Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File:                     votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier:          VQisx6qPLfIGRNYqw/0J2RMgwwKxusGxsWq9+gasiZY=
Subject key identifier:   B8:FA:A5:CB:60:39:C6:3C:87:A6:59:84:EC:4F:B1:01:E6:D8:57:AA
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer:       /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number:          013C
Signing time:             Thu 03 Sep 2026 05:39:29 +0000
Manifest this update:     Thu 03 Sep 2026 05:39:29 +0000
Manifest next update:     Thu 10 Sep 2026 05:39:29 +0000
Files and hashes:         1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: OYcSH9SUk2MTlLYEjySc2y/V9CQVQpY71gQmJp20k8I=)
                          2: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: m0i0X9j0yXnsKKSGdxoju3T5IQpZd4Oir8j6ny4qit8=)
                          3: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
        Validity
            Not Before: Sep  3 05:39:29 2026 GMT
            Not After : Sep 10 05:39:29 2026 GMT
        Subject: CN=6a990811-de83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:99:54:10:94:85:7a:f0:93:d9:6b:00:cf:20:
                    13:48:24:17:ed:b5:e0:6e:e9:0c:e4:d1:ce:2b:eb:
                    e1:a7:a8:bd:3d:2d:5a:b0:78:d9:38:0a:4d:32:2c:
                    e8:8b:ba:fd:19:e4:92:f6:e1:ce:e2:9a:5f:98:4d:
                    45:df:96:7b:7c:7d:f3:b0:01:98:a9:cd:56:3e:6a:
                    0a:93:b8:b3:9d:a8:38:4a:75:41:9c:74:7d:60:3a:
                    26:bf:cc:e2:9f:d8:76:41:85:34:05:37:84:82:37:
                    3f:92:52:e5:ca:1b:28:79:07:1f:2e:06:16:f4:84:
                    1b:a0:56:ef:46:e2:60:7c:b3:b1:0a:00:89:df:b2:
                    26:f9:53:86:de:15:44:f3:27:dc:fd:3f:50:65:19:
                    0b:68:19:4f:49:4f:bc:b1:57:16:b4:e0:53:72:05:
                    bc:d6:14:70:40:27:d3:b1:b1:0c:e2:76:f5:ea:68:
                    bb:f2:1c:65:f1:41:08:26:8e:3e:20:d4:5c:d6:02:
                    79:6c:6a:59:8e:71:41:75:9b:9a:5f:c2:ea:b3:c6:
                    22:f7:1f:42:6b:7e:15:ef:ab:7f:d5:a9:4c:58:56:
                    af:c3:45:89:b1:2d:4a:ac:06:07:c1:82:5e:08:93:
                    42:90:b9:c4:c4:8d:8a:31:e8:ed:f2:2c:53:de:00:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FA:A5:CB:60:39:C6:3C:87:A6:59:84:EC:4F:B1:01:E6:D8:57:AA
            X509v3 Authority Key Identifier:
                keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4a:f1:ce:ff:b9:52:ec:92:16:09:45:15:de:8b:bf:84:9c:
         1f:00:25:1d:d1:06:e1:10:82:c1:d2:f8:f0:d8:b3:d0:03:cd:
         fd:86:ac:b6:7c:43:94:f8:a1:cf:6a:1e:e1:c5:6a:77:2c:4b:
         d9:97:48:05:6f:94:8f:5a:46:bc:ac:a9:0d:7a:68:4d:21:31:
         b1:95:29:3d:8f:8e:a6:b8:a0:0f:cc:b7:c5:b7:ae:93:9d:7c:
         ab:89:36:5d:88:55:9c:28:9d:41:20:5c:93:5e:31:8c:43:4b:
         55:a4:da:9a:71:11:ce:2e:32:ca:49:df:74:84:2e:32:f7:13:
         a0:dc:6d:2a:c1:0a:ff:9e:d1:d3:8c:45:b5:0b:c5:91:f5:c7:
         6a:04:61:bb:66:9d:30:59:0e:df:cd:8c:f9:d5:72:dc:bc:9d:
         25:89:7f:19:e0:01:fc:38:30:23:29:83:d2:9e:97:84:d8:ee:
         5d:cd:37:a2:df:43:da:52:07:76:8a:06:a1:31:f5:6c:12:5a:
         7b:4a:56:52:41:11:8b:33:ba:eb:2e:9e:aa:b4:35:8a:e0:6a:
         04:3c:28:f4:b1:5b:cd:07:2e:9f:1c:b6:5c:c6:03:b3:5d:5d:
         7e:88:dd:d1:5f:25:d0:5e:dd:74:92:fd:7e:95:94:67:99:fd:
         1a:01:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:22:16 2026 by rpki-client