Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File:                     dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier:          D12iF1cp7hn0sktOVbd/lCe44C1r2gkZvpfTGFPqFlE=
Subject key identifier:   EE:06:FB:68:22:EC:7E:7A:FB:92:8F:72:FE:59:01:75:9E:FE:3F:75
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer:       /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number:          0187
Signing time:             Mon 27 Jul 2026 06:19:29 +0000
Manifest this update:     Mon 27 Jul 2026 06:19:29 +0000
Manifest next update:     Mon 03 Aug 2026 06:19:29 +0000
Files and hashes:         1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: thsL+fKlDEBPP3o2aM1xohSeAmgkE+JJuGue9+P0PBs=)
                          2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: 2Pw8KaLRV6aBD082BqEQ7VHZ0JNyhO7oJeP00MvVoik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
        Validity
            Not Before: Jul 27 06:19:29 2026 GMT
            Not After : Aug  3 06:19:29 2026 GMT
        Subject: CN=6a66f871-c1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:59:37:5d:1e:60:25:29:7a:a7:bf:52:1a:
                    35:e0:ec:d3:d3:d5:ee:62:7e:b1:11:64:62:1b:fb:
                    53:d5:3c:1e:81:f4:d8:1b:1b:a9:dd:7c:a8:29:16:
                    b4:08:f0:3d:db:ea:69:6d:fd:82:79:ab:b6:cf:ef:
                    99:fc:3a:57:06:81:da:5b:3d:4c:da:87:f3:b5:b9:
                    99:57:79:f9:69:98:27:4c:81:0d:25:cc:62:a6:20:
                    3b:c2:93:97:a0:2f:a9:6f:5d:31:72:c6:7b:fb:03:
                    48:0b:57:3a:23:22:a0:27:87:0f:e4:72:a2:95:65:
                    45:2d:29:43:eb:c8:a3:ff:f1:66:d0:59:45:a9:ef:
                    c2:29:63:ad:54:3f:7c:d0:5d:e9:fe:01:53:ac:cf:
                    4e:09:12:6c:a3:eb:93:4c:9f:0b:bb:b3:52:2e:1f:
                    ba:3d:e7:0d:b2:13:84:53:da:a0:2d:e8:eb:ff:68:
                    40:cd:43:02:5b:f5:a1:b8:fd:49:9e:be:67:55:f2:
                    c1:76:6e:29:bf:d4:41:2a:e3:2e:7e:2f:41:96:17:
                    57:1f:b8:6e:fd:7b:9b:76:9b:49:38:0f:06:22:54:
                    a5:02:71:ce:0e:55:49:e9:2d:6d:89:77:6d:33:59:
                    f0:cb:de:1a:bf:16:c0:76:a5:91:88:d7:43:92:25:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:06:FB:68:22:EC:7E:7A:FB:92:8F:72:FE:59:01:75:9E:FE:3F:75
            X509v3 Authority Key Identifier:
                keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:d4:75:90:a1:c5:6a:00:89:c0:9d:ab:4d:72:98:1d:e8:
         c7:81:d0:e0:8a:df:db:8f:4e:a3:2f:c8:29:5d:a9:48:be:4b:
         0b:f2:19:8e:17:58:49:54:7a:af:f2:e7:50:84:40:ce:38:b1:
         4a:39:6a:27:cd:42:03:49:24:52:fb:0a:29:f1:20:e0:f7:2c:
         9b:e8:d0:8b:57:6a:b3:ab:0c:34:0d:2f:8a:c1:c4:bf:7f:46:
         64:75:9a:9b:cb:36:03:bf:33:07:85:20:5e:57:14:c7:bf:1c:
         71:c3:df:52:51:c6:a3:8b:7e:cd:84:e5:40:62:16:4c:88:d2:
         0c:52:e5:be:a3:47:a3:98:98:cc:7b:6d:04:ea:63:dc:86:81:
         26:98:95:fd:82:e4:d2:39:87:c4:48:4f:43:80:1e:06:61:85:
         6f:a7:e7:2d:81:39:42:e4:5a:7e:28:02:09:0e:89:4b:56:a0:
         6d:df:d4:90:b4:63:11:35:8f:e6:84:99:d7:15:d2:5d:dd:ec:
         2e:f1:1f:ea:3b:e3:5b:fd:0a:d5:6a:61:78:f2:7e:49:03:b6:
         64:69:39:0e:e9:a5:54:56:cc:cb:27:90:e6:5f:f8:19:0a:d9:
         79:ea:86:e9:f4:ae:6c:e4:b7:04:6e:a2:55:94:47:01:43:38:
         92:26:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:04:09 2026 by rpki-client