Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
File:                     vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json)
Hash identifier:          QCrCYdtv4vLk8fztysrkyDGkTWXYml6pqiPyJIODEEs=
Subject key identifier:   00:58:AE:41:6E:51:E4:0D:AC:9E:1E:D4:28:93:A3:F8:48:50:C8:7A
Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Certificate issuer:       /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
Manifest number:          0113
Signing time:             Mon 27 Jul 2026 08:06:42 +0000
Manifest this update:     Mon 27 Jul 2026 08:06:41 +0000
Manifest next update:     Mon 03 Aug 2026 08:06:41 +0000
Files and hashes:         1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: s0d4ViPOqp2uKpCG4REIRdgFhZZDjJa1DfGcR9KxhuA=)
                          2: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: 6s9v+4to3xQAtqSl3C8OB5mvof4ZuN1zgnPAVV1Aeng=)
                          3: 466C47A676C311F18DD29C6A75A30FBC.roa (hash: IbQFMv8dtqRHqxsshZI7Pyeh8+hPBY+F1x7GgYmvaew=)
                          4: 60D8B07432A911F184E1B2E290833773.roa (hash: 9+QMQ5N2mwoOHhBeakPfY1vKeJB8FpkvRz9KSm8m4ZE=)
                          5: 6161789632A911F184E1B2E290833773.roa (hash: vyUxUBa+7OTstXK/dnpMHKdTqta9na00ToStR3iz0G0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
        Validity
            Not Before: Jul 27 08:06:41 2026 GMT
            Not After : Aug  3 08:06:41 2026 GMT
        Subject: CN=6a671192-1e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:48:d1:16:16:fa:e9:98:ad:a8:aa:bc:b9:
                    8d:3f:2d:ea:39:94:00:99:d2:08:e4:35:45:1c:13:
                    50:70:38:24:78:5a:95:dc:14:7d:fa:fe:99:a6:f5:
                    39:31:22:58:ff:a8:e6:eb:8a:70:36:64:0d:e9:6c:
                    df:0c:87:d5:75:21:8a:ee:8c:af:20:09:4a:31:64:
                    81:9c:17:da:4a:91:56:82:8c:7a:7e:cd:a8:ed:6a:
                    93:94:a8:1c:d0:f1:24:bb:01:dd:16:ad:6e:54:fd:
                    88:9c:48:60:ad:75:a4:a3:c4:a0:f7:08:a6:39:d4:
                    15:b1:80:62:ef:3a:49:36:29:a7:b9:65:44:36:ed:
                    38:20:d8:f4:5d:5a:ad:18:65:7e:69:51:e1:bc:f3:
                    20:66:66:62:b5:50:f8:a4:09:b0:df:0e:81:fc:15:
                    93:3a:de:23:47:a4:f3:77:d6:2c:d3:e8:e5:00:9c:
                    bb:70:8e:8c:30:be:72:28:7a:db:9f:73:c7:53:e6:
                    5c:79:b2:df:0b:a2:da:4a:59:34:88:bd:73:21:ed:
                    60:db:af:8c:7c:30:2f:9a:1b:20:d7:48:45:de:55:
                    66:08:f2:cc:31:41:0f:bd:4c:01:4d:c6:59:d4:30:
                    aa:29:5d:d6:48:25:1e:63:09:a6:fd:48:9b:dc:f7:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:58:AE:41:6E:51:E4:0D:AC:9E:1E:D4:28:93:A3:F8:48:50:C8:7A
            X509v3 Authority Key Identifier:
                keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:09:38:db:91:fb:9f:4c:97:a1:ad:71:5c:f7:6f:03:60:e3:
         29:ee:65:42:7d:fb:da:d2:bb:99:a4:06:84:59:be:4d:c9:ad:
         91:50:f2:6d:ac:ea:08:7e:db:a1:81:b4:5e:2c:ee:5b:a1:ff:
         9a:a5:df:be:47:46:ac:2c:d8:c1:b9:6b:53:af:de:96:b9:65:
         d6:21:82:64:4a:4b:83:fc:21:bb:46:2a:01:71:92:66:27:b1:
         9e:4d:98:d4:6c:44:79:8d:f6:14:31:0a:10:29:3d:42:2b:40:
         4f:5e:d2:c8:e6:99:c3:45:88:db:bd:ee:97:74:a1:bf:d0:2f:
         56:3f:24:90:94:4d:60:ad:c5:9c:dd:6c:74:b7:c8:d5:8e:8d:
         74:3d:4e:e2:97:fe:e6:1f:bd:ee:ad:eb:c2:1b:06:3c:4a:35:
         d5:27:67:ab:e8:73:b3:03:8f:ab:dc:8c:9f:93:25:34:ec:8c:
         fc:7f:8e:ae:04:a9:29:da:19:ec:ff:8e:5b:6d:31:4a:64:bf:
         15:c3:a4:fc:f0:74:ed:20:b3:95:13:b6:c3:a8:6e:5f:5d:fe:
         34:6f:a2:9a:6a:61:94:9e:2f:4c:d6:92:38:b2:4a:cb:34:af:
         d1:2f:10:6b:70:bb:19:68:30:e1:9d:17:e6:d6:25:91:74:10:
         d4:78:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:45:18 2026 by rpki-client