Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
File:                     dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json)
Hash identifier:          KQ7Av9XONN7VVztEGgOphXTATWpkcUmOvOcqEsFaM38=
Subject key identifier:   75:56:6A:AC:3A:1A:AD:44:02:5D:5E:AA:48:4C:E9:B7:4F:69:A2:2F
Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC
Certificate issuer:       /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
Certificate serial:       0872
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
Manifest number:          086A
Signing time:             Mon 22 Jun 2026 20:48:13 +0000
Manifest this update:     Mon 22 Jun 2026 20:48:12 +0000
Manifest next update:     Mon 29 Jun 2026 20:48:12 +0000
Files and hashes:         1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: HKTuf9XUOEdpap/TR+nXHRkrrftqdV6/tvJZwkNCJUY=)
                          2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 7pu3YPOy/Iyi+5lsIR5w0HcGr9ERc7QOQEXQx+NBL5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl
                          rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
        Validity
            Not Before: Jun 22 20:48:12 2026 GMT
            Not After : Jun 29 20:48:12 2026 GMT
        Subject: CN=6a399f8d-13b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:25:57:38:dc:e9:20:c0:88:da:d6:be:55:
                    41:90:d8:23:a8:8c:e2:f3:f2:7c:b6:35:0c:3e:1a:
                    c0:12:d6:e0:c4:3d:75:ec:8e:22:af:59:a4:a8:68:
                    f2:ce:f0:81:c8:36:17:25:cc:05:2c:cf:43:1b:fd:
                    02:aa:63:96:c1:b7:c6:55:9a:b3:96:9c:0d:b5:30:
                    e8:ed:79:6f:26:bb:ad:d6:77:ce:4b:bf:e4:93:66:
                    84:5a:df:c3:97:80:1d:1a:68:a4:ed:52:94:81:f9:
                    e7:55:9c:69:b5:18:bf:71:b7:32:ec:a4:cf:0a:5c:
                    13:8d:db:dd:02:b0:c8:ce:7a:c5:91:a0:1c:36:4a:
                    cf:bd:01:37:62:1a:3d:d9:8e:71:50:76:5a:f2:a7:
                    a3:08:2a:cc:14:b6:13:7c:75:3d:c0:3d:c4:29:34:
                    32:27:c4:be:b6:e1:4a:03:e4:87:86:04:54:2d:85:
                    72:ea:75:e2:56:6a:51:af:a6:a6:88:ae:cd:f9:be:
                    4e:81:c7:40:ea:3c:6e:e5:a4:70:6c:c9:62:84:39:
                    9a:c5:37:a2:d6:9a:ae:62:06:3d:24:df:20:43:b6:
                    24:3f:26:49:21:ba:40:f8:32:d5:13:ad:46:c7:65:
                    b4:a3:0a:ae:17:ea:ae:23:76:9e:3a:f2:8f:e8:fd:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:56:6A:AC:3A:1A:AD:44:02:5D:5E:AA:48:4C:E9:B7:4F:69:A2:2F
            X509v3 Authority Key Identifier:
                keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:b0:62:aa:23:b9:35:25:ee:be:51:77:dd:d1:21:8e:45:
         b0:10:08:76:bc:2f:7d:ac:2b:98:07:d9:dd:fd:92:20:27:51:
         7f:83:bd:89:2c:79:8e:92:0c:a9:43:bc:08:f4:1e:b6:44:fd:
         b0:99:39:03:af:54:7f:fd:fe:9f:dc:67:c8:a3:1e:ea:2f:48:
         e4:7f:5c:b6:e1:d9:80:e6:09:96:d9:87:cf:12:87:4c:c3:c3:
         0d:f4:95:6f:43:43:91:97:ad:be:cc:dd:0b:a3:f7:31:da:e5:
         10:39:06:11:a7:22:12:01:33:58:8d:da:00:76:4e:50:14:ef:
         79:07:4f:b6:67:9a:15:99:c5:9d:78:10:df:48:d1:e4:7e:c2:
         1a:6b:50:dd:99:bb:be:fe:d9:37:8a:2c:15:ee:11:e0:52:69:
         ee:a0:9d:b0:e8:92:c3:87:2e:65:bd:78:0e:6d:26:20:58:fc:
         04:e7:a6:db:96:31:a0:ba:88:7a:a3:c9:8e:00:4c:a1:bd:62:
         d0:f1:6a:1e:44:73:d8:af:08:83:4a:5a:a7:a0:4d:a6:52:c4:
         fc:37:47:e5:12:2c:2e:5b:61:12:52:75:a7:af:5c:44:f4:75:
         0d:43:ee:23:57:b7:01:51:7c:84:06:b4:7b:29:68:6e:a5:72:
         2a:3e:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:50 2026 by rpki-client