Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
File:                     MHhieRqQd5CGxXf5OTGDidaLcag.mft (raw, json)
Hash identifier:          wvaFOIX/Ii2OUb+ouzZIY7LmXQ2Fp3OEQYw2y3J6K0U=
Subject key identifier:   43:77:6D:51:EF:48:EB:C4:8D:AC:53:C4:90:FF:66:49:AD:75:78:88
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Certificate issuer:       /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
Manifest number:          15
Signing time:             Mon 27 Jul 2026 11:25:16 +0000
Manifest this update:     Mon 27 Jul 2026 11:25:15 +0000
Manifest next update:     Mon 03 Aug 2026 11:25:15 +0000
Files and hashes:         1: MHhieRqQd5CGxXf5OTGDidaLcag.crl (hash: ql+KRzUprbcMzXCc+IOckXn6B5dsglbT6TKmAPuuwd8=)
                          2: 4F16B51A6AB811F18EBFB70E6347A888.roa (hash: g04zLld4UYO3F+kCZ6KaWBxSqXKNmClRuSZYSKekq78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
                          rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
        Validity
            Not Before: Jul 27 11:25:15 2026 GMT
            Not After : Aug  3 11:25:15 2026 GMT
        Subject: CN=6a67401b-d1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:77:23:75:09:38:f2:d9:0c:03:10:6f:c0:
                    43:0e:be:ab:20:13:7b:0b:d6:f3:e5:68:14:4d:e4:
                    1d:f3:ff:63:fa:d0:05:15:76:02:85:a3:69:98:af:
                    4d:a5:93:c7:6c:6d:5a:fc:1d:94:ed:31:36:0f:3c:
                    33:dd:0e:c1:d5:22:c3:2c:05:bf:ea:a7:c4:52:a1:
                    f3:90:d1:4f:ec:78:ed:1a:f9:61:55:07:4b:e0:2b:
                    08:81:bc:58:51:3e:3d:40:b2:c6:c1:0d:27:6c:fb:
                    27:f2:9e:98:46:51:63:22:20:dd:ec:73:1b:11:05:
                    32:23:1b:b0:47:d3:85:44:09:56:59:c5:10:b5:ea:
                    30:66:41:87:61:27:c2:dc:ba:f2:68:fb:a0:2b:79:
                    99:f5:d6:a9:63:72:e8:15:42:ea:b1:6f:8f:32:0e:
                    71:86:45:13:25:58:a8:0b:3f:73:5f:82:42:72:92:
                    3c:29:09:f7:5c:13:d6:bb:36:21:56:41:a2:db:ef:
                    59:d1:50:48:9e:7e:6b:8f:7e:f7:26:7d:aa:64:21:
                    3f:73:38:bd:f0:57:25:7a:67:64:84:fb:57:a2:4e:
                    d6:61:33:6d:9e:4d:e4:fe:05:ac:45:09:b4:0e:b1:
                    f0:33:ee:eb:ea:83:08:3d:80:84:de:b5:a5:3e:9b:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:77:6D:51:EF:48:EB:C4:8D:AC:53:C4:90:FF:66:49:AD:75:78:88
            X509v3 Authority Key Identifier:
                keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:bc:1b:73:86:8e:0b:88:3a:8d:af:b8:d0:92:cf:13:3c:
         b0:7c:a6:ea:dc:27:80:4d:bd:1b:1b:6d:db:17:dc:04:c7:9c:
         3a:33:89:bf:a6:fa:a4:b7:5a:eb:a4:eb:55:f0:1a:04:b2:13:
         e5:f7:f1:58:a8:6d:28:28:0d:7c:84:7f:29:8c:7c:ce:95:1e:
         cf:31:1e:19:89:7e:67:25:8b:aa:fa:dd:31:f3:16:5d:f3:c3:
         4f:f0:f9:25:c6:77:08:5f:44:94:c6:28:c3:55:62:f2:89:73:
         27:73:ea:9b:be:aa:6c:26:43:a2:50:82:e3:2b:9a:47:8b:45:
         1c:7d:1c:82:14:f7:36:52:63:5b:48:2a:e1:fc:a9:ce:f8:51:
         8a:a5:2f:d0:1c:f5:1b:1f:ac:1c:90:43:80:2f:98:1a:c7:84:
         07:f3:c5:e7:ee:fa:0f:19:a5:38:40:b2:4b:06:f9:63:68:1f:
         d0:45:d5:b3:30:4b:1c:a7:4d:6b:47:51:d6:34:3c:7f:cb:2f:
         dc:b7:1e:6d:97:d8:09:81:75:a9:73:5b:d8:f2:1d:a2:68:9a:
         25:87:2c:9e:28:e5:14:36:f1:e1:fd:b8:f1:81:66:4e:76:42:
         df:e2:d6:ec:a9:c4:f4:31:a3:5a:bb:a4:8a:34:fd:9f:b3:1c:
         e5:65:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:29 2026 by rpki-client