Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File:                     Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier:          2WWGmG7+954jVuBniYAmFQjNbvWQNgM6xRLlUt4Z0Ys=
Subject key identifier:   C7:FF:C5:B6:A7:DE:FE:E0:E6:0E:3A:45:C2:48:69:2F:0E:BD:68:9D
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer:       /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial:       08E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number:          08C9
Signing time:             Sat 04 Jul 2026 20:35:18 +0000
Manifest this update:     Sat 04 Jul 2026 20:35:18 +0000
Manifest next update:     Sat 11 Jul 2026 20:35:18 +0000
Files and hashes:         1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: H2Qya23Pra2L1d2VluT4+t7ENSIBVM4ZMGL5gbPbeN0=)
                          2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: GhHf45/vb5I/X0MIOpzOvwX20CEWTC0IaH/0NH4EfF4=)
                          3: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: mf6qln82PscHDH0xPIvnUcgowJvdgyrORzlGrhrol0w=)
                          4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
                          rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 20:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
        Validity
            Not Before: Jul  4 20:35:18 2026 GMT
            Not After : Jul 11 20:35:18 2026 GMT
        Subject: CN=6a496e86-7247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:ea:17:05:45:95:63:c4:52:a3:6d:f3:78:
                    41:fd:5b:ff:d8:33:27:b5:07:68:04:4c:35:eb:64:
                    59:e7:46:5b:98:1a:32:99:f1:62:4b:55:08:0f:b6:
                    be:5d:44:f9:97:2b:9c:71:bd:de:50:0e:5f:94:fc:
                    00:e2:dc:2a:4d:1f:d5:9e:bf:ed:34:02:b0:d4:33:
                    1b:28:e1:8f:c1:b6:5a:f7:1d:91:cf:df:b4:1f:ce:
                    8f:8a:b7:fd:ae:d3:5b:ac:b3:db:21:40:54:ba:c9:
                    b2:89:94:42:85:a0:fa:fb:54:57:82:a1:fe:0d:47:
                    3d:65:77:4f:76:e1:a1:2e:2f:e5:c9:70:ce:20:be:
                    7b:44:53:ff:fd:01:bc:25:73:5a:a1:12:20:4b:b4:
                    26:21:02:7a:12:e1:a8:4f:00:e4:7d:14:5f:b0:23:
                    da:1c:68:fa:4d:ec:15:46:a7:12:1b:e3:a4:79:93:
                    21:c8:e7:27:28:75:d6:34:02:b1:b8:33:9e:e4:2c:
                    3a:69:7f:80:99:c1:d5:c8:6e:ce:61:8d:8b:4a:6b:
                    4e:ac:08:eb:fc:a1:cf:60:4e:c1:80:a6:af:ae:49:
                    ea:f9:ca:cd:1f:a9:b4:c3:1c:80:1f:02:12:72:25:
                    da:97:5a:6d:56:43:50:52:9f:35:6b:03:ff:1c:47:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FF:C5:B6:A7:DE:FE:E0:E6:0E:3A:45:C2:48:69:2F:0E:BD:68:9D
            X509v3 Authority Key Identifier:
                keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e5:f8:38:ff:21:07:fc:d4:8b:4e:99:96:18:67:0c:5d:44:
         59:38:a3:68:64:e7:87:9a:d4:56:ed:13:bb:43:3a:83:57:e2:
         41:8b:a1:b6:28:3a:d2:70:1f:14:0a:bc:e7:37:d6:33:9c:e9:
         97:c3:3e:a4:98:eb:52:8e:ca:5e:b2:6d:ff:14:32:e8:85:54:
         01:27:86:ea:cd:89:07:a7:4d:59:1b:8e:ed:e7:fc:8e:62:2e:
         a3:f8:e0:53:1e:f9:37:b0:cc:cf:85:bf:f1:51:f7:b4:b6:a4:
         b6:18:1c:d8:de:47:85:86:ce:87:0c:9e:96:52:88:88:aa:9d:
         68:89:bd:f8:b1:87:48:28:1e:c9:2e:c4:1e:56:83:e7:44:4e:
         3c:47:7a:a0:eb:84:bd:52:eb:3a:14:b1:ab:18:ab:43:85:cd:
         08:72:5a:72:57:72:5c:17:94:58:82:e4:5b:a4:af:9c:ed:17:
         65:10:55:22:9f:97:e6:d3:24:ed:81:5a:5c:e2:53:b2:90:4f:
         6e:08:e9:83:77:61:24:f0:77:da:6d:6b:09:33:50:5d:68:97:
         76:64:f1:76:4d:c0:29:79:d2:cd:07:c5:60:ec:ba:8e:2e:4c:
         05:47:ca:fc:99:f9:8e:35:6c:fc:29:29:14:36:bd:ef:02:ad:
         d6:3c:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:20 2026 by rpki-client