Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File:                     4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier:          lgMdoLqVZikTeDNrxCvG1EGO9/lUx+XLCxAo09TPTSk=
Subject key identifier:   DA:D7:46:47:C6:CE:7A:71:98:CC:6B:84:3B:D4:A0:3F:75:68:D6:E1
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer:       /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number:          81
Signing time:             Fri 17 Jul 2026 08:51:01 +0000
Manifest this update:     Fri 17 Jul 2026 08:51:01 +0000
Manifest next update:     Fri 24 Jul 2026 08:51:01 +0000
Files and hashes:         1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: mNHPA7jOuop8ujVeVDE436BOo6rOwjo46IYo2D1gwQE=)
                          2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
        Validity
            Not Before: Jul 17 08:51:01 2026 GMT
            Not After : Jul 24 08:51:01 2026 GMT
        Subject: CN=6a59ecf5-f71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:32:bf:17:01:63:0e:d6:c8:eb:92:48:c8:
                    3f:a0:e1:11:a7:e4:1f:a5:f4:22:f5:bc:19:80:7a:
                    09:2d:c7:ce:b4:74:c4:16:a2:bd:20:12:54:e5:bf:
                    27:06:fb:18:c8:30:8b:7b:f4:63:de:e7:95:3c:46:
                    04:87:41:2a:e2:b7:ed:ee:a8:99:51:07:ee:33:b1:
                    13:ea:5c:20:39:dc:e2:ac:5d:c9:c9:f2:5a:26:b3:
                    1d:f2:3b:78:01:0f:8b:c8:ae:9f:8f:fa:13:30:cb:
                    0b:37:d1:ce:5f:d1:f3:19:31:bd:a3:e5:5d:ee:05:
                    f7:64:b6:6f:cb:82:53:9e:82:d6:5c:a1:b0:67:fe:
                    85:c3:a6:d5:e2:8e:2c:bc:4c:f2:88:49:0b:cf:f5:
                    e7:84:67:b1:46:b1:92:46:ca:26:5a:f1:32:ee:14:
                    3d:9a:b9:a8:0f:d6:5d:b1:aa:7c:77:26:ac:73:d4:
                    17:b5:f3:a8:cf:08:fd:f2:51:e2:d1:76:cc:07:dd:
                    9a:6b:83:66:d9:2c:f6:b1:e4:f6:29:b9:22:57:96:
                    84:64:15:19:3a:57:5e:39:09:98:5d:a3:33:ab:96:
                    15:e6:2c:e8:90:30:96:4e:f8:77:fe:82:f2:ec:ec:
                    94:e7:be:8d:c5:22:9f:9a:00:f1:ca:60:3a:24:21:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D7:46:47:C6:CE:7A:71:98:CC:6B:84:3B:D4:A0:3F:75:68:D6:E1
            X509v3 Authority Key Identifier:
                keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:05:e5:fb:88:b7:74:09:6b:cc:b6:83:4b:13:80:c7:9c:16:
         10:18:a4:df:3e:ba:42:ed:a0:c8:2b:ae:68:c1:dd:db:5e:03:
         2c:dd:28:ce:31:89:32:39:db:c9:f0:b6:28:95:40:5f:08:4f:
         84:5a:31:05:b9:a4:7d:91:40:ac:fa:e9:ac:a4:16:b4:68:3a:
         6a:86:90:d6:df:9e:0c:1c:a6:18:de:e6:e7:d0:7a:fa:48:c4:
         54:b3:3e:87:8b:53:84:4a:18:2c:95:66:c3:59:8b:b8:f7:86:
         98:05:d9:8c:16:43:a2:1c:0e:b4:52:1d:af:0e:40:89:6a:80:
         c8:97:d1:7f:7f:70:4e:29:03:e5:dc:74:0c:d2:e5:5e:52:87:
         33:aa:c6:71:32:32:07:bd:61:7c:03:bf:80:92:22:a7:f3:3f:
         b2:9e:85:aa:19:04:1f:54:74:dc:36:ff:54:43:2a:87:c0:03:
         da:9c:a3:d8:27:8f:e1:39:be:73:13:12:d0:79:31:db:93:60:
         3c:6c:ae:75:11:b1:a0:07:59:6d:70:87:f8:5f:74:18:4e:1a:
         b6:a3:a0:26:9b:0e:a1:aa:2d:df:f7:5e:73:be:c1:51:c8:aa:
         3a:88:fc:5c:cb:3d:63:26:ba:a0:d1:3e:96:d5:cd:0d:e1:02:
         fa:99:8b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:09:23 2026 by rpki-client