Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
File:                     muOXelmM-YG98IVk3ctr8rapZBs.mft (raw, json)
Hash identifier:          WiMfWUbKVP0AqP+kn1tJxHX1EfBPuDOY0qjCfsvC0kA=
Subject key identifier:   CA:F0:10:1B:8E:5D:3C:16:7B:19:E0:44:3D:28:75:88:07:4D:7E:36
Authority key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Certificate issuer:       /CN=A911725F/serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
Manifest number:          68
Signing time:             Thu 23 Jul 2026 10:05:13 +0000
Manifest this update:     Thu 23 Jul 2026 10:05:12 +0000
Manifest next update:     Thu 30 Jul 2026 10:05:12 +0000
Files and hashes:         1: muOXelmM-YG98IVk3ctr8rapZBs.crl (hash: HuV9jgepHBhRlo0vfMIbWVvJZoitQ1wO+9Gll84H8I4=)
                          2: C0838B364D3211F19F7BE348C2833773.roa (hash: J3Z7es5Uh4rR/ZxShTh4SGcaI5GZVCJNn9Qv4oL/qLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
                          rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
        Validity
            Not Before: Jul 23 10:05:12 2026 GMT
            Not After : Jul 30 10:05:12 2026 GMT
        Subject: CN=6a61e759-2fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c2:68:c7:cc:6e:a0:a1:5c:46:d8:36:f2:cc:
                    3c:70:26:37:45:41:72:15:7d:a9:75:03:cd:f0:e5:
                    7e:e1:89:aa:ac:68:a6:3d:be:d1:c9:95:b5:0a:f7:
                    85:f5:9f:ef:b6:99:42:ba:c3:69:4e:e8:5b:54:d6:
                    2e:c5:3a:ff:31:36:73:2f:b7:d5:d9:41:47:60:4a:
                    00:ee:f7:e0:c2:e1:9a:a7:1c:56:db:f2:d8:63:e1:
                    d0:28:71:36:49:48:ab:0a:62:a3:50:77:18:e3:84:
                    78:1d:77:c5:c8:1d:e9:75:8e:ad:d9:29:48:d0:fb:
                    5f:ee:58:0d:51:43:4a:71:b6:00:87:03:f5:4c:ef:
                    2b:07:21:91:46:18:79:fc:69:5c:32:0c:12:f6:e4:
                    cd:38:f6:dd:06:e6:26:4a:34:5b:b5:e9:cc:e6:f0:
                    93:88:9b:71:04:c7:0a:e6:2a:57:0b:f7:62:6a:fa:
                    d9:bf:e1:0f:17:1d:d5:55:04:38:ea:95:80:3a:e9:
                    e5:66:44:6c:09:19:d8:41:d6:e5:51:9e:7f:2a:4f:
                    c7:87:75:09:69:27:4e:7f:f8:03:8e:df:32:6c:4d:
                    14:b5:d0:f0:8c:db:2f:1c:ca:f7:d4:f6:d8:e0:89:
                    e8:33:87:33:50:83:61:a1:b5:d7:09:5e:ef:ce:f3:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F0:10:1B:8E:5D:3C:16:7B:19:E0:44:3D:28:75:88:07:4D:7E:36
            X509v3 Authority Key Identifier:
                keyid:9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:df:8d:b1:c8:3c:78:ad:de:32:17:01:b0:cc:c3:96:bc:
         0c:94:81:2a:4e:bf:c1:a5:1f:ae:0f:1a:58:e6:ec:43:bb:40:
         e1:cc:e5:89:10:e0:ab:2e:73:e8:ff:fb:4c:ea:d3:8a:01:6d:
         29:39:f0:b0:6b:4a:d8:e9:7d:13:2f:3d:79:7a:98:5e:ec:86:
         ed:4a:a2:b4:8d:6a:2d:13:c0:5d:7a:8a:46:7b:68:37:f1:b6:
         12:8d:8e:93:48:a6:16:45:e7:bb:4b:0f:6b:76:4f:e8:03:66:
         be:b5:06:92:8d:62:6c:68:53:d5:a3:c5:a4:e6:51:f8:d7:c0:
         fc:48:17:65:ff:35:1e:7f:5b:ab:7c:b0:64:c7:9e:56:56:a4:
         99:df:be:38:17:7b:ba:03:26:20:9e:4b:ef:5a:7e:fd:da:c2:
         61:56:c2:a1:fe:a9:79:4b:8c:d3:ce:9c:2b:d8:60:11:57:36:
         ab:4b:01:84:e1:5a:ea:9d:52:5a:27:e8:21:bb:41:81:7f:1a:
         fa:ac:21:48:6d:c0:d5:69:9e:68:cc:ab:39:c7:17:aa:8a:fc:
         7e:d3:60:7c:f5:b7:b5:c9:65:5f:60:83:95:df:d8:eb:6d:3e:
         fa:2c:18:a4:26:a2:0a:d6:8a:a9:49:47:18:1b:c6:49:df:b0:
         a3:1f:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:18 2026 by rpki-client