Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
File:                     vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json)
Hash identifier:          upJ8+6ekOMr82p1Q49rachlYX1qtmET0+RbLgJX8SBQ=
Subject key identifier:   B8:31:3E:15:8D:4C:09:C0:8B:4F:23:BB:56:F8:4F:F9:6A:4B:6D:AC
Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
Certificate issuer:       /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Certificate serial:       28F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
Manifest number:          28C7
Signing time:             Wed 12 Aug 2026 15:31:44 +0000
Manifest this update:     Wed 12 Aug 2026 15:31:44 +0000
Manifest next update:     Wed 19 Aug 2026 15:31:44 +0000
Files and hashes:         1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: pJ2/Vd/E+skFF0uyQtw8MplzAILFmPDASxUFxvfT6W0=)
                          2: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: A8up1k/6bggmZqRZ+TAm+ciF2HAECa0kg6iDR6rMm8c=)
                          3: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: Rgdt1wuLAi3UMbez5u4kaLkCYd1tAFmcl73Kl72YxO4=)
                          4: RjtJADDV0_xVIHKM6AxMwjiOpJc.asa (hash: cizTmtMukagaIDONuHUr+Znzj5qm8V+AxuhTGLPEf8A=)
                          5: 5UXIKmWqo-EBUfAdqb3AfiGNwt4.asa (hash: EGbS76h1brvYeOhgFfCzAj/zLNdTcv0xYc1rIzDyMRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
                          rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 15:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10480 (0x28f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
        Validity
            Not Before: Aug 12 15:31:44 2026 GMT
            Not After : Aug 19 15:31:44 2026 GMT
        Subject: CN=6a7c91e0-5d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:fd:fd:3d:18:ca:08:30:d1:3a:f2:ad:50:
                    98:36:2d:3e:5c:b7:f9:e8:75:ad:16:90:d9:8e:a0:
                    55:02:c1:42:d8:8f:92:2a:60:49:a7:45:a2:68:80:
                    13:d9:53:7d:4c:7c:c7:bb:84:ef:dd:3d:64:7b:2a:
                    9e:ff:63:c6:72:5e:94:3d:d2:68:0e:fd:0c:ec:99:
                    db:6c:9b:6a:c6:8e:6c:b3:e7:0c:66:37:5e:63:d2:
                    6b:91:b0:a8:a2:fa:be:f8:f0:a7:05:2f:0f:6b:e1:
                    d1:44:6b:3c:21:66:dc:f9:c2:dc:65:7a:27:5e:ab:
                    ef:da:23:51:e9:86:31:9d:ff:04:38:47:fb:e8:78:
                    8e:18:1f:90:0e:13:90:b4:5a:fc:db:10:8f:b8:9d:
                    98:9f:30:a2:4a:9a:7a:df:a5:6f:f9:90:19:da:1c:
                    3f:70:c9:9f:2d:8d:26:57:5f:e3:1f:f3:69:50:11:
                    05:87:50:5c:ad:d9:9c:77:af:0c:4f:7f:ed:45:bb:
                    c7:49:b5:3e:db:ce:11:fd:50:c5:23:d1:a5:69:63:
                    63:b0:48:92:15:c0:6a:a6:17:ef:ef:64:bb:03:2e:
                    af:31:fd:93:53:06:30:4f:13:7a:0e:a7:f6:04:14:
                    a9:af:86:5f:08:71:fe:19:5f:b7:30:ab:a3:f2:21:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:3E:15:8D:4C:09:C0:8B:4F:23:BB:56:F8:4F:F9:6A:4B:6D:AC
            X509v3 Authority Key Identifier:
                keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0e:4f:90:3f:dc:ba:9b:6a:da:4e:67:a9:2c:2f:d6:28:f1:
         7f:e3:c0:e5:cc:64:4a:91:ea:ec:28:82:96:2f:d6:7d:39:d4:
         05:51:32:f1:dc:ba:b5:45:51:3c:37:a0:15:18:0d:07:47:a9:
         cd:b6:7e:b0:17:79:03:71:4c:8a:48:7a:f1:95:80:13:70:e8:
         d9:8f:f6:45:29:35:e6:de:d6:3c:82:cb:f6:c2:32:36:58:27:
         10:bc:5d:43:c3:1b:14:7c:4c:9a:e6:9d:74:0f:ce:87:67:81:
         72:df:87:a5:59:e4:4c:35:1a:0a:d4:33:e9:8d:33:34:eb:67:
         c0:d7:ce:39:1c:80:a0:f1:cc:ed:5e:25:8a:53:8d:e9:44:7b:
         74:7f:1e:e3:86:85:8c:75:e0:57:1f:b9:79:e7:0f:91:a6:76:
         40:9b:37:fd:d8:18:8c:cb:0e:84:32:f2:c1:7a:55:06:c8:1e:
         7f:ee:3f:7f:83:36:91:51:1c:7d:a5:33:ea:29:73:6d:fd:68:
         ee:73:60:28:f2:1c:6d:e4:be:96:07:0c:3e:f9:5b:68:26:09:
         79:da:01:1f:3f:70:d4:c6:2b:05:c7:5e:25:1e:e9:ef:8b:68:
         9c:85:bb:07:fc:c1:5d:ae:d0:61:76:b8:2d:88:aa:96:1d:24:
         d6:37:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:39 2026 by rpki-client