Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
File:                     L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json)
Hash identifier:          ar/LrTZzxdAYuJMqC31Hsig7OXtRFvA2LNszBtoTAqc=
Subject key identifier:   32:61:3A:DF:8A:CF:49:E4:D9:26:0A:95:95:C6:37:D5:D8:39:DA:C5
Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
Certificate issuer:       /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
Manifest number:          087E
Signing time:             Wed 22 Jul 2026 21:15:02 +0000
Manifest this update:     Wed 22 Jul 2026 21:15:02 +0000
Manifest next update:     Wed 29 Jul 2026 21:15:02 +0000
Files and hashes:         1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: NVtEHQCNljnMzQrZ3+/ZaB/nlhB32HnB87ZmDNQxXDU=)
                          2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: FbDgkdDDZMbNMRMdVxYm9VIX+tjPFoWLYLBx+uGl7CM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
                          rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
        Validity
            Not Before: Jul 22 21:15:02 2026 GMT
            Not After : Jul 29 21:15:02 2026 GMT
        Subject: CN=6a6132d6-1862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:98:24:67:4a:09:59:6a:ef:5b:2f:d6:cf:
                    1a:ae:b6:b3:60:73:0c:89:18:6b:f5:a4:41:f7:75:
                    63:a1:54:f5:5f:44:65:61:62:e1:f7:be:dc:a3:e2:
                    f8:53:cc:58:fa:ca:b4:5b:01:60:cb:71:8d:f6:55:
                    73:b7:b0:47:0b:e9:42:12:5f:df:77:ea:19:07:51:
                    7d:6d:21:a3:3d:f8:26:b2:35:ea:4a:95:16:8a:5d:
                    f8:a1:11:f3:ee:55:50:1a:d6:55:32:5e:1c:dd:e6:
                    3f:bf:99:2a:81:1e:9a:8b:d2:58:3d:20:1f:fc:c4:
                    f7:f8:6e:73:de:31:dc:24:4d:4e:bf:7c:62:2f:41:
                    aa:19:f5:5e:4a:9e:a2:c5:72:99:92:cc:48:17:e6:
                    a6:73:89:2e:f6:c3:9c:97:5a:a4:2b:da:ec:09:56:
                    3b:5e:e2:86:08:27:17:10:92:b5:8f:8a:02:c5:04:
                    13:76:39:4a:40:bd:40:a4:d6:f3:b5:69:50:c7:48:
                    4b:5f:9b:3d:0f:36:12:1f:37:89:3e:25:8c:11:bf:
                    e0:f3:ea:5e:d5:ab:57:70:70:ae:b5:c5:8e:90:2b:
                    af:c7:49:e9:eb:e3:18:c8:71:ec:18:0a:2f:ed:da:
                    e7:fd:55:0d:30:97:ce:d6:e2:e6:7b:b8:37:d8:53:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:61:3A:DF:8A:CF:49:E4:D9:26:0A:95:95:C6:37:D5:D8:39:DA:C5
            X509v3 Authority Key Identifier:
                keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fe:c7:78:22:cb:de:82:2b:78:de:20:43:3b:56:c6:f0:75:
         47:68:1a:87:1d:e8:83:f3:6c:a2:13:0c:08:62:bc:7b:1b:9d:
         cb:1b:87:b5:ff:95:25:fd:8c:24:65:68:f3:07:48:73:e0:88:
         70:b2:3f:87:38:70:59:67:ad:ca:8e:32:60:0e:68:80:55:96:
         95:3a:aa:05:b4:ac:fc:1e:5f:ed:7c:81:9b:f0:59:21:c5:b5:
         70:aa:a2:33:37:c1:1c:a1:3a:46:29:b2:fe:63:f5:e7:fe:df:
         b2:d6:e8:c9:ca:db:38:31:5d:6c:9c:8c:74:36:e9:f4:d9:91:
         ac:6e:cb:c3:7c:b7:25:af:fa:fb:f9:f3:00:f7:7d:d8:c5:7e:
         dd:ff:fc:fe:97:80:cc:13:ca:70:74:2c:20:7f:6c:90:65:ef:
         3b:35:97:96:db:21:af:94:8a:23:6c:58:ea:ea:2e:31:bd:b5:
         70:3c:85:d6:9c:c1:68:6f:cf:9e:5a:e3:2b:59:9b:45:b9:86:
         28:df:c3:7d:78:d5:1a:76:4a:01:87:63:70:71:47:ad:a9:17:
         0f:00:7f:85:81:7a:ae:b7:5d:f5:eb:4c:a9:6a:3c:3f:5f:93:
         bc:80:2c:a7:46:7f:92:55:e5:5c:89:87:f8:de:ee:7c:2d:b4:
         3b:3b:f3:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND
QkYyMzk4RTUwHhcNMjYwNzIyMjExNTAyWhcNMjYwNzI5MjExNTAyWjAYMRYwFAYD
VQQDEw02YTYxMzJkNi0xODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0gOYJGdKCVlq71sv1s8arrazYHMMiRhr9aRB93VjoVT1X0RlYWLh977co+L4
U8xY+sq0WwFgy3GN9lVzt7BHC+lCEl/fd+oZB1F9bSGjPfgmsjXqSpUWil34oRHz
7lVQGtZVMl4c3eY/v5kqgR6ai9JYPSAf/MT3+G5z3jHcJE1Ov3xiL0GqGfVeSp6i
xXKZksxIF+amc4ku9sOcl1qkK9rsCVY7XuKGCCcXEJK1j4oCxQQTdjlKQL1ApNbz
tWlQx0hLX5s9DzYSHzeJPiWMEb/g8+pe1atXcHCutcWOkCuvx0np6+MYyHHsGAov
7drn/VUNMJfO1uLme7g32FM7lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJhOt+K
z0nk2SYKlZXGN9XYOdrFMB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1
MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNENi8xMzlFMTI0NDA1MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5
elVmbVhNd01uRnpMOGptT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdP7HeCLL3oIreN4gQztWxvB1R2gahx3og/NsohMMCGK8exudyxuHtf+VJf2M
JGVo8wdIc+CIcLI/hzhwWWetyo4yYA5ogFWWlTqqBbSs/B5f7XyBm/BZIcW1cKqi
MzfBHKE6Rimy/mP15/7fstboycrbODFdbJyMdDbp9NmRrG7Lw3y3Ja/6+/nzAPd9
2MV+3f/8/peAzBPKcHQsIH9skGXvOzWXltshr5SKI2xY6uouMb21cDyF1pzBaG/P
nlrjK1mbRbmGKN/DfXjVGnZKAYdjcHFHrakXDwB/hYF6rrdd9etMqWo8P1+TvIAs
p0Z/klXlXImH+N7ufC20OzvzDA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:10 2026 by rpki-client