Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File:                     tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier:          WBMdlaFfmVsi7CCQFssS2kmlNr+uVZU0hdrs688/In0=
Subject key identifier:   0D:48:06:0D:E5:1B:51:CB:20:3C:2E:27:F2:4A:35:28:1E:7A:95:23
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number:          0261
Signing time:             Thu 23 Jul 2026 03:36:09 +0000
Manifest this update:     Thu 23 Jul 2026 03:36:08 +0000
Manifest next update:     Thu 30 Jul 2026 03:36:08 +0000
Files and hashes:         1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: cV0rVisKG6hP3Fjn5UQVVJGduNebDsK+6ghPVOaj9sQ=)
                          2: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: j+rKZJevpIGC1sf1OUnZrF6Qqhjbev7FmmF2TRVvEEw=)
                          3: 873859B668B611F1BCF0B20C8047A888.roa (hash: d1SNYZWaVbryjJEHjH/MKwp9BUf25csFWp3ecF+3wG0=)
                          4: C94C5FD4163911F1B9B26C9A3C3D8C67.roa (hash: +zla8jcELBJaZ3BFgMyMqxEKvzL0rhi9mZn3jgAoW0s=)
                          5: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: cV1FUQ8j7Fc28oanTu0oeEUibe4kPctH/MKiCjzAiiQ=)
                          6: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: CYyBpgev2I8lIYy5euAo+T58y5gvQtb1JaMBoaDc3j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Jul 23 03:36:08 2026 GMT
            Not After : Jul 30 03:36:08 2026 GMT
        Subject: CN=6a618c29-66e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:c3:77:13:3e:94:d0:8f:60:df:a8:4e:2b:
                    ec:c0:ac:09:76:b5:ee:87:6b:b1:93:f2:fa:2c:4c:
                    8e:18:34:4e:20:fe:2b:eb:21:9e:55:f3:1b:47:f2:
                    54:af:93:22:8d:45:30:bb:78:ef:06:03:9a:75:fa:
                    37:6c:94:bb:48:0e:fe:1d:8b:fc:fa:38:c6:0d:49:
                    ec:08:a1:8b:8c:d1:66:c3:34:dc:bd:2c:70:0b:e7:
                    3d:a6:78:52:74:f0:52:f0:d6:f0:12:12:04:d7:d9:
                    33:c7:d1:ba:2b:85:2c:26:e2:33:86:d0:6f:3f:4a:
                    dc:7f:59:fd:fa:85:7a:70:52:36:b5:d6:c5:ed:8d:
                    85:93:8a:da:4a:12:f2:ba:b7:74:e2:59:8d:ee:d0:
                    39:ce:ac:01:f1:9f:12:76:04:b7:9c:32:af:b7:99:
                    29:bc:91:9c:a8:cb:6c:36:9c:17:ef:34:84:40:ec:
                    fc:d2:6f:f1:5a:6f:ee:f2:20:38:c3:7d:01:a3:a8:
                    62:1b:16:aa:d3:57:9d:b1:2d:38:69:82:81:dd:e4:
                    1a:0a:53:e1:e9:f1:c2:54:97:be:c7:d1:40:d8:8e:
                    ef:7f:14:cc:9e:60:98:e6:10:7e:e2:d8:3f:77:a2:
                    01:31:4f:15:d4:1a:ce:c2:99:a0:d1:f9:97:86:a9:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:48:06:0D:E5:1B:51:CB:20:3C:2E:27:F2:4A:35:28:1E:7A:95:23
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:97:dd:4f:46:d1:4d:be:14:bd:56:5b:22:3c:30:49:df:de:
         ca:1a:3b:0e:9a:f6:e2:80:89:13:6d:22:a7:4b:88:8e:76:9b:
         be:ac:45:4c:42:7a:a9:40:22:91:01:f5:cf:4f:87:9e:44:80:
         c5:0a:53:6c:92:c2:73:d4:c7:bf:13:80:26:28:3d:0b:b5:c3:
         9d:2e:97:0a:05:30:fa:91:92:03:72:01:16:8e:27:f1:9a:17:
         8e:c0:ad:68:88:a8:83:d0:15:ed:47:5f:75:88:fc:62:b4:6b:
         af:6b:84:99:ad:db:ad:6a:15:ac:4d:c0:f1:cd:30:2b:83:f1:
         b9:e7:19:06:c8:4c:64:ca:59:8b:03:47:8d:2e:2d:f9:74:fa:
         4e:f0:8a:72:d4:ac:30:b0:e3:66:52:0f:2b:e3:c2:dc:4e:a3:
         4b:76:bd:37:32:2c:73:d8:7b:c5:a2:58:1b:ea:82:ca:9e:c9:
         ad:37:60:fe:40:ff:30:18:86:2d:99:40:99:83:3a:37:11:c6:
         af:f5:72:d0:e9:9e:7f:37:a6:02:5e:15:65:d9:f7:cf:f2:a1:
         6f:88:1a:8a:b7:a6:43:04:01:11:0b:44:15:59:f0:18:81:c1:
         42:a8:de:6a:c8:dc:b1:e6:cf:e9:ce:c9:4c:ff:0c:11:e8:c7:
         12:79:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:53 2026 by rpki-client