Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File:                     tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier:          PvRkJEAWPXF5hyicQ8c5Y0fJ+27nliwp05dd6ue6pGA=
Subject key identifier:   F4:98:58:37:5F:62:7C:97:4D:A0:4C:88:9C:54:99:EB:68:70:B7:DF
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number:          D1
Signing time:             Mon 27 Jul 2026 09:36:26 +0000
Manifest this update:     Mon 27 Jul 2026 09:36:26 +0000
Manifest next update:     Mon 03 Aug 2026 09:36:26 +0000
Files and hashes:         1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: 9wahDnxBEZWLiUngH4FcE+c1HPD6YyGCWV4yLrILeKU=)
                          2: 0D0B98CA4E7A11F19ABC63EAAE833773.roa (hash: MYyEucLCCxrI3FOhoLhSAqiBaqtBwcoKacKk+luCAfA=)
                          3: 7E20B24444FB11F1B2B16DC3CD833773.roa (hash: Z/aKf77qoC/D2esHAmrCa6cvuliS7eMoobwi4UM9D1o=)
                          4: 0E6E84F47A6011F1976E05638BA30FBC.roa (hash: HtUuAkol0mHQrD42lO6MoPJ+Ejb03iZZDhqfCwpcfTY=)
                          5: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: 4HZ72AqLXMi7Oo7fFl4c7MxtfYI6Hr7/6V24G0+ZxdI=)
                          6: DF3E21307BFE11F198B5A8F78EA30FBC.roa (hash: NT30pur8xhY9PcKqmg6IwjPQmddy3T3G46Qh5vdQmt8=)
                          7: 8FFB3BA07E4A11F1907D372082A30FBC.roa (hash: 2pEoKCofwg8TjGaQHu2CywBBegMX4ui6vfX3Ybywow4=)
                          8: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: KJ//K7GtgLc3Sie2BItNl434WLtJNinu64G7n9RU6IE=)
                          9: 4E51574483D011F183EEA27F86A30FBC.roa (hash: 21dNdC/KYiVPXa1jlkcf8bMU3p3AIHj9idTqBDJTSzU=)
                          10: A7349B8A499E11F19CE2905A97833773.roa (hash: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=)
                          11: A2517D166EAD11F18743D71861A30FBC.roa (hash: EXYW07HU+PDuF2Sjxw7qGLvDdb4Ds1WxfwmESxYCYx4=)
                          12: ABCCE66C445C11F1AD9768EE92833773.roa (hash: 9iBZLQ9uktWZ65mu8nlRlZWV5ecR8Ndx/Ji4IWLuSGw=)
                          13: 5B9CF7B8541011F193006E3293833773.roa (hash: UEPdDUTRui+ayW3AbcnrWggT880Cdd6becbTRiUrqEI=)
                          14: B83FA29680DD11F1836EF1645EA30FBC.roa (hash: w2ElC61/vAQm+7bnyJttAYhounZrV79k5+yvdBXVa+s=)
                          15: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
                          16: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
                          17: CFF23F5457FA11F1947AF89298833773.roa (hash: 70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=)
                          18: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=)
                          19: 300E55D2645B11F19DFE990E7247A888.roa (hash: B8rZI43b2LUCXU8rE+xRAPdthQYs+K3MurmJh+dDXVg=)
                          20: 1A44C40648FF11F1AE16E45D93833773.roa (hash: q7YWA5SPxz9lm686m7SUsJ/DXFlxCYiGkRbWYzw7qBs=)
                          21: 23967BF24A7711F1A7BED77BA6833773.roa (hash: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=)
                          22: D2D5E3A2429111F1A9B50A47B2833773.roa (hash: JNJnwJdlLDhaD1G/+iNzHqjRU67B9dzGcdSz2okho74=)
                          23: FB82DC8A6A1C11F1881DA3A97247A888.roa (hash: FJDR9Q0fg7oHU187h+yL9+qMxbc318Uq6tNh6JulIUM=)
                          24: 0F05CF767A6011F1976E05638BA30FBC.roa (hash: 7B1bqD+6h9jyiiQRYsB8Q16/B9nLv79GenM8klf3G4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul 27 09:36:26 2026 GMT
            Not After : Aug  3 09:36:26 2026 GMT
        Subject: CN=6a67269a-1867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:d3:69:8f:5e:79:4a:89:b6:10:f4:ab:88:
                    b2:d3:db:a3:f3:51:3b:fd:1c:50:61:3b:2f:d8:e9:
                    5e:c9:8b:b7:95:1d:87:62:35:66:23:7b:d8:00:1d:
                    6c:e8:b3:cf:cf:35:11:d9:dc:a6:bf:2f:cd:7c:cb:
                    5e:c5:23:54:6b:38:3b:6b:9c:e3:bf:66:94:f7:5e:
                    94:fe:7f:18:98:98:30:33:c2:d0:ff:75:25:a3:e9:
                    06:b5:ef:fd:78:fb:dc:56:8f:42:65:c4:27:a1:0b:
                    7d:4c:c0:b7:51:20:6e:4d:09:0c:93:e5:3b:aa:22:
                    1f:0f:9f:45:bd:fe:f9:de:ef:65:fe:c1:c1:0f:ce:
                    fc:49:06:4a:f4:ff:27:d4:51:dd:aa:96:54:1e:6a:
                    5c:93:d4:e1:c6:31:e7:fc:a4:6c:54:10:e1:eb:4b:
                    22:c3:a2:a4:5d:41:b0:ae:6b:6e:eb:75:a2:bd:7e:
                    da:14:f4:e8:ac:d9:2b:81:70:a7:77:ad:d9:6f:c1:
                    7e:71:77:e8:82:13:3c:97:71:e7:5f:fd:b4:31:52:
                    d4:a5:0c:7e:1c:7a:5c:24:f5:aa:9e:22:c4:55:b1:
                    69:79:73:b7:02:7c:ad:38:9f:31:ec:42:5e:79:06:
                    4e:a3:34:6b:75:fa:b8:83:5d:33:bd:8e:f0:97:7a:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:98:58:37:5F:62:7C:97:4D:A0:4C:88:9C:54:99:EB:68:70:B7:DF
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:12:5c:e8:6e:dd:53:f9:57:87:0b:df:31:90:ff:ce:7f:b1:
         c0:65:5d:10:b2:86:5f:41:e3:d3:ea:29:5f:68:11:be:64:d1:
         43:e3:49:ce:db:d3:25:66:ff:5e:ab:17:cb:ca:85:14:f9:37:
         d1:df:40:ef:67:3e:b4:96:b1:27:f7:71:2a:90:2e:96:d0:57:
         f2:f8:5c:22:05:4a:e0:0d:61:ba:3b:44:eb:37:96:b7:95:e8:
         2f:91:8f:59:03:5d:cc:5d:c1:40:a1:5c:70:e8:a7:48:e7:b4:
         e3:08:09:54:3a:31:74:2b:2b:75:ef:c1:fd:cd:f7:a9:f6:5b:
         88:00:08:1b:ea:1d:ec:bb:8d:46:7f:4d:f5:8d:8d:4b:0b:c0:
         53:44:42:e7:e8:bf:78:7d:69:88:79:bb:e7:70:04:7f:37:52:
         53:32:6e:7d:f0:cb:4e:7d:97:4b:6e:35:79:be:c6:c5:3f:3a:
         1d:51:2f:da:7f:59:70:b6:14:a6:e1:b0:16:dc:44:4b:10:51:
         f6:97:c1:fa:a3:fc:da:e6:89:0d:b8:b2:fd:36:1d:60:48:3f:
         4a:a2:a0:6c:30:f7:c0:cf:18:a3:23:af:ef:1a:1b:33:be:b4:
         96:86:e6:7c:0d:da:88:37:8e:f8:9e:b0:7c:62:96:b8:ac:02:
         d8:e3:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:02 2026 by rpki-client