Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
File:                     aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json)
Hash identifier:          ggOL56+TSSdb1AyydRAnYPH+/WmYRRVqE2sZzece9uY=
Subject key identifier:   DB:91:08:F8:66:19:18:8A:3F:DA:BB:B9:AE:76:C8:72:87:3A:0C:EA
Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
Certificate issuer:       /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
Manifest number:          D3
Signing time:             Thu 23 Jul 2026 08:29:56 +0000
Manifest this update:     Thu 23 Jul 2026 08:29:55 +0000
Manifest next update:     Thu 30 Jul 2026 08:29:55 +0000
Files and hashes:         1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: xrJu3Zj1jc7IAJQcKZ4GOEq8RKHhVsiNCS4UrkghG5g=)
                          2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: vIzjykPQ1LonF8j+M1UP/1/5O9eRnrbkzxN67k8ibko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl
                          rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
        Validity
            Not Before: Jul 23 08:29:55 2026 GMT
            Not After : Jul 30 08:29:55 2026 GMT
        Subject: CN=6a61d104-e2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:ef:fb:1d:96:d0:e4:d1:c6:c6:54:54:72:
                    5a:bb:ab:04:12:3a:35:0c:5c:ef:3c:b6:70:7c:8d:
                    a3:51:29:91:89:44:36:d5:5f:56:08:00:0a:dd:2b:
                    be:59:35:2f:15:c6:95:19:1d:75:73:68:07:e2:0d:
                    a2:5f:b6:35:ee:1b:95:f2:a9:7d:5b:06:79:fe:c5:
                    dd:4f:3e:0c:6d:34:a0:88:6d:ac:85:d2:58:67:68:
                    5b:46:ab:c6:58:d0:f8:9b:f6:fc:98:9f:5f:e4:0c:
                    bd:2c:35:85:f2:32:7d:cd:eb:2f:29:a8:26:0d:f6:
                    42:39:1e:3a:74:ba:29:aa:7a:27:de:b8:d6:17:e6:
                    4e:a2:49:d6:17:52:70:de:d0:2f:cb:f2:00:a6:eb:
                    02:9d:23:9e:a5:e7:49:31:3f:13:75:25:a6:3f:f2:
                    dd:66:0c:4f:5f:68:b3:50:8d:8a:87:45:e9:9f:6b:
                    52:18:df:e5:63:ed:3d:f2:cd:c5:a4:7e:c7:3c:9d:
                    b2:0e:5a:83:78:38:25:18:8b:c0:31:b7:3a:8b:31:
                    c0:6e:b7:db:45:56:55:e7:46:92:39:eb:2f:89:39:
                    1b:51:7a:d9:c7:55:37:96:90:f4:e5:f1:d2:b4:bf:
                    33:7c:ff:7b:c5:59:42:c7:5c:a7:20:d0:6d:f6:4c:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:91:08:F8:66:19:18:8A:3F:DA:BB:B9:AE:76:C8:72:87:3A:0C:EA
            X509v3 Authority Key Identifier:
                keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:4e:7d:dd:56:eb:f0:50:81:b3:f1:93:72:68:4a:f5:64:
         45:ce:53:d0:e0:ef:c7:18:35:ed:ca:8a:ff:78:37:07:35:a6:
         16:ab:ca:47:39:c5:9b:66:20:e5:49:0c:1f:3e:54:96:75:1d:
         21:11:35:5b:3a:d3:62:3b:07:6f:16:20:da:c7:e4:fe:b3:b0:
         5c:b0:05:3e:33:57:38:8b:3a:aa:c2:d1:14:d8:31:66:3a:bb:
         09:93:b3:3a:4b:8d:4e:2c:e0:fb:88:5f:e1:a4:f7:eb:2d:17:
         87:b7:34:d9:07:19:70:29:30:0c:58:f5:69:ea:1e:17:f1:db:
         f7:57:a0:49:2b:c7:29:0c:2c:5d:dd:66:e6:22:27:e0:c9:5e:
         57:15:60:f1:c2:98:81:d7:81:a7:04:9b:24:6a:27:be:d4:55:
         f3:b7:7d:35:4c:58:e6:97:d4:f6:ce:ed:b2:7f:05:3f:aa:72:
         88:bb:28:11:f3:fc:fb:ee:6f:c5:84:a9:c1:75:68:7a:1d:7d:
         c2:8f:0b:2e:f6:7b:d1:dc:bb:cb:44:22:52:da:e1:6b:e2:0c:
         da:70:a0:dd:e9:ff:9e:ef:63:69:ba:a8:e4:2a:51:77:33:a6:
         3a:2f:11:95:4c:2d:1e:ce:db:0a:97:52:10:25:6f:e8:d5:15:
         f1:c5:45:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc1MEIxMTAvBgNVBAUTKDY4QzIxODhDMDRDMjBFNDkyM0FCQjYyREI0ODcyNDk4
MzU0QjRBRkQwHhcNMjYwNzIzMDgyOTU1WhcNMjYwNzMwMDgyOTU1WjAYMRYwFAYD
VQQDEw02YTYxZDEwNC1lMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4P7v+x2W0OTRxsZUVHJau6sEEjo1DFzvPLZwfI2jUSmRiUQ21V9WCAAK3Su+
WTUvFcaVGR11c2gH4g2iX7Y17huV8ql9WwZ5/sXdTz4MbTSgiG2shdJYZ2hbRqvG
WND4m/b8mJ9f5Ay9LDWF8jJ9zesvKagmDfZCOR46dLopqnon3rjWF+ZOoknWF1Jw
3tAvy/IApusCnSOepedJMT8TdSWmP/LdZgxPX2izUI2Kh0Xpn2tSGN/lY+098s3F
pH7HPJ2yDlqDeDglGIvAMbc6izHAbrfbRVZV50aSOesviTkbUXrZx1U3lpD05fHS
tL8zfP97xVlCx1ynINBt9kxhGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuRCPhm
GRiKP9q7ua52yHKHOgzqMB8GA1UdIwQYMBaAFGjCGIwEwg5JI6u2LbSHJJg1S0r9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzUwQi81QjFDMUZBRTQ2
OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9hTUlZakFUQ0Rra2pxN1l0dElja21EVkxT
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzUwQi81QjFDMUZBRTQ2OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9hTUlZakFUQ0Rr
a2pxN1l0dElja21EVkxTdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUA9Ofd1W6/BQgbPxk3JoSvVkRc5T0ODvxxg17cqK/3g3BzWmFqvKRznFm2Yg
5UkMHz5UlnUdIRE1WzrTYjsHbxYg2sfk/rOwXLAFPjNXOIs6qsLRFNgxZjq7CZOz
OkuNTizg+4hf4aT36y0Xh7c02QcZcCkwDFj1aeoeF/Hb91egSSvHKQwsXd1m5iIn
4MleVxVg8cKYgdeBpwSbJGonvtRV87d9NUxY5pfU9s7tsn8FP6pyiLsoEfP8++5v
xYSpwXVoeh19wo8LLvZ70dy7y0QiUtrha+IM2nCg3en/nu9jabqo5CpRdzOmOi8R
lUwtHs7bCpdSECVv6NUV8cVFCA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:51 2026 by rpki-client