Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
File:                     dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json)
Hash identifier:          wvOUhseQHS/bKn/yGffMdUP4LejFGOlOoaYI4RXY4ss=
Subject key identifier:   C5:E7:29:C0:D8:54:19:10:22:DE:AE:97:25:C4:CF:5C:46:CC:5A:1D
Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC
Certificate issuer:       /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
Manifest number:          0865
Signing time:             Fri 12 Jun 2026 20:48:44 +0000
Manifest this update:     Fri 12 Jun 2026 20:48:43 +0000
Manifest next update:     Fri 19 Jun 2026 20:48:43 +0000
Files and hashes:         1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: 8RnVgAZtXmWLiUznYOY8iqALOQO2h9eC7k3MXj35+b8=)
                          2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 7pu3YPOy/Iyi+5lsIR5w0HcGr9ERc7QOQEXQx+NBL5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl
                          rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
        Validity
            Not Before: Jun 12 20:48:43 2026 GMT
            Not After : Jun 19 20:48:43 2026 GMT
        Subject: CN=6a2c70ac-2da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:5b:be:46:c4:9a:0a:75:21:04:3f:9e:88:
                    32:50:b4:21:16:4c:e0:15:1d:2b:e0:c5:7b:87:f1:
                    03:4a:30:18:8c:d9:57:f8:5a:a9:31:56:d1:5a:62:
                    6a:fd:51:0d:5a:02:98:df:eb:5c:fa:a7:54:40:64:
                    2f:2c:e0:da:9d:a5:26:df:1f:22:18:e3:b5:a7:44:
                    4d:60:78:6d:a7:30:23:0e:cc:7b:59:d8:1e:a4:fb:
                    0f:2f:1c:19:a2:cf:22:90:9d:df:26:5c:18:54:d8:
                    09:45:ac:8c:b8:9b:85:e8:17:60:40:52:d5:69:f4:
                    e9:54:72:ef:f4:9e:21:11:f8:b7:64:d2:2f:9e:dc:
                    19:68:c5:86:94:13:76:62:a4:46:2f:e0:67:48:2c:
                    d8:c0:63:17:4d:33:95:58:4c:f8:c5:0c:8c:14:a6:
                    7a:6c:da:e2:c8:8f:d1:90:31:9c:c3:a4:06:4a:9c:
                    e9:df:67:1d:98:d4:45:62:0f:59:46:35:9a:9e:87:
                    86:45:54:9b:28:e0:73:85:f7:e8:e7:87:44:02:89:
                    6f:5d:6a:7c:f3:1a:f7:e3:ca:a1:37:6b:ef:c7:c7:
                    64:d3:5b:8f:0e:07:22:eb:2a:b3:59:e9:b6:ad:39:
                    df:00:fa:05:7e:30:fc:31:c0:1c:92:90:84:20:4d:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:29:C0:D8:54:19:10:22:DE:AE:97:25:C4:CF:5C:46:CC:5A:1D
            X509v3 Authority Key Identifier:
                keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f8:f5:71:5f:f4:81:32:84:24:c7:d0:f8:3a:91:27:a6:8d:
         57:d1:06:b1:ca:0a:2f:6d:ea:59:39:d7:e5:23:dd:a5:db:57:
         40:9f:6d:69:14:b6:69:e2:38:05:63:7f:95:c8:0d:7f:a7:6b:
         75:e3:31:ae:3f:bf:d1:8c:bc:44:ae:54:d5:aa:32:24:55:ba:
         35:e5:ef:fe:ba:17:18:8b:a9:16:0d:c3:a6:5d:d3:43:42:9e:
         80:e7:ab:77:d0:ef:a4:62:50:36:72:03:e6:6b:b6:5c:40:0f:
         9d:29:f1:3a:17:e9:ab:e9:fe:df:a3:32:82:ac:62:e4:6b:96:
         cb:05:41:9c:e2:ce:b0:5c:5d:06:92:28:ce:e4:b3:a9:1e:4c:
         dd:fd:ce:7f:8f:db:4a:d2:6c:21:69:6a:ef:ce:2f:b4:89:af:
         2a:8f:c6:d6:5a:15:54:99:ea:1c:39:21:de:21:c9:63:75:51:
         b9:c6:fc:23:e5:3b:17:13:45:ab:18:f8:87:30:e5:fb:ee:f0:
         41:24:a5:37:ec:5f:33:ed:a7:d5:be:98:3a:03:4b:b2:19:22:
         4e:18:e5:5b:bf:2c:65:35:a1:07:e0:ba:2b:b1:f9:c1:ac:31:
         8f:7a:4a:c9:e5:5d:5c:1d:30:6f:6c:0e:50:d3:22:98:ab:4e:
         40:b3:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:12:58 2026 by rpki-client