Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
File:                     TonyDOHR4q7I1gVlBTEwvWB9W_0.mft (raw, json)
Hash identifier:          mS020gd1nVIx3AYjy8O3u4nfFdwDEYsSBIRxPshb3R0=
Subject key identifier:   BB:D9:B3:81:A6:B4:4D:5C:F1:BE:AC:CA:79:32:C5:EA:09:22:75:AB
Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
Certificate issuer:       /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
Manifest number:          6F
Signing time:             Thu 03 Sep 2026 08:12:24 +0000
Manifest this update:     Thu 03 Sep 2026 08:12:23 +0000
Manifest next update:     Thu 10 Sep 2026 08:12:23 +0000
Files and hashes:         1: TonyDOHR4q7I1gVlBTEwvWB9W_0.crl (hash: +feaDA2SiUT/xWFCC1eVT5AtzUcx2qjWqt1WgLps8x8=)
                          2: 78CCC796100411F190DA552F0F3D8C67.roa (hash: 9ijSIQLwt2Gy2XEyUcUffnJwapZcaQTrQntZZWP4Uss=)
                          3: A885DC48100411F1A3563A300F3D8C67.roa (hash: tF3ywN7eYQwZg7AMUnYYT38GsrrKw6HcmRM3Hqi+nbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
                          rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
        Validity
            Not Before: Sep  3 08:12:23 2026 GMT
            Not After : Sep 10 08:12:23 2026 GMT
        Subject: CN=6a992be8-70b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:dc:4c:7e:57:3f:f2:d8:ce:31:b4:59:1f:
                    3d:64:9f:ab:0a:ba:32:50:a9:49:21:b6:64:f8:b2:
                    ff:b7:d5:bc:db:7f:91:ad:1d:79:33:88:73:32:3b:
                    21:00:13:e8:42:e2:be:3b:b6:08:70:dd:67:e1:9b:
                    f7:69:33:d9:0b:46:10:95:3e:ea:4e:d7:35:6e:ee:
                    49:65:c2:fc:a7:16:24:0a:b3:c7:4a:c0:33:cf:d8:
                    83:a9:f7:ee:d8:74:96:0a:bd:c9:87:16:ab:d4:1d:
                    53:8d:ff:36:67:db:bb:cb:c6:c2:56:9a:d0:78:d6:
                    36:7a:b0:99:29:18:0e:3e:9c:91:ad:ed:33:32:bf:
                    32:4d:13:54:70:7b:58:58:92:06:5a:33:8f:93:e8:
                    7c:5c:d4:24:bc:fd:e9:0a:31:1a:f1:33:8b:ef:d0:
                    c9:84:03:e5:01:b8:5e:24:24:5b:30:74:58:4c:93:
                    37:de:3b:95:39:ef:87:b5:a4:f4:c4:23:83:01:cb:
                    2b:e5:c9:1e:16:78:6e:72:13:e8:9f:7c:e8:70:39:
                    f0:8d:48:58:cb:2b:c8:cb:a1:5d:0a:e5:20:3b:92:
                    dc:b7:5e:24:dc:cd:07:df:6d:32:cb:00:c5:c3:71:
                    db:61:68:fc:0e:f3:1d:43:c9:8d:19:39:17:f2:23:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:B3:81:A6:B4:4D:5C:F1:BE:AC:CA:79:32:C5:EA:09:22:75:AB
            X509v3 Authority Key Identifier:
                keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:ac:42:80:88:79:61:f3:89:38:05:47:52:41:ff:01:b0:
         fd:d3:20:89:45:3e:47:2e:b5:a0:54:92:f1:73:39:bd:87:b5:
         e8:5d:6d:a3:65:7d:49:11:89:ae:ea:72:08:c6:f9:16:56:f1:
         ed:34:b1:8f:77:7b:20:11:9a:b1:25:71:58:85:6e:e6:3c:7e:
         b0:97:12:38:80:9d:22:1d:43:96:c1:08:1b:06:84:7b:0f:86:
         dc:17:84:ad:15:bf:6f:40:ce:eb:46:9c:a0:89:58:0e:ff:5f:
         69:71:79:85:08:51:db:20:22:10:c6:7f:95:e1:da:93:ed:19:
         ac:cc:4b:1f:3e:55:cd:c3:07:7f:a2:f8:8d:d0:e8:49:2d:ca:
         60:9b:bb:d5:98:8c:f5:a2:9d:2f:49:0c:f7:84:5c:65:41:37:
         24:e3:b3:58:b4:00:fa:53:e0:b1:37:10:e1:53:e1:a3:ea:24:
         36:fa:5c:7c:3b:05:73:02:d6:ae:1b:c4:a0:98:74:01:a3:01:
         3b:45:2b:61:81:9d:30:08:33:de:2d:b4:62:d5:b0:37:a0:d9:
         11:60:4c:16:61:7f:29:8d:9e:be:19:37:e8:be:a1:1e:da:85:
         3b:ef:b6:2f:80:f5:25:0f:92:3d:3a:ad:42:a6:81:45:f7:19:
         10:2d:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:46:26 2026 by rpki-client