Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File:                     vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier:          49HsZKTcwpYSm42pwFy9S8ba4OjV66WOsusbyE/tZnk=
Subject key identifier:   DD:A5:B2:33:4C:B6:5A:AF:0F:C6:E3:4B:17:89:81:86:40:FB:4B:0F
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer:       /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number:          0116
Signing time:             Thu 23 Jul 2026 07:38:06 +0000
Manifest this update:     Thu 23 Jul 2026 07:38:06 +0000
Manifest next update:     Thu 30 Jul 2026 07:38:06 +0000
Files and hashes:         1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: X5j9an1rhHgSEx+zohkGafzPgGmsYZmhY+N/4Qpf2+o=)
                          2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: roA3vy8x+jf66csilJCthToT1WHohR3rxK/y2E1bU7k=)
                          3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: 06Hho+RJykAUvzboSlu1tF6rcNxA0i0LVsGzl68LWWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
                          rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
        Validity
            Not Before: Jul 23 07:38:06 2026 GMT
            Not After : Jul 30 07:38:06 2026 GMT
        Subject: CN=6a61c4de-8f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:88:d4:1f:a2:e1:7d:93:14:2b:e1:3e:54:
                    a6:a6:b2:c7:0c:72:8a:ef:73:63:4b:84:a7:ac:b0:
                    75:28:7c:e1:07:67:03:59:c0:1f:94:9d:cd:c7:1b:
                    58:a7:11:06:cf:c2:15:42:bb:b1:59:6f:87:90:5a:
                    47:bc:c8:fd:35:9e:ce:2a:6f:08:86:b8:1b:87:12:
                    62:68:1e:69:b4:89:dd:86:9b:ba:b8:26:a5:49:1e:
                    b3:95:29:c9:c1:3b:ae:e8:cb:7c:50:df:ec:8d:70:
                    1c:66:cf:86:25:e0:e6:51:e3:c6:64:a0:2f:71:bf:
                    4b:4e:48:8c:be:c0:b4:ef:5b:2a:83:b3:13:95:fb:
                    ee:e2:6f:56:2f:d7:69:a8:6a:43:ea:33:f4:02:d6:
                    9f:22:c5:80:41:f9:25:48:d5:50:1a:fb:ce:a0:c1:
                    f0:9d:11:2b:87:88:52:82:84:d7:11:f0:ca:98:65:
                    41:d9:39:1f:88:1f:ca:c6:e5:05:75:7c:82:e4:d1:
                    73:3b:d8:5d:78:30:91:39:ac:e4:1c:19:e8:39:90:
                    8d:f0:2a:9e:24:43:ba:e8:f2:7e:92:c9:ec:29:73:
                    8b:a4:6c:57:db:10:2e:35:85:bd:80:b6:55:32:84:
                    cc:01:a5:be:ed:70:8d:ce:0f:02:8e:b5:4f:7b:24:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A5:B2:33:4C:B6:5A:AF:0F:C6:E3:4B:17:89:81:86:40:FB:4B:0F
            X509v3 Authority Key Identifier:
                keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:9f:97:27:b6:75:0a:92:2c:ba:e0:b2:d5:40:bb:f1:23:
         4e:5f:ca:03:03:59:5c:73:c1:68:4f:a6:f6:31:31:9c:62:15:
         a8:79:58:c5:85:2c:39:93:8e:aa:5c:7a:df:74:95:72:8e:0c:
         81:e5:c0:06:f8:58:be:8a:85:4e:97:e8:f4:0a:26:d1:af:40:
         4e:58:e5:0b:16:46:a1:37:fe:3c:bc:50:b4:ac:8c:72:78:3d:
         f9:98:6e:5e:83:f1:e5:81:4d:ad:37:03:1b:a5:b3:51:97:4f:
         78:c9:b9:63:20:3e:c6:bf:5b:02:6c:3f:4e:db:89:ec:63:5d:
         3d:91:85:a1:98:34:ba:a4:f3:7a:96:ae:3a:b0:bb:8f:c5:6b:
         23:a9:b7:f7:2c:31:75:7b:1d:f9:51:e3:c4:5f:8e:8a:78:40:
         d7:12:ec:bb:06:2b:5a:fb:44:c1:53:e7:6a:90:fb:e9:0f:05:
         ce:dd:42:d4:13:7a:94:30:40:78:39:09:ca:22:97:e9:45:d2:
         40:38:6a:9e:58:7e:54:3e:d9:4d:60:4a:de:81:8a:4f:2c:fd:
         1f:aa:52:7b:18:9b:c3:d5:be:fd:d9:c0:8a:03:ed:5d:6f:ff:
         25:b9:e7:f8:63:8d:42:a7:bf:15:cd:e3:ac:59:73:20:42:75:
         0c:93:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:36 2026 by rpki-client