Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File:                     mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier:          q8O4A0rJUXu5nVgCPRJKbvXTeGU+HO5ZpT/lOGxVwjE=
Subject key identifier:   16:3E:E1:D3:62:59:DF:C0:59:D3:BB:93:87:B4:76:D4:E7:2E:39:89
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number:          DA
Signing time:             Thu 23 Jul 2026 09:36:57 +0000
Manifest this update:     Thu 23 Jul 2026 09:36:57 +0000
Manifest next update:     Thu 30 Jul 2026 09:36:57 +0000
Files and hashes:         1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: wNI3Rgao0wrUX/C3Hnb6/kNKmocT16WO4G1FSX40ARY=)
                          2: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (hash: AgB/Lpuse8T/z5cV67IzFShDTNVxyKAZ8KwUvRhawFQ=)
                          3: B4B21A80C92411F099228126C4F9AE02.roa (hash: rjpeXMm4lHb5Ck0Ms0tdS2iF+f13HUBBUzVVJWV4PPM=)
                          4: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: BXcg8YArXJ5CmD6evpZM4dq8jMTCCVwQHO6BvkW3b7g=)
                          5: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: 18KHmFviCpW+1MpSyrjZy2QFKZiIGjy/6kV7DRcX0Y8=)
                          6: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: +Aqpgsv63vqmtQkR3ggdxV7iptUt9Fzgpnq420IOOtc=)
                          7: 0CAE2A9E71F411F1A5B2C1D970A30FBC.roa (hash: rlDXqQrWygilY/rnu+YsYCbI9x0JZnN2y8s4ah/lzhg=)
                          8: 576F51B8C91911F0AB974C6DC4F9AE02.roa (hash: B7o39MCNiwPkqimijPdHtCcLEzghu38rFNT9tzx72Xo=)
                          9: 9F9D4E9EC91A11F08745C673C4F9AE02.roa (hash: iYpQ7cVbxOGpGyj+MLYh3y7Qiox2JCzWYbEYeJID7GU=)
                          10: B2815168C92411F0B6E88126C4F9AE02.roa (hash: CKGad+jxEPQI1Q563YDVR4xdQQ2X4PcTAVEPopEqkPg=)
                          11: A87058D8445111F196638493CB833773.roa (hash: hjmeDeK8OqpXBY0QHMz/cAiPa+eSBTe6PN1y5++7MO8=)
                          12: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: k/R5dEj2eRfr7v4Cwra7e+lRrjtz7qmR7/pXUFo+/fk=)
                          13: 86DAE3A04A8C11F188553DBDAC833773.roa (hash: /cmAtIFJsaYzPWu1xv/Moo/JrJ9wB/SowewT12UuOCc=)
                          14: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: yEb+i+mak4WjK+zJpb4ckWnaPd4JzdPaxKZm8fn0XYU=)
                          15: B1E31BF6C92411F087908126C4F9AE02.roa (hash: GQFH/AinoWYWy/+S33nOX1sOOYYuDreBoZl3vsEFu7k=)
                          16: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: 5dwmeSZ0SRVIGYAiO2cL5WhMdIRKKwW4wqbG2GaMUhM=)
                          17: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: tNXsHZohUwAzxEAZYS9aP/mod2gm0YLp4U1BMbJHsAQ=)
                          18: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: hVwh2ep8Iw7o7hX3MNdhNDewDGbex1WLUmhHf+4i9PI=)
                          19: 1C2DE6A6D4A311F08D323E54C4F9AE02.roa (hash: tfqU0yp7k06G8a+YLVOyxW/4efWaKePEWJ7Jmic77aU=)
                          20: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: BGmFZ9dRfD8EZt0V672OP6EF10Q8PY5YgUnIZ7TDMZ4=)
                          21: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: tyQ+cSqsH2Qv0ddD7XoDmKPDoTkmyW/CRBZ+upSwUfo=)
                          22: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: sY76HWNe2DtCJtYS74CJx7prfOKVaNPpOF+PUbbT4H0=)
                          23: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: 3N14qaLKIE8BN0vWJd2KtmivGDsUthfcKYgKyJWVe3U=)
                          24: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: /+8j5V7Q4inRuiyHFTWZNWPR7MOmulWdNP3/6QLql64=)
                          25: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (hash: V4KzQo4wZ81qbo+MqiN5pgO8Y+Nc0vatL2esSSR0mec=)
                          26: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: d71K3UhmJpGSIPnHwtXjuIVmSy3U1s/D91e+1fG5beE=)
                          27: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (hash: ZW6jL59jikFz0FLaafnNnq4L3V9q7AF9K/n1i2MST+s=)
                          28: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: C7uwuCI7TqrSFDaQH8Zzgy3OnejNXfnU7UwlS3rMRx4=)
                          29: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: DHpdbRF2Zso6P1hxGHzUsRdlrbKQ33Y/CNHuuhJjb5g=)
                          30: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: S9XUSJnxKvgsBDvTpONrUcHMGtxkSO4X3tK4EZVr99k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Jul 23 09:36:57 2026 GMT
            Not After : Jul 30 09:36:57 2026 GMT
        Subject: CN=6a61e0b9-f5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:bc:a3:46:95:b8:77:98:5b:8d:c1:4f:7b:
                    00:2f:e8:5c:75:f0:81:c2:eb:3a:18:c4:17:c5:29:
                    b8:85:0d:7c:03:be:10:4b:df:d0:29:20:34:35:5f:
                    df:f1:d1:29:d4:49:83:5a:08:b2:01:75:43:fd:79:
                    c9:12:19:f2:6c:61:5e:e9:05:5a:d7:64:77:00:66:
                    6d:2d:c0:50:41:ed:9f:8c:57:6f:72:15:08:17:0c:
                    c5:01:60:00:02:0f:9b:7a:94:3e:0e:d4:c1:30:ee:
                    6f:5c:40:a4:25:6f:e4:7b:18:16:b9:c2:b6:99:94:
                    b9:7a:2c:31:b7:e1:22:79:d2:fc:7d:61:4b:57:4c:
                    15:07:9a:05:80:7c:be:3d:f4:8c:c5:de:4b:2d:ad:
                    cf:d6:fe:31:26:d9:52:38:45:e6:25:8d:67:90:78:
                    f5:52:67:ff:a1:03:9f:92:cd:41:b4:82:6d:0f:fa:
                    74:cd:34:93:f8:ba:10:db:e3:65:8f:bf:75:4e:cf:
                    46:e5:4f:6f:c8:c4:04:7e:f9:c3:40:03:05:29:94:
                    8c:cc:72:24:e2:e3:74:57:63:e2:8a:63:bf:47:e2:
                    69:1d:bb:0e:eb:66:2c:1d:b1:6d:5f:1d:36:e7:d9:
                    b0:41:12:b3:5d:6c:a3:c8:70:a7:9c:78:0a:20:e4:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3E:E1:D3:62:59:DF:C0:59:D3:BB:93:87:B4:76:D4:E7:2E:39:89
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:98:81:c1:00:69:aa:fb:35:a6:95:20:24:4a:fc:8c:9d:57:
         7c:89:be:ad:be:91:2b:2f:ce:03:11:bb:4e:55:68:9f:58:0b:
         74:d9:fe:f8:82:20:b2:69:04:1d:c0:ff:90:a6:44:0e:28:b7:
         ef:ee:02:9b:07:26:38:67:39:5a:42:f0:1b:fe:fd:df:4a:3d:
         9e:0f:9a:98:a4:d0:06:88:2d:ae:4d:49:fb:4c:8a:42:91:60:
         f1:98:ed:b3:0a:dc:70:5e:5e:dc:f6:52:4c:59:c7:21:15:72:
         5a:cd:81:9c:06:8c:48:ab:48:cc:c4:29:4f:67:64:17:79:a6:
         71:11:a0:50:fa:3b:d1:84:31:bf:d5:e1:b4:82:1a:3b:2a:9f:
         94:30:cf:91:9c:6a:50:03:fc:fd:dc:f7:4e:c7:d8:6c:f9:2f:
         c5:4f:b9:34:e2:3c:3d:66:e0:d3:de:92:6b:85:1d:47:1f:59:
         f7:02:5f:16:d6:0b:a0:0a:10:00:e5:1c:4b:c1:b9:87:94:67:
         6b:4b:0a:e4:43:ab:18:7f:c1:de:5d:d2:42:a8:4f:c0:10:d2:
         25:ae:55:e7:d7:d6:07:5c:6a:a1:63:67:62:b3:32:20:28:9d:
         18:78:bb:ce:97:b4:08:91:f0:28:87:ea:ed:35:c4:97:5a:e3:
         1e:40:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:32 2026 by rpki-client