Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
File:                     7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json)
Hash identifier:          MnwUx47boX/DatIZd0aDjUuahSmbdzHml2Qz4brCf3E=
Subject key identifier:   B5:7C:F6:2E:5F:24:1F:2F:11:DB:8A:EA:A5:E6:F4:C9:81:68:B6:B5
Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25
Certificate issuer:       /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
Manifest number:          0145
Signing time:             Fri 04 Sep 2026 14:27:56 +0000
Manifest this update:     Fri 04 Sep 2026 14:27:55 +0000
Manifest next update:     Fri 11 Sep 2026 14:27:55 +0000
Files and hashes:         1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: pVZwADsnJavlJc6Ikbd2rVZwjIWJ+qSEQ9UYa7TrX8c=)
                          2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: qHE12pZJwFpe8wyPzOgoide5sDGoFWiN9Bd/hNLVIe4=)
                          3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: yVchdU3xVWj31ewZ5w80+tHH4ZJNPmu+JLTdmSt6IhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
        Validity
            Not Before: Sep  4 14:27:55 2026 GMT
            Not After : Sep 11 14:27:55 2026 GMT
        Subject: CN=6a9ad56c-967b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:22:ba:b5:9c:61:71:03:35:62:83:3a:25:
                    81:82:e2:10:e0:01:89:4c:e9:e4:40:8d:3b:62:34:
                    c7:81:55:ca:eb:8e:99:a7:9a:b3:ca:75:22:30:78:
                    6a:99:97:14:6d:42:c6:5d:8d:d5:aa:bb:3d:6c:d3:
                    9a:8f:3e:cc:4a:44:6e:3c:d8:24:d9:0f:27:fa:d1:
                    75:a8:fb:f7:54:78:ba:2f:1f:f0:13:b9:e5:be:ef:
                    5f:29:af:0f:db:2f:85:a2:6f:f1:b9:3d:dc:f3:6f:
                    ed:36:68:4a:ba:21:2f:14:c6:ee:9c:01:83:3a:23:
                    63:a8:07:fa:03:f0:d3:6e:ea:dd:34:00:d9:d0:fb:
                    81:04:a9:52:76:42:d6:79:84:47:be:12:be:15:6e:
                    5c:6b:7d:ae:d0:e1:68:3e:76:30:4b:ba:9e:f3:41:
                    5b:5e:70:19:c6:ff:2b:e4:1d:a7:19:f9:9c:32:a3:
                    60:8c:76:46:7e:4c:86:f2:da:63:63:18:58:2f:b2:
                    23:2a:e0:b1:a3:1f:1e:9a:02:3f:5a:ab:58:d9:67:
                    95:b5:f6:18:a8:55:18:3f:92:0d:96:9e:16:1b:cb:
                    c7:bc:ca:68:e1:5b:49:d9:f7:93:99:05:76:2d:80:
                    0a:7e:e0:e7:cc:b6:a7:c0:35:cc:a6:8b:9e:38:33:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:F6:2E:5F:24:1F:2F:11:DB:8A:EA:A5:E6:F4:C9:81:68:B6:B5
            X509v3 Authority Key Identifier:
                keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ce:6a:4e:52:b5:b9:b0:08:34:c6:52:75:f0:a3:f3:d0:54:
         32:9c:c0:86:57:79:8c:ea:1e:97:77:f3:32:4c:df:af:69:4f:
         8c:02:f8:69:e2:b9:91:1d:4c:30:f7:ad:ac:8f:eb:ae:0a:07:
         c0:d1:b4:8e:7f:a6:cd:7b:5b:ef:66:0f:e0:ba:ad:a0:a2:08:
         65:90:8b:a4:19:ee:6c:09:fb:be:45:95:3a:6a:30:b4:be:e8:
         f8:63:eb:ad:14:09:e8:d6:eb:5a:b7:d8:1e:64:a8:e3:b7:56:
         9b:89:1e:bd:51:7b:c8:b5:38:5d:7c:e4:93:05:c7:b0:4d:9c:
         7c:48:d1:49:5a:f8:f9:d8:29:25:73:a1:11:9a:96:3c:43:38:
         c4:a6:ab:89:ef:57:3f:b8:13:f5:0c:5d:c3:9b:44:ae:0a:53:
         5e:48:94:a1:02:60:0e:fb:30:ab:2b:35:c1:d6:db:63:b0:1d:
         aa:17:0f:b2:d6:d6:fa:9e:c1:13:be:e5:7a:49:c8:e1:40:a7:
         72:45:a4:16:f2:8f:df:6d:92:83:17:2a:36:78:9c:66:e7:b1:
         50:f2:dc:a1:cd:2b:59:d2:06:f3:2a:9f:6e:43:70:04:95:1a:
         99:70:3c:eb:cc:e1:eb:c4:67:00:93:2e:36:58:b3:06:61:75:
         08:e3:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:04:21 2026 by rpki-client