:15:be:85:d0:6d:
                    2e:ef:e3:39:12:60:48:9d:84:cd:09:12:42:f7:db:
                    9f:c5:7c:b5:32:41:70:ef:d5:67:53:59:e7:f6:d7:
                    12:1b:e4:64:06:75:ac:a1:3e:64:7d:d8:c6:0e:e7:
                    0c:24:32:fc:97:19:1e:11:82:ff:ca:6b:35:3b:ee:
                    8c:4f:51:fa:ad:11:7b:ba:3d:0d:86:26:36:60:73:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:04:C2:6B:01:B5:F8:FA:71:2A:C8:40:10:A6:DF:28:1D:CC:1B:91
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:80:7f:6b:6b:fe:29:7c:53:bd:ba:df:b3:3f:d3:a6:24:ea:
         4a:d0:e0:81:eb:ab:fc:5a:61:fb:a6:09:9b:e5:40:05:37:b7:
         50:b3:2d:82:49:f4:2b:47:6c:ac:0f:12:6e:5f:10:96:27:b9:
         8c:39:8f:35:49:8e:da:07:b4:0c:fc:1a:ac:8c:a0:ce:ad:23:
         de:02:c5:f8:3f:0e:e5:bc:5e:73:28:29:44:41:c5:2b:82:61:
         ff:3d:10:90:88:c8:28:91:1a:8c:a9:e4:27:b2:67:1e:11:81:
         e5:ab:2e:99:9d:17:bf:2d:50:e5:4a:08:b4:9e:6f:1a:97:e4:
         61:f3:80:58:b9:3b:6a:13:35:f4:9b:95:71:ad:98:c7:8a:98:
         29:82:9a:7f:13:48:90:2e:2a:5a:ab:1c:0f:7e:0a:27:c6:42:
         c5:0a:ba:01:68:61:61:90:65:0c:af:e4:7c:77:83:55:05:b3:
         30:e3:e4:1b:5d:b7:e3:5b:b4:0b:45:08:e4:c1:27:ae:79:2d:
         fb:ce:b6:01:74:a0:df:2d:24:ce:51:8b:6c:42:91:9a:f2:96:
         64:38:65:5d:87:51:c3:0a:6d:74:20:fc:01:ba:ed:db:42:0a:
         49:b9:0c:44:a3:c5:b4:38:59:26:21:c0:33:47:99:24:59:ad:
         09:d0:1a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:27 2026 by rpki-client