Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File:                     _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier:          m0134bDFqsQW42Lx+PvDGj45hK8QEYR7+yGdQwfhEoY=
Subject key identifier:   F1:5C:B4:8A:8F:79:A0:90:3B:BE:2E:62:DE:89:DD:3B:09:53:5A:43
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer:       /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial:       0451
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number:          043C
Signing time:             Wed 29 Jul 2026 01:00:08 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:07 +0000
Manifest next update:     Wed 05 Aug 2026 01:00:07 +0000
Files and hashes:         1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: QmqDZ/Qn40gdNNaNa8LN1tJiwpqWrO4/NsqKeSb9pdc=)
                          2: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: IqecsrYsQpIp/5eCM+4hpeu8TBUj8KVmWEPSTo60jis=)
                          3: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: kkADNHMGho1cJcxgujF7FqwJofNaLhAL0T7zwMKpQTE=)
                          4: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: gYFwC5k2adNiGUC8mTnrPd2F0ktvtrVBLWYeACoVYqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105 (0x451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
        Validity
            Not Before: Jul 29 01:00:07 2026 GMT
            Not After : Aug  5 01:00:07 2026 GMT
        Subject: CN=6a695098-cdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:7a:6a:55:64:0a:af:03:19:38:91:7a:08:
                    87:5e:a2:9e:57:4e:67:73:c3:ca:4f:85:d6:b2:30:
                    ee:2f:e0:aa:97:62:4d:6a:67:02:df:9a:06:0f:34:
                    2d:42:65:fe:e7:d8:d4:cf:67:da:fd:12:d9:ee:50:
                    04:87:78:5a:78:bb:7c:c2:8a:2c:39:4b:ef:e5:16:
                    18:3b:01:db:8b:ea:1c:c7:0c:66:0c:a4:36:62:3b:
                    ca:4a:01:06:77:10:21:91:56:95:12:d5:16:8b:ad:
                    07:cb:7a:65:a8:46:96:ea:3c:92:82:45:f2:9a:bb:
                    25:24:1d:58:09:5e:09:83:82:0e:bd:9d:08:5f:73:
                    b0:2b:db:4d:ba:b5:8c:9e:0f:a6:3e:b6:d8:a2:8a:
                    94:57:55:82:8c:19:db:be:90:03:78:0d:48:3f:c0:
                    e6:4a:ad:36:21:8a:58:98:7d:bb:45:f9:54:cc:ca:
                    f7:67:af:1f:7f:97:56:60:d2:a5:59:00:0e:4c:9a:
                    c4:f2:54:9e:db:5c:6c:80:ec:dc:c8:ce:2b:fd:09:
                    93:65:08:04:36:22:cc:4e:bf:62:2e:be:53:ff:26:
                    93:c3:42:59:65:55:eb:2f:7e:bf:9a:0f:f9:4e:25:
                    e7:8f:22:57:76:c5:df:ae:29:ae:1c:90:85:ab:a1:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:B4:8A:8F:79:A0:90:3B:BE:2E:62:DE:89:DD:3B:09:53:5A:43
            X509v3 Authority Key Identifier:
                keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:01:d5:96:80:0b:ca:09:95:26:51:3d:6f:18:23:5e:b9:47:
         04:c1:da:af:98:b0:a1:e7:5f:49:6c:e3:26:30:80:e9:6c:35:
         fc:a0:1d:a6:fb:16:15:73:c7:15:c1:39:52:84:b8:78:94:ac:
         d2:e5:83:48:99:3e:56:82:42:0c:aa:cf:14:97:37:f3:df:ef:
         ee:7f:85:a5:7e:a6:84:ad:18:58:5c:80:d5:00:fa:d1:01:95:
         b8:63:68:f2:e7:36:e7:86:f8:df:00:2d:18:8f:37:52:f2:91:
         e7:f7:61:b4:4b:aa:d4:07:ac:0b:87:bf:0c:15:41:eb:e6:a3:
         07:d3:c8:b3:93:ba:e6:b0:3e:8d:80:f0:eb:9a:76:4c:f2:42:
         a7:c9:34:58:fe:2d:c8:e4:d4:9b:e4:18:16:6b:2f:81:25:79:
         d2:4c:d8:f9:21:42:a2:f9:28:e9:05:99:fb:a8:81:a8:25:3c:
         d2:46:b4:ab:d1:14:9f:4a:7f:e1:0a:92:6b:92:6f:7a:39:76:
         e1:0c:77:ae:b3:0c:76:67:88:2a:9d:43:a5:70:7f:bc:be:08:
         c0:f0:2d:c9:34:48:14:9e:25:96:d8:be:b4:b8:05:2d:d3:20:
         1d:e9:37:82:de:6d:55:67:3e:86:3e:a9:67:b8:f2:38:20:59:
         ce:6a:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:44 2026 by rpki-client