Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
File:                     1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft (raw, json)
Hash identifier:          CihGecqHPH8+9w2e+cVLvn9B8xEBOAZWe9MP5oIpHmI=
Subject key identifier:   16:28:6B:5F:E8:93:1C:85:9B:12:D0:F0:13:CD:3F:5A:52:CB:4B:00
Authority key identifier: D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
Certificate issuer:       /CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
Manifest number:          0143
Signing time:             Thu 09 Jul 2026 07:10:17 +0000
Manifest this update:     Thu 09 Jul 2026 07:10:16 +0000
Manifest next update:     Thu 16 Jul 2026 07:10:16 +0000
Files and hashes:         1: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl (hash: nMKKxb1S0TPj9+IlqSjwmiyVGCTN2+UeBA1JTI1twVY=)
                          2: E6721B6E908211EFAC47F726C4F9AE02.roa (hash: TCFGjEUbtbknbQBN59Hok85NaQ19/9rM/pLnuqPupHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 07:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5C7, serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
        Validity
            Not Before: Jul  9 07:10:16 2026 GMT
            Not After : Jul 16 07:10:16 2026 GMT
        Subject: CN=6a4f4959-fb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:b3:4b:f2:93:1b:89:eb:56:16:d9:a5:6b:
                    c7:97:67:66:77:90:40:4f:fc:a2:e2:27:2b:24:42:
                    fc:d4:8e:55:42:6f:04:b8:4c:2e:18:b3:4f:fd:82:
                    39:4e:82:d9:82:d0:fd:18:c4:16:87:a8:69:4a:d1:
                    47:91:99:2c:58:55:30:d3:cc:71:d0:68:b9:f4:a3:
                    f6:45:5e:a1:9c:6b:10:95:b6:d0:a9:04:76:bc:7c:
                    46:8e:4f:80:e5:2e:a0:cc:ad:40:d8:51:f4:1a:7c:
                    4b:16:ce:59:30:c9:a3:df:9c:77:c8:39:cf:7a:cf:
                    b4:44:1b:79:ab:d1:2e:83:e8:7f:6c:51:37:b1:88:
                    60:dc:0b:6e:75:3f:e1:84:30:ad:6b:43:50:b6:93:
                    42:16:a1:b6:25:37:5a:1f:18:15:18:65:0a:b1:dc:
                    c9:5b:02:0a:7e:5d:3c:49:2a:ea:ba:bd:27:8a:a7:
                    64:05:f6:8c:78:45:3f:61:15:c4:1e:93:37:a2:09:
                    6f:e1:86:1f:f0:83:9e:21:06:d1:25:8b:b3:47:1c:
                    39:ff:06:52:9c:70:cb:c6:f4:98:e5:49:80:d0:52:
                    75:f9:8c:03:13:91:34:b1:51:16:61:95:92:dc:4f:
                    58:d2:0b:af:d6:be:a8:67:b4:e0:3b:9c:30:ee:d9:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:28:6B:5F:E8:93:1C:85:9B:12:D0:F0:13:CD:3F:5A:52:CB:4B:00
            X509v3 Authority Key Identifier:
                keyid:D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:ab:f5:d0:2b:81:17:39:ec:5d:dc:09:dc:49:c1:73:b8:
         06:b4:6d:60:00:b1:e7:94:7c:d1:67:1f:e9:3d:f4:cd:98:8b:
         87:72:88:2a:10:c7:aa:73:a8:3d:57:7e:15:98:18:07:ff:16:
         8d:f5:48:38:24:3a:ea:b6:42:f4:a2:99:52:81:99:61:3f:15:
         8b:30:c9:6b:a1:28:6c:03:0b:41:e3:5e:4e:16:74:5f:a2:01:
         be:76:c3:19:39:a5:bd:f7:76:c4:43:78:6b:eb:7d:16:81:59:
         08:b9:a1:b1:04:8d:1a:97:eb:8a:12:75:f7:38:45:b6:f2:c9:
         1f:ff:73:7b:e5:2a:41:55:af:bb:31:c1:98:9f:d6:93:9d:d3:
         d6:77:62:70:22:4f:02:22:45:41:0c:35:0b:6a:06:07:a5:47:
         83:7d:c6:85:b3:3d:13:b4:97:c2:9f:af:d1:92:7b:2c:db:f7:
         23:de:d6:b1:b8:3b:3c:c9:13:69:c7:74:c2:fe:b0:3f:17:0c:
         df:23:ec:f7:7f:a5:e9:06:4c:4c:70:12:b3:bd:84:0f:c8:a0:
         1d:67:36:75:f9:ad:fa:cc:86:68:e4:32:da:ab:04:68:a8:3b:
         38:57:44:0c:7f:a4:2d:a6:9b:62:9d:ff:a9:31:2d:3a:cd:ef:
         62:e5:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:04:10 2026 by rpki-client