Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
File:                     4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json)
Hash identifier:          YUDhWC4AhuKZoqkcWloQIX3hWtHry2UsfrRMriNLxfo=
Subject key identifier:   C4:08:75:D1:0A:D0:97:D0:18:AB:A0:5B:AE:DA:42:A9:8D:0D:5F:ED
Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Certificate issuer:       /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
Manifest number:          0135
Signing time:             Mon 27 Jul 2026 07:30:09 +0000
Manifest this update:     Mon 27 Jul 2026 07:30:09 +0000
Manifest next update:     Mon 03 Aug 2026 07:30:09 +0000
Files and hashes:         1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: Gm0JSORkrfr3gzxKvQQzxcXu76eQgC2NaVlq+gPHRCE=)
                          2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: UgNLpnpsPwAz2rvVqCqPMBi0JxC9elqJ20s+71NKi0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
                          rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
        Validity
            Not Before: Jul 27 07:30:09 2026 GMT
            Not After : Aug  3 07:30:09 2026 GMT
        Subject: CN=6a670901-893d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:76:29:be:94:85:69:10:76:d7:6f:12:44:
                    cf:16:34:c4:76:5b:d0:33:e6:ac:10:f8:66:4a:48:
                    58:01:95:b2:64:f5:6a:58:59:cb:95:c9:87:95:1c:
                    af:15:de:d0:c9:ee:6e:8d:68:e3:86:d1:57:62:10:
                    ca:bf:5d:6d:3e:a9:aa:70:0f:98:9d:a2:09:78:13:
                    ab:1e:10:85:1c:e6:f0:12:ac:2a:2a:ef:7b:97:37:
                    e4:ea:7b:e5:a6:0a:35:00:95:32:97:3b:22:a8:0e:
                    f1:9c:db:55:40:9c:ce:f7:8a:5e:fc:54:eb:11:86:
                    90:2c:74:b8:b6:ae:92:99:09:fb:49:8e:68:8f:7c:
                    d9:15:4c:7f:82:9d:5c:4a:c0:76:aa:28:c2:b6:0f:
                    74:24:11:e9:cb:9b:ef:b9:99:4f:d4:4a:56:57:42:
                    2b:b4:2c:c6:f3:6a:5d:92:5a:86:bb:a2:2d:f7:57:
                    11:ac:48:05:5e:ac:ad:40:42:13:48:c6:60:83:55:
                    6d:e0:a4:bd:bb:8a:0e:81:54:68:24:2e:69:d1:1d:
                    53:64:bb:86:b2:c7:e7:dc:6f:9e:83:5e:09:df:c0:
                    cf:87:16:22:1f:d4:f6:61:65:70:e5:ea:ce:5c:43:
                    36:dd:d6:e2:67:10:78:b9:4e:24:89:f2:ba:5a:6a:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:75:D1:0A:D0:97:D0:18:AB:A0:5B:AE:DA:42:A9:8D:0D:5F:ED
            X509v3 Authority Key Identifier:
                keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:06:88:3f:bc:ea:3a:8e:91:22:c9:9e:8b:6b:b3:94:a2:
         e6:e4:89:a5:89:cf:0c:34:77:4e:a1:af:54:1d:21:6a:ea:9d:
         be:33:db:16:ea:98:58:89:a3:62:5b:fb:98:62:5a:d2:cd:d8:
         f3:54:bd:41:f9:fc:7b:5e:b4:5f:73:55:0e:84:d9:ef:43:42:
         1e:de:0a:62:e1:f9:37:87:d7:d7:3d:10:c9:17:da:5e:2a:4d:
         f7:38:25:75:ef:a7:a3:19:62:d2:3e:5c:f0:09:a5:da:b2:4e:
         2f:e3:de:02:73:da:6b:dc:28:21:9f:cf:cb:1e:bd:ac:3b:80:
         5f:9a:52:8f:06:69:76:21:f4:27:f7:99:93:a1:36:04:4f:0c:
         74:b0:9e:99:01:22:7e:0e:d5:7f:d3:16:08:ff:ae:56:89:35:
         61:de:0b:17:a7:51:d5:6f:1c:b4:18:bf:67:85:a1:4f:26:96:
         cd:89:5c:ea:9a:ac:61:eb:2f:87:9e:5b:91:90:46:0f:37:f7:
         71:13:2f:9c:d1:a7:db:4a:e4:f8:4e:4b:a0:d3:c3:df:83:50:
         d0:6a:7b:8d:b7:da:a3:32:ea:57:28:8e:b9:95:13:43:5b:7f:
         da:ac:e4:01:8c:57:53:a6:77:6e:ec:10:c2:2c:e5:9d:dd:0f:
         de:d3:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:31 2026 by rpki-client