Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File:                     pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier:          rdvqCiA8omsNwJ7AkEZd/qDXmllWWKhHRR+T6XRQvgo=
Subject key identifier:   7B:E5:92:4E:04:9D:90:11:49:47:6B:87:E7:59:21:B0:AF:4A:95:AB
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer:       /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial:       0616
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number:          060D
Signing time:             Wed 22 Jul 2026 23:35:23 +0000
Manifest this update:     Wed 22 Jul 2026 23:35:23 +0000
Manifest next update:     Wed 29 Jul 2026 23:35:23 +0000
Files and hashes:         1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: ZNIZ3nCzpAfJvQYgGI5UbEm+ij/ixBsqXKO/OFvsLL0=)
                          2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: oGgE9YL0l71OjqSUI9CCSHMTmtmqHzEUM2urYheCFM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
        Validity
            Not Before: Jul 22 23:35:23 2026 GMT
            Not After : Jul 29 23:35:23 2026 GMT
        Subject: CN=6a6153bb-1ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:05:5b:0a:2b:c2:d9:95:60:6d:b0:55:f5:
                    6c:47:93:b6:32:89:35:c4:e7:dd:d1:1e:37:b4:c6:
                    32:72:fd:45:c6:7b:84:54:58:26:0d:14:54:a2:8e:
                    00:4f:09:3d:22:aa:6f:56:e8:68:8e:da:3a:07:00:
                    e7:0c:3d:6b:80:6c:54:a9:95:97:8d:04:72:73:43:
                    f1:11:5f:a4:84:59:57:38:3b:5b:2b:a3:41:b4:47:
                    68:93:98:3b:1f:b5:11:7c:ec:93:24:16:7e:43:3c:
                    bc:8f:5d:d8:71:af:0d:d2:e1:f7:2f:0d:db:5c:5f:
                    e3:5e:53:1a:ad:84:3b:9a:10:61:b5:53:d5:99:cc:
                    25:90:6e:47:8e:5f:4c:5e:57:97:89:1f:62:dd:2c:
                    67:5e:35:73:6f:24:0d:fe:d1:98:2c:bb:06:fe:06:
                    a7:f0:b3:6e:a5:31:27:b1:83:e0:15:e4:c1:2e:40:
                    19:06:f7:fb:76:aa:e7:5d:fc:bc:d3:19:07:3e:b9:
                    1a:f8:85:7f:13:54:dd:d9:20:57:ea:37:21:ae:e2:
                    bf:76:bd:eb:c9:d0:af:61:25:c3:da:04:f8:80:21:
                    a5:cc:7d:a9:79:30:cf:af:ef:25:67:4c:e8:d0:f1:
                    d9:8f:12:ee:09:19:54:cb:86:f8:de:bf:b4:cb:39:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:92:4E:04:9D:90:11:49:47:6B:87:E7:59:21:B0:AF:4A:95:AB
            X509v3 Authority Key Identifier:
                keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:cd:85:d0:de:c3:ff:e5:e6:2b:4c:f1:b1:61:b3:a7:62:
         9b:dc:41:2b:ca:bf:62:a2:74:0a:b2:a9:87:ac:95:d3:64:c2:
         b6:12:7b:b1:da:2d:02:e4:f2:6f:91:95:70:2f:d1:14:02:22:
         56:6f:07:37:e8:a1:1a:e1:f3:6c:21:8d:a6:e5:93:ea:50:f0:
         3b:b2:a6:00:dd:a4:aa:9d:35:d5:e0:9b:a9:8c:cc:59:0f:32:
         ed:fa:a2:e2:d2:ef:17:bf:42:22:f6:31:a9:6c:65:03:24:4c:
         f3:f1:6b:5b:bc:32:fc:43:80:4a:25:e4:01:21:5e:b2:2f:7d:
         09:5e:26:fd:ba:b1:d3:5e:de:24:13:42:10:6a:f1:43:8c:1c:
         19:08:21:2c:be:c1:17:bb:29:c3:10:cc:40:9f:48:a3:8d:55:
         56:3c:55:da:50:b3:e7:42:23:b5:03:5a:b1:bf:fc:f7:d3:46:
         0c:29:9b:8a:e9:05:26:b7:86:a7:ab:5e:36:17:b3:3f:12:db:
         ce:61:e0:a5:cd:ae:62:32:d5:9e:aa:f0:92:99:7f:03:a4:17:
         0d:1d:42:d9:17:3f:7f:88:23:c4:17:49:45:10:69:f7:6d:d1:
         4c:2f:60:c3:cd:d0:f4:d6:7e:0b:81:37:42:55:97:9e:ea:08:
         06:c4:2a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:44 2026 by rpki-client