Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
File:                     vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json)
Hash identifier:          7zNISCPYs6dOCA4vQn4GMBBZdUxfhSFxHg2mNhY9OGw=
Subject key identifier:   26:B1:45:B9:03:6A:3C:AC:9D:6B:88:33:7C:A0:20:2C:52:C0:BE:C2
Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Certificate issuer:       /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
Manifest number:          010B
Signing time:             Sat 11 Jul 2026 07:01:47 +0000
Manifest this update:     Sat 11 Jul 2026 07:01:47 +0000
Manifest next update:     Sat 18 Jul 2026 07:01:47 +0000
Files and hashes:         1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: 7pSUgwbbQz+UOK5fV5luxXpKRqcvNmPApbHki+dMagA=)
                          2: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: 6s9v+4to3xQAtqSl3C8OB5mvof4ZuN1zgnPAVV1Aeng=)
                          3: 60D8B07432A911F184E1B2E290833773.roa (hash: 9+QMQ5N2mwoOHhBeakPfY1vKeJB8FpkvRz9KSm8m4ZE=)
                          4: 6161789632A911F184E1B2E290833773.roa (hash: vyUxUBa+7OTstXK/dnpMHKdTqta9na00ToStR3iz0G0=)
                          5: 466C47A676C311F18DD29C6A75A30FBC.roa (hash: IbQFMv8dtqRHqxsshZI7Pyeh8+hPBY+F1x7GgYmvaew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 07:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
        Validity
            Not Before: Jul 11 07:01:47 2026 GMT
            Not After : Jul 18 07:01:47 2026 GMT
        Subject: CN=6a51ea5b-b667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:1e:49:58:a9:e1:ec:9c:72:e1:20:ed:76:
                    06:d9:c8:1e:12:d2:c4:83:cd:a1:58:6d:31:e6:db:
                    84:7d:b8:d0:7b:84:85:12:85:18:c1:a1:47:b3:cb:
                    71:90:bb:80:a9:57:88:0c:7d:c8:8a:a6:e7:2f:fa:
                    91:9f:b1:98:7c:9b:bf:ae:29:d5:42:5e:95:62:f4:
                    66:4f:d6:29:62:d0:17:6d:1c:22:7d:d0:52:69:a6:
                    2c:7d:b7:f2:e5:82:aa:98:8f:f2:c9:1b:bb:5d:51:
                    72:2c:ff:4d:7d:73:5f:ae:e7:e1:92:19:79:23:38:
                    bd:11:33:09:55:d8:8f:5e:1b:91:09:30:ef:51:69:
                    47:7a:76:e7:b2:4b:92:0b:ee:6b:4b:07:a3:ab:aa:
                    8c:01:8e:53:f7:ee:15:49:62:b8:20:80:0d:0a:bf:
                    a4:bc:9e:7c:35:be:4e:73:0f:ea:69:d9:79:74:79:
                    aa:a0:60:f4:d4:e9:60:42:ee:79:be:33:ba:de:ad:
                    e1:c5:f1:66:0e:ee:95:03:a5:57:b9:c6:3f:2c:c8:
                    f8:81:6d:85:01:db:12:6e:7c:a1:93:94:1c:c7:a5:
                    55:97:44:a3:e8:70:fe:12:0c:50:2b:f2:a9:7d:7f:
                    64:4a:78:27:fd:81:3d:92:fe:51:ca:6a:b6:34:6f:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B1:45:B9:03:6A:3C:AC:9D:6B:88:33:7C:A0:20:2C:52:C0:BE:C2
            X509v3 Authority Key Identifier:
                keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:80:a7:f2:37:76:b7:66:9d:d1:c2:07:d9:34:0d:ae:81:7c:
         75:59:56:7a:fc:22:8d:10:f4:ef:65:fb:15:40:02:14:9a:7f:
         d4:66:d8:c6:b8:6b:5e:63:36:24:c5:f5:88:4e:66:97:e7:c4:
         c3:ca:d3:88:3d:9f:c9:db:db:a1:17:f6:4d:c2:af:8c:04:9a:
         ff:18:a1:00:9b:6c:58:7c:94:f1:e7:30:8a:91:88:aa:c9:60:
         35:af:11:ba:0c:0c:41:8c:6f:4b:98:af:c5:9b:eb:91:9e:de:
         2a:4c:24:0e:1c:9a:e4:1a:b9:a1:2a:8c:be:84:ed:ec:84:47:
         0d:28:1c:6d:e5:c2:18:bc:1f:89:fd:80:42:08:b0:2c:45:6d:
         a1:a3:12:06:09:e6:5c:3a:2d:46:c1:da:8f:11:ab:b5:76:9a:
         8f:d1:30:65:53:f1:55:01:d0:f1:9e:a3:41:cb:d8:ca:20:ef:
         1c:4f:2b:87:b2:8d:e4:ae:30:8d:0a:96:b0:fc:81:12:40:c4:
         e5:8a:76:4a:cc:9f:3e:cc:7a:95:c2:fe:47:d4:53:91:5f:46:
         59:1c:0a:57:3e:7e:c0:9b:08:69:29:dd:2d:83:4f:2e:e1:92:
         78:8b:ad:a3:54:68:db:50:06:85:2c:56:6c:0d:31:1c:24:f7:
         82:99:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 07:32:31 2026 by rpki-client