Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
File:                     aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json)
Hash identifier:          j31/Xeh1lkiDHp+P0lcf0iVPYub3gC4EK6P9vc2XQ2s=
Subject key identifier:   15:C4:44:D2:2E:8E:BD:C2:2F:7A:28:20:8E:1F:98:4A:65:33:D9:1E
Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Certificate issuer:       /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
Manifest number:          60
Signing time:             Thu 23 Jul 2026 10:03:15 +0000
Manifest this update:     Thu 23 Jul 2026 10:03:14 +0000
Manifest next update:     Thu 30 Jul 2026 10:03:14 +0000
Files and hashes:         1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: FAGu8ts0FVPaL57U/w66iwhe8W5JFw4cKB/Mkbu0rwU=)
                          2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
                          rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
        Validity
            Not Before: Jul 23 10:03:14 2026 GMT
            Not After : Jul 30 10:03:14 2026 GMT
        Subject: CN=6a61e6e3-e99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:64:6b:19:55:2d:f8:01:d9:a8:7b:63:1d:
                    9d:d2:01:b6:f1:fb:04:dc:e0:55:1a:d1:57:49:40:
                    1a:94:f2:26:d6:53:97:e7:ee:a9:89:66:a3:43:60:
                    56:6a:7b:62:fe:c1:38:79:2e:00:16:bc:89:27:f2:
                    e3:28:af:96:ee:08:5b:59:ac:80:62:03:36:f3:36:
                    45:b8:59:3d:a9:33:c9:e7:37:c5:8b:3f:8f:1c:b5:
                    96:3f:bc:07:0c:40:3b:1c:ba:b8:f4:e3:a9:d8:d4:
                    34:26:fa:ff:93:d9:59:eb:71:c9:b4:e8:de:e4:bf:
                    9b:69:11:32:35:5c:94:9a:ac:85:c1:52:b6:7e:d6:
                    c6:bc:de:fa:37:1c:b8:c8:ac:f0:97:83:f8:9f:43:
                    52:9e:f5:89:3c:a4:52:b0:9e:fc:d5:d3:a7:10:b1:
                    62:2f:c0:2f:d4:c4:bb:e6:aa:2f:e0:c6:60:2a:5d:
                    b7:c3:f8:e0:2b:6b:a5:0f:07:a1:0e:09:b0:1a:19:
                    bb:fc:f7:bd:57:8f:43:3c:74:48:45:bf:fd:cc:3c:
                    36:86:55:d9:94:ac:a0:28:96:23:25:1d:65:19:e2:
                    0d:a9:39:4a:80:62:5d:11:8e:36:85:bf:35:bb:73:
                    03:89:b0:7f:b4:2a:c8:57:83:c6:eb:5e:0c:fa:b4:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:44:D2:2E:8E:BD:C2:2F:7A:28:20:8E:1F:98:4A:65:33:D9:1E
            X509v3 Authority Key Identifier:
                keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:90:32:43:5e:f3:44:ea:10:14:23:e3:98:21:bc:3c:9c:aa:
         0c:de:42:4c:a7:af:80:01:5c:6c:89:6b:40:4f:48:f2:6d:be:
         de:9e:e1:b5:a8:04:64:22:1e:3f:ab:d9:ea:a3:73:6c:9e:77:
         d0:2f:7c:15:2c:df:05:78:c1:41:6d:ed:85:ba:61:c4:10:7d:
         6a:59:b3:58:d3:73:06:97:90:20:00:e2:17:5a:48:f1:90:14:
         72:c6:c6:2f:64:6c:62:c9:0a:b5:ce:cf:c0:45:c3:9f:ee:ff:
         e2:44:04:c1:d1:f5:8f:09:c5:1f:8f:3a:d1:ef:12:54:a8:f7:
         7d:1f:44:5c:d0:b2:fe:0e:45:d9:b9:0a:10:f3:d5:9b:76:b2:
         01:cb:a5:2a:da:d2:cc:c3:1f:c8:61:5e:ea:9b:31:5c:c3:ea:
         e4:40:b1:d8:3e:09:7b:c5:8c:91:45:42:14:11:5d:00:d2:ad:
         da:db:82:df:17:dd:e1:1c:a8:e4:8d:d5:57:9f:69:fc:d2:fe:
         cc:d2:1f:97:b4:ba:16:cc:19:1e:57:8b:58:4d:38:fe:ee:ce:
         c2:e9:a7:8c:43:f4:41:49:3c:d6:74:5d:49:21:4e:58:e3:c3:
         dc:52:23:ba:d5:38:08:d9:66:6d:c9:a9:32:19:8a:c3:70:ee:
         38:e7:95:71
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MEM4QjExMC8GA1UEBRMoNjg1NTQzNzM0MEVFRjlERjQyMzNBQTMwNTk4MzAxMjE3
QjBBMUM1NTAeFw0yNjA3MjMxMDAzMTRaFw0yNjA3MzAxMDAzMTRaMBgxFjAUBgNV
BAMTDTZhNjFlNmUzLWU5OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQXGRrGVUt+AHZqHtjHZ3SAbbx+wTc4FUa0VdJQBqU8ibWU5fn7qmJZqNDYFZq
e2L+wTh5LgAWvIkn8uMor5buCFtZrIBiAzbzNkW4WT2pM8nnN8WLP48ctZY/vAcM
QDscurj046nY1DQm+v+T2Vnrccm06N7kv5tpETI1XJSarIXBUrZ+1sa83vo3HLjI
rPCXg/ifQ1Ke9Yk8pFKwnvzV06cQsWIvwC/UxLvmqi/gxmAqXbfD+OAra6UPB6EO
CbAaGbv8971Xj0M8dEhFv/3MPDaGVdmUrKAoliMlHWUZ4g2pOUqAYl0RjjaFvzW7
cwOJsH+0KshXg8brXgz6tMENAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFcRE0i6O
vcIveiggjh+YSmUz2R4wHwYDVR0jBBgwFoAUaFVDc0Du+d9CM6owWYMBIXsKHFUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzhCLzk0NjAyNzRBRjY2
QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5Q002b3dXWU1CSVhzS0hG
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYUZWRGMwRHUtZDlDTTZvd1dZTUJJWHNLSEZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw
QzhCLzk0NjAyNzRBRjY2QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5
Q002b3dXWU1CSVhzS0hGVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCvkDJDXvNE6hAUI+OYIbw8nKoM3kJMp6+AAVxsiWtAT0jybb7enuG1qARkIh4/
q9nqo3NsnnfQL3wVLN8FeMFBbe2FumHEEH1qWbNY03MGl5AgAOIXWkjxkBRyxsYv
ZGxiyQq1zs/ARcOf7v/iRATB0fWPCcUfjzrR7xJUqPd9H0Rc0LL+DkXZuQoQ89Wb
drIBy6Uq2tLMwx/IYV7qmzFcw+rkQLHYPgl7xYyRRUIUEV0A0q3a24LfF93hHKjk
jdVXn2n80v7M0h+XtLoWzBkeV4tYTTj+7s7C6aeMQ/RBSTzWdF1JIU5Y48PcUiO6
1TgI2WZtyakyGYrDcO4455Vx
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:15 2026 by rpki-client