Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
File:                     P4oQ_sbERHjWPTOyV_BEXQKopIw.mft (raw, json)
Hash identifier:          d4Ku4cdVn32Ok3zrbgZylH5ATHYjMRVC0lXtUgKu9gY=
Subject key identifier:   92:8C:12:8A:58:B2:F8:32:D9:1E:14:0F:D5:86:AF:9F:6E:34:D1:B4
Authority key identifier: 3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C
Certificate issuer:       /CN=A9176701/serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
Manifest number:          3B
Signing time:             Tue 21 Jul 2026 10:26:48 +0000
Manifest this update:     Tue 21 Jul 2026 10:26:47 +0000
Manifest next update:     Tue 28 Jul 2026 10:26:47 +0000
Files and hashes:         1: P4oQ_sbERHjWPTOyV_BEXQKopIw.crl (hash: 1S19CdYHbM+W/Qeo6eGLNYqd09QZ/9wdJRKTBL8gATE=)
                          2: 59228E922D7F11F1BBAF3E2694833773.roa (hash: hwPX1z9+sFftkkARtagNuykdrGLd2buhU5oVRyewcCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl
                          rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176701, serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C
        Validity
            Not Before: Jul 21 10:26:47 2026 GMT
            Not After : Jul 28 10:26:47 2026 GMT
        Subject: CN=6a5f4967-c8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:81:56:41:ce:c7:09:f3:ec:d7:0d:b9:f5:
                    c9:b6:0a:12:8b:93:77:44:84:32:61:ec:3d:07:f9:
                    3e:99:93:03:03:80:80:58:82:37:8e:aa:8d:47:9a:
                    f0:4f:67:ed:a8:37:12:94:bf:4a:2a:46:8d:e8:a5:
                    f7:9a:ee:b5:87:f3:d4:2f:c3:21:68:30:9f:c2:0d:
                    51:b5:30:7a:13:9d:a0:25:1d:89:54:36:30:4f:66:
                    ce:93:ae:22:10:20:24:72:c9:98:bc:ea:c9:cb:dd:
                    32:96:9f:f2:41:57:7e:5a:a4:4a:24:79:56:e9:6b:
                    ea:21:9d:b9:72:0c:5e:da:3f:be:e6:c2:2f:1f:db:
                    4f:e3:f9:c5:29:6b:f6:8b:e1:24:ff:f2:73:59:a3:
                    73:24:22:02:1e:12:2c:36:0a:7c:50:0d:a3:ce:75:
                    1e:d0:80:aa:fe:cd:bb:11:ef:76:57:bd:2d:bf:d5:
                    54:2c:7d:15:73:e2:c4:3d:ad:30:f0:0a:e9:71:89:
                    2d:ba:cc:d8:69:81:49:07:87:d0:b4:37:69:64:09:
                    66:29:11:e4:fa:c9:e2:30:58:80:a2:e3:5a:71:6f:
                    06:d4:14:f7:5f:49:d2:7f:a8:8b:6c:ca:32:73:b8:
                    94:c3:07:ed:1a:3f:22:e6:0e:4d:7d:15:01:91:3a:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8C:12:8A:58:B2:F8:32:D9:1E:14:0F:D5:86:AF:9F:6E:34:D1:B4
            X509v3 Authority Key Identifier:
                keyid:3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:02:ea:77:71:6b:db:69:51:ea:10:c8:e5:f3:bb:82:e3:d7:
         f8:e9:b2:12:f4:f3:a3:63:a0:66:91:df:a8:8d:69:21:8d:86:
         0b:b3:2c:db:17:38:05:79:05:6f:7d:34:bd:9b:ce:57:4d:de:
         83:a1:f6:d6:3c:19:63:ec:b8:de:bf:d9:2f:6b:c2:f7:86:cb:
         d7:3c:c4:fd:04:55:fd:e6:15:40:2b:04:09:fc:78:69:2d:2e:
         6f:66:9b:c3:da:8a:32:4b:53:75:29:60:8e:40:0f:75:24:12:
         00:05:d3:26:f2:28:cd:bd:b9:3e:84:45:44:a3:75:69:70:68:
         89:50:e8:07:39:f2:60:1a:d6:41:67:21:ea:34:1c:ce:fb:81:
         9f:3a:20:9e:2b:bb:b4:3d:c7:b5:8b:c8:6f:6a:3a:e6:c9:a7:
         6f:4a:8d:63:f4:6d:19:94:61:d5:59:a7:26:cf:7f:f8:70:04:
         c2:31:f9:58:31:c6:81:5f:2a:7f:9a:7c:a3:24:71:dc:41:33:
         e4:35:be:da:9a:dc:4a:ea:71:64:ac:9a:7d:84:8f:38:32:af:
         68:53:8c:75:a4:fc:0a:cb:c7:7b:64:98:6a:a9:ff:90:bf:d4:
         a1:c4:1a:6d:b3:c5:2a:6a:e7:78:8c:33:a1:5f:40:54:69:f2:
         a9:30:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:50 2026 by rpki-client