Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
File:                     Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json)
Hash identifier:          0ZNB0rveEcBm6dLXwJZi/8Wa+sN2XFnSri7JhtXaNTw=
Subject key identifier:   CC:31:47:FE:D3:AE:CF:99:5F:34:95:AB:00:97:B9:E6:DF:8E:2B:FB
Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
Certificate issuer:       /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
Manifest number:          F1
Signing time:             Sun 05 Jul 2026 07:07:36 +0000
Manifest this update:     Sun 05 Jul 2026 07:07:36 +0000
Manifest next update:     Sun 12 Jul 2026 07:07:36 +0000
Files and hashes:         1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: cxC9Ar3VG7/Ufm+FFCai10i/xTE6s/j81h1x5vsXhtU=)
                          2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: kS//3dTOTrM7yUJmDDxRTEV4J2aIX0y6Eq3RVYtn7qg=)
                          3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: 5jsdXF6s05KmKUh4GwJf4zmDmvtnxukC7D1ccx81YGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
                          rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 07:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
        Validity
            Not Before: Jul  5 07:07:36 2026 GMT
            Not After : Jul 12 07:07:36 2026 GMT
        Subject: CN=6a4a02b8-2ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8c:80:4d:03:df:04:eb:27:05:6d:f7:18:21:
                    ef:8a:f8:ac:b1:a6:f8:64:14:97:27:35:53:b0:24:
                    16:0a:3c:4b:b9:34:6b:5b:b9:20:65:ca:fa:3c:88:
                    53:0e:2f:fa:2b:09:1f:5c:05:92:1b:1b:4d:99:f1:
                    6f:73:41:41:5d:c9:95:09:04:83:bf:b6:e0:e2:eb:
                    d4:d3:0d:ce:a2:7a:64:3b:65:22:69:7a:c7:4a:00:
                    87:f9:f3:ee:0c:90:94:2c:3d:68:5f:d0:6b:8d:93:
                    04:fc:09:50:09:2f:ab:cf:ec:59:d5:16:85:f1:16:
                    50:27:f9:17:72:b3:28:22:eb:14:8e:af:3a:a2:44:
                    d5:08:a7:1d:53:cc:08:1a:6d:c8:74:35:4b:a1:23:
                    ac:f5:2d:f1:97:ef:c8:b7:30:aa:4b:48:20:8d:23:
                    30:c7:4b:f3:84:83:e0:7b:26:7f:58:2c:26:42:27:
                    36:df:1f:e7:4c:06:2c:d5:a0:da:83:f0:76:9a:75:
                    26:77:13:02:fd:3e:92:36:6a:28:a5:75:de:17:c4:
                    e5:fc:45:3f:22:d3:25:2b:b6:97:97:5d:3a:cb:d1:
                    78:90:1b:79:27:46:08:13:00:90:cb:79:e6:68:dd:
                    4f:5d:c7:bc:17:41:c4:e4:6e:4b:e6:47:f5:a9:cf:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:31:47:FE:D3:AE:CF:99:5F:34:95:AB:00:97:B9:E6:DF:8E:2B:FB
            X509v3 Authority Key Identifier:
                keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1d:fc:74:d2:5f:ca:6f:c5:bb:7f:a0:b2:c8:bb:d4:ff:db:
         37:ea:11:4d:2e:18:eb:9f:02:96:8f:52:b3:98:4a:00:08:a9:
         3a:9b:a4:18:bb:72:18:11:12:8d:b7:6c:ed:75:ba:83:e4:1f:
         76:83:38:0b:b8:37:40:88:f8:98:f7:cb:ea:f3:b3:14:be:91:
         72:e7:67:e9:b9:8c:5b:43:b3:03:30:16:57:64:63:a3:d1:5d:
         03:58:15:cb:34:f7:ab:2b:12:5e:76:97:44:8f:3f:c9:9b:36:
         2a:de:d1:41:29:61:13:38:39:b8:8c:88:10:10:e1:32:60:c0:
         44:b8:65:8b:9f:da:9d:f4:69:f2:09:13:e6:b0:74:da:fb:fa:
         82:f6:2b:1f:6d:38:7b:65:46:42:88:fe:e7:d2:0e:89:9a:54:
         a0:2d:01:36:6b:2e:21:30:be:31:03:db:50:8c:57:22:0b:0f:
         96:00:77:82:f6:31:60:58:d2:fc:ca:35:31:e5:4b:ae:ca:61:
         67:38:ba:f3:14:4a:41:45:9d:02:d9:e9:74:52:7a:e2:86:34:
         94:70:93:ae:26:75:8c:5b:88:fa:5b:a0:83:b5:e7:56:41:83:
         52:de:28:84:81:e3:66:b4:4c:75:3f:b8:54:31:ef:fd:be:e4:
         af:4e:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:59:48 2026 by rpki-client