Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
File:                     sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json)
Hash identifier:          Q3bQFqrP8CS3CFq5xX0gA6cKMha/Tkhun6bBN3+R2Jk=
Subject key identifier:   69:46:48:53:10:EC:D5:2E:D6:F5:D2:9A:6C:1A:FF:EB:F6:08:3E:C9
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Certificate issuer:       /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial:       02CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
Manifest number:          02C1
Signing time:             Thu 23 Jul 2026 02:22:58 +0000
Manifest this update:     Thu 23 Jul 2026 02:22:58 +0000
Manifest next update:     Thu 30 Jul 2026 02:22:58 +0000
Files and hashes:         1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: pSKFejhZoYxMtS+coslHH8TcYwfWr+mn2N3h7OPVQRI=)
                          2: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=)
                          3: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
                          rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
        Validity
            Not Before: Jul 23 02:22:58 2026 GMT
            Not After : Jul 30 02:22:58 2026 GMT
        Subject: CN=6a617b02-578b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:52:76:45:61:c7:c9:2b:92:45:e8:3f:b8:
                    d5:52:20:83:cf:bb:9f:7f:7c:89:64:fd:c5:97:02:
                    88:23:b8:f4:ac:b4:76:30:93:44:26:61:3c:24:ca:
                    53:89:2e:6d:a6:4a:4a:e5:4d:fd:85:09:83:9a:cb:
                    ca:a8:73:a6:91:23:63:67:88:53:0c:05:5f:fc:b0:
                    ca:03:57:4c:12:88:0c:1d:be:5d:af:b1:5b:52:f8:
                    43:68:a0:3e:a4:61:0d:08:e1:08:4e:19:ac:8d:8a:
                    51:ac:c4:8a:eb:04:3b:28:01:aa:d5:d8:f6:7c:62:
                    8e:3f:0a:13:33:90:e5:76:4a:1d:61:df:17:71:68:
                    52:37:3a:b3:46:37:57:e5:d8:49:aa:b1:1a:0c:4d:
                    23:07:28:8b:bf:35:71:44:e9:6a:c9:49:97:1f:56:
                    58:3c:1d:ce:07:5c:a7:ba:d9:75:95:4f:c6:5e:2e:
                    18:4a:71:ad:fb:23:b5:35:93:fa:d2:66:57:f5:0c:
                    69:73:24:c5:24:6c:76:77:12:5e:5d:18:76:4d:e4:
                    86:55:d2:1a:f3:70:cb:3b:6b:18:5e:30:9c:09:8b:
                    55:32:2f:54:e9:2e:32:24:d6:15:ea:85:78:02:21:
                    41:84:83:20:47:87:cc:fe:69:1e:92:9d:b7:ff:59:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:46:48:53:10:EC:D5:2E:D6:F5:D2:9A:6C:1A:FF:EB:F6:08:3E:C9
            X509v3 Authority Key Identifier:
                keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e3:97:48:79:49:a1:47:1f:2f:5c:22:26:ba:ce:c6:9d:bd:
         6b:61:c5:7b:d8:c8:22:f6:0e:f1:1e:f5:11:83:4c:e7:b0:37:
         06:24:c3:d6:f6:30:59:32:cb:73:19:91:38:53:bc:59:88:3e:
         d6:f1:a7:ed:a0:5d:fd:33:50:04:68:c6:c7:dd:3b:6d:4b:de:
         53:0c:bd:d0:3e:25:4d:dd:ad:51:a5:08:67:3d:68:9c:8c:7c:
         7a:62:37:42:76:23:33:dc:5e:93:c2:b3:2f:67:11:0b:13:50:
         be:cd:61:5e:54:07:19:b6:6c:47:13:ac:a6:ba:06:7d:62:d5:
         e7:45:00:a8:f7:67:6c:c9:40:5d:82:b0:1f:0e:05:d0:7c:21:
         2e:c9:2c:a3:b1:6d:d3:85:04:5a:53:2a:03:91:05:05:90:b1:
         7b:69:7b:04:cb:8b:28:f1:34:f6:61:e4:4d:3e:8f:d1:ba:49:
         34:18:52:23:bd:9c:c1:cd:54:78:74:da:41:87:4a:37:1c:06:
         c4:cf:da:58:49:a3:b5:bc:0f:00:f2:46:50:91:39:b6:91:58:
         95:3f:43:61:2a:1b:cf:ab:c2:7c:b6:06:78:85:85:29:54:ac:
         d4:29:f2:24:c6:9a:e5:a9:14:d1:06:61:d8:01:e9:28:e7:8a:
         69:1b:d2:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4
RUU0QUYxQ0QwHhcNMjYwNzIzMDIyMjU4WhcNMjYwNzMwMDIyMjU4WjAYMRYwFAYD
VQQDEw02YTYxN2IwMi01NzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnOpSdkVhx8krkkXoP7jVUiCDz7uff3yJZP3FlwKII7j0rLR2MJNEJmE8JMpT
iS5tpkpK5U39hQmDmsvKqHOmkSNjZ4hTDAVf/LDKA1dMEogMHb5dr7FbUvhDaKA+
pGENCOEIThmsjYpRrMSK6wQ7KAGq1dj2fGKOPwoTM5DldkodYd8XcWhSNzqzRjdX
5dhJqrEaDE0jByiLvzVxROlqyUmXH1ZYPB3OB1ynutl1lU/GXi4YSnGt+yO1NZP6
0mZX9QxpcyTFJGx2dxJeXRh2TeSGVdIa83DLO2sYXjCcCYtVMi9U6S4yJNYV6oV4
AiFBhIMgR4fM/mkekp23/1maBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlGSFMQ
7NUu1vXSmmwa/+v2CD7JMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0
MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto
MndRbDV6WjlWY0tPNUs4YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUOOXSHlJoUcfL1wiJrrOxp29a2HFe9jIIvYO8R71EYNM57A3BiTD1vYwWTLL
cxmROFO8WYg+1vGn7aBd/TNQBGjGx907bUveUwy90D4lTd2tUaUIZz1onIx8emI3
QnYjM9xek8KzL2cRCxNQvs1hXlQHGbZsRxOsproGfWLV50UAqPdnbMlAXYKwHw4F
0HwhLskso7Ft04UEWlMqA5EFBZCxe2l7BMuLKPE09mHkTT6P0bpJNBhSI72cwc1U
eHTaQYdKNxwGxM/aWEmjtbwPAPJGUJE5tpFYlT9DYSobz6vCfLYGeIWFKVSs1Cny
JMaa5akU0QZh2AHpKOeKaRvS+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:34 2026 by rpki-client