Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
File:                     tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json)
Hash identifier:          ERQ7rAM48FjXiQxDJoO01aet6H9BTpaPFo/ixmHngVs=
Subject key identifier:   4A:F4:9D:83:13:58:DA:E8:8C:1D:B3:C5:CA:6E:B6:69:53:61:2C:4D
Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
Certificate issuer:       /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
Manifest number:          014F
Signing time:             Thu 23 Jul 2026 06:45:15 +0000
Manifest this update:     Thu 23 Jul 2026 06:45:14 +0000
Manifest next update:     Thu 30 Jul 2026 06:45:14 +0000
Files and hashes:         1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: u2UdBZPvmM04Kpn5fwr7Ia3yA+KZASBiwYpvduG5eMM=)
                          2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: NPEHXK4kvB3m3Mt2iQopHp4B8bUEbfWS8NtHZ6Qe9rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
                          rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
        Validity
            Not Before: Jul 23 06:45:14 2026 GMT
            Not After : Jul 30 06:45:14 2026 GMT
        Subject: CN=6a61b87b-fdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:f1:4b:c5:37:39:86:b2:27:80:13:f8:f0:
                    45:12:67:67:94:1a:b1:0c:a0:28:12:4f:59:e9:bc:
                    ab:27:c3:9d:b0:f0:8d:c3:b4:15:32:7f:b5:c8:6b:
                    44:81:54:69:8b:95:ec:e6:0b:eb:d4:c8:90:5e:8b:
                    69:c2:b5:d6:62:55:e6:f7:00:ee:de:ff:30:37:0f:
                    fa:35:56:d1:62:53:d1:da:b9:6e:ed:fb:f7:d5:58:
                    61:7a:d3:df:f6:cf:a6:8c:ff:78:87:ad:9d:65:68:
                    1c:35:3b:df:f7:ea:8f:ed:c4:7b:29:7c:f2:04:f2:
                    9d:62:57:b2:30:54:6f:dd:d6:9c:9b:a1:49:e8:9e:
                    62:d5:4b:ae:10:25:3b:bd:db:d0:cd:50:a6:5d:3d:
                    fd:90:9c:67:51:c2:0d:4e:c5:49:9d:bc:9b:3e:d5:
                    79:0e:8b:77:2b:2c:ce:49:2d:21:4d:f8:f1:19:55:
                    4f:d0:c7:d1:25:13:d0:82:6d:64:3b:e7:e5:ba:f1:
                    9b:72:ce:60:d4:57:b5:49:e8:29:d3:62:ce:e0:a1:
                    c0:88:df:7e:a4:1d:19:06:30:5d:df:4d:2d:d8:67:
                    15:b9:15:b6:15:2a:26:de:47:5f:b7:f0:69:ad:b3:
                    65:9a:d8:9c:2d:21:bf:13:bd:f3:a4:4f:bc:dc:67:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F4:9D:83:13:58:DA:E8:8C:1D:B3:C5:CA:6E:B6:69:53:61:2C:4D
            X509v3 Authority Key Identifier:
                keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:44:b0:9b:cf:ef:ad:02:ce:67:59:1d:78:55:b4:67:e8:
         03:ec:98:0f:25:02:c4:ca:fe:8a:cb:a5:57:65:4d:ba:5e:5f:
         ae:82:21:3d:4b:87:2d:cb:bc:64:a6:bc:12:48:a4:58:f4:c6:
         35:e6:ab:b4:d6:5e:f1:70:90:af:1e:76:04:95:2a:42:2b:36:
         76:51:f1:a9:17:d8:de:35:8a:09:81:15:95:75:be:c7:f5:7d:
         3b:22:9d:a2:91:ec:79:1b:3b:03:87:be:66:8d:fd:1c:ec:28:
         9a:a3:a6:6c:19:c6:5d:38:6c:d5:29:cb:2b:73:ea:97:57:d6:
         57:85:33:45:60:dc:04:da:96:74:16:fa:18:af:a3:8d:bb:f2:
         29:1b:f3:9a:5e:75:dd:a2:98:87:f2:60:98:77:48:1d:c6:18:
         f0:6f:c8:7f:77:c8:6f:6e:32:fb:1a:63:28:d5:4c:97:c3:c8:
         46:08:d2:66:9d:0c:76:32:67:ed:d7:ba:79:d0:a2:8a:99:73:
         a9:09:c0:4e:07:8f:3f:72:89:9d:75:fc:44:f7:76:a9:b8:eb:
         ab:10:75:e4:2d:9a:64:ac:c8:0a:3b:9e:10:90:b2:c5:ca:2b:
         22:eb:00:35:1c:6c:af:f8:f3:9b:ca:5a:b8:5b:ca:cd:7d:c4:
         01:25:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:54 2026 by rpki-client