Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
File:                     v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json)
Hash identifier:          gLs5/iger+JsJxgE9aWioRr/cUqAqAzCDf7wZnnCTfA=
Subject key identifier:   E4:2A:B5:17:DE:03:FD:56:F3:55:86:0B:5A:50:33:94:0F:4D:D7:E9
Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
Certificate issuer:       /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
Manifest number:          DF
Signing time:             Mon 27 Jul 2026 08:40:55 +0000
Manifest this update:     Mon 27 Jul 2026 08:40:55 +0000
Manifest next update:     Mon 03 Aug 2026 08:40:55 +0000
Files and hashes:         1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: h6DyR2s0SecTqRgjvJAR15hK3YWQ7ENs+t0PFzhlWHI=)
                          2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: Z9wsNscGW8jTuOrPcKnc3KiOXLu3fKLaOWy4uh1nNqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
        Validity
            Not Before: Jul 27 08:40:55 2026 GMT
            Not After : Aug  3 08:40:55 2026 GMT
        Subject: CN=6a671997-fe1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:b7:2b:67:da:ee:ef:1f:a0:13:a4:6b:e4:
                    7c:5d:b4:c3:3b:9b:02:5e:ac:4f:4a:f3:ec:13:b6:
                    7d:73:d8:24:dc:d0:da:56:76:e3:ac:fd:ec:10:37:
                    ca:de:06:eb:da:7e:88:cd:8c:a6:fc:36:9c:b8:c6:
                    ba:a7:65:7e:f9:c2:6a:4e:07:70:bd:9b:ad:7c:96:
                    13:c3:23:5f:b2:27:b3:c6:85:dc:1b:7f:90:62:22:
                    15:2a:02:03:a6:c4:03:a9:7c:b9:73:ab:c1:a7:92:
                    82:fa:aa:84:e8:1c:bd:b6:52:82:a3:79:82:a7:79:
                    d6:05:25:d3:c9:55:7c:26:74:7d:dd:8c:f2:09:fa:
                    6b:46:9d:ba:b6:47:fb:d8:34:22:81:ae:6a:0e:36:
                    4e:db:c0:6f:1d:65:75:cd:f9:36:df:8b:d4:d3:f3:
                    19:a5:86:22:88:c1:fb:f5:09:ee:c5:89:d4:5e:d1:
                    47:da:24:7f:83:b8:9e:98:36:cb:d7:e9:1b:00:67:
                    ca:c7:f9:de:d2:af:ef:2d:fd:4f:cb:fd:20:fa:f9:
                    70:37:2e:fe:1d:8f:79:e0:ac:f8:f5:7f:7a:84:37:
                    c3:80:d0:d2:95:1b:2d:ab:01:03:3a:7f:e9:87:05:
                    11:00:63:d9:0c:4c:e4:ad:40:ea:0b:a3:74:f5:7b:
                    33:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2A:B5:17:DE:03:FD:56:F3:55:86:0B:5A:50:33:94:0F:4D:D7:E9
            X509v3 Authority Key Identifier:
                keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:dc:3c:08:a7:fc:d2:61:41:e4:bd:22:3c:49:ac:f4:38:
         95:8e:0c:54:20:63:5d:d3:21:e9:5d:e3:4a:7d:6d:13:3f:22:
         1a:a7:78:b7:34:df:55:0e:9f:dc:0d:59:66:e4:f2:3c:17:dd:
         45:6c:8b:59:2f:b6:ea:14:dc:32:4b:0f:e0:c0:9d:71:12:a3:
         56:9a:fa:47:7a:cd:77:bb:16:86:bf:97:7f:f8:d7:21:a0:4b:
         82:b2:12:5d:6a:f1:2c:da:28:d1:a5:80:fe:91:fe:37:d2:a3:
         6b:52:18:46:8f:61:9a:ba:72:33:9e:c0:b5:6e:07:c0:4c:a8:
         06:8c:14:50:3f:bb:5f:7b:54:d7:f8:35:ed:61:13:e3:77:e2:
         ed:b7:c2:c8:92:af:b1:74:0f:ab:95:dd:b1:b7:3b:6f:fb:ca:
         41:d1:c7:84:ac:f7:f2:0f:d7:83:bf:24:db:df:1d:e1:d3:ff:
         7b:dd:fc:30:29:27:69:57:8a:35:31:7c:e6:05:c1:9a:d2:49:
         d8:34:07:dd:37:11:c8:c1:73:0f:74:4a:c2:ac:6b:20:a0:a8:
         ce:b7:3d:60:62:9f:1c:24:41:68:5a:8c:1d:26:69:a6:81:21:
         87:9b:ae:99:7e:f6:43:dc:82:b4:81:77:90:83:53:b5:72:c3:
         3c:fb:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:58 2026 by rpki-client