Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
File:                     dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json)
Hash identifier:          d1z5y0bxSTagkfzNDl1tAnV+EzE8mMSldxadwg+/VKs=
Subject key identifier:   5B:40:A6:E8:8D:D4:7C:16:ED:65:82:8C:7F:DC:FE:BE:C5:42:59:50
Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
Certificate issuer:       /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
Manifest number:          014F
Signing time:             Thu 23 Jul 2026 05:12:40 +0000
Manifest this update:     Thu 23 Jul 2026 05:12:39 +0000
Manifest next update:     Thu 30 Jul 2026 05:12:39 +0000
Files and hashes:         1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: +zpoCI6Nsi1bxsLvzudjUGeTtfDhPIwNLDMMyAsj8io=)
                          2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: 845Y2aA2itdhNFcJh2u6MWKd/R973iis1jKrvrdf6+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
        Validity
            Not Before: Jul 23 05:12:39 2026 GMT
            Not After : Jul 30 05:12:39 2026 GMT
        Subject: CN=6a61a2c8-18b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c8:e6:29:20:18:70:03:4f:d3:2a:57:96:2c:
                    a8:c6:60:2d:9a:91:49:80:3f:11:5d:18:14:2c:46:
                    c2:b4:da:35:54:7b:71:26:f7:66:3c:7c:42:72:56:
                    a7:16:85:01:d9:87:62:0d:e6:d1:dc:77:f7:eb:9a:
                    44:6c:5e:e0:f7:05:71:38:a6:1b:95:77:9b:9d:71:
                    99:42:1f:a0:36:b9:74:ef:64:32:e6:e4:3e:db:f9:
                    78:51:04:7d:1d:38:ce:a9:f4:f7:4d:26:1f:c4:31:
                    5f:dc:4a:c5:83:f8:57:7a:dc:49:06:f5:6f:94:15:
                    71:0a:9d:5c:f8:ea:96:dd:cb:f2:33:1c:e0:f1:cd:
                    48:31:da:79:d9:af:0c:de:04:a9:de:b5:39:52:be:
                    96:19:20:dd:e3:69:2b:89:cc:3b:b3:79:c2:d5:ee:
                    d9:a0:8f:7c:c6:08:c1:37:7b:9f:09:88:86:5d:df:
                    a7:a0:8a:8f:c6:a4:8a:33:9f:fc:12:be:a2:20:8c:
                    62:6b:09:b0:d6:5b:6b:ad:c4:6a:9c:1c:06:78:7c:
                    00:76:2a:8f:1c:b9:8d:49:2b:05:83:b6:00:3d:d4:
                    79:21:17:1a:41:53:63:8f:0c:d5:f1:88:f9:84:1e:
                    c6:86:c0:1f:bc:d0:30:72:42:ad:57:5d:cf:fd:20:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:A6:E8:8D:D4:7C:16:ED:65:82:8C:7F:DC:FE:BE:C5:42:59:50
            X509v3 Authority Key Identifier:
                keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:46:ff:ab:af:6d:9a:f8:57:b4:a1:6c:18:50:8f:aa:f0:ab:
         e0:7b:26:ec:02:ca:ef:5f:e5:56:18:93:f9:6c:b0:da:01:7d:
         0e:42:57:35:6e:5e:65:16:2a:5e:33:57:10:c4:fe:9e:01:9b:
         c1:af:fd:91:f4:57:74:fb:12:80:c3:2b:30:0a:29:bb:99:15:
         24:c9:21:40:0c:41:2b:0d:dc:2a:aa:95:76:d5:e6:fa:0a:4e:
         b3:d0:94:53:25:df:b2:a8:3a:ac:63:7e:91:f7:53:bb:3b:a6:
         b9:49:7f:64:d3:d8:fd:4c:6f:31:11:44:af:f8:5e:55:d3:dc:
         2e:9e:2b:33:68:24:67:e6:8a:2a:2e:4a:7e:12:0c:c8:d6:1f:
         61:da:5c:13:2b:51:32:c1:51:cf:1f:ad:b1:c4:f7:30:6d:9e:
         26:11:be:82:fd:d2:34:87:53:18:e5:43:e4:ce:49:ef:34:09:
         3c:90:8b:80:a9:f7:95:08:20:49:bf:d6:b3:8a:99:76:2a:f8:
         e4:c9:bb:df:d3:92:16:5d:74:2a:86:9b:a2:1b:40:bb:a7:fe:
         f7:33:0e:d0:04:04:c9:0f:04:d8:e9:af:86:cd:e6:f5:78:7f:
         77:3c:cc:06:2c:1b:79:a0:af:d0:09:be:84:a2:6e:ed:e7:0d:
         67:b5:87:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU1M0MxMTAvBgNVBAUTKDc0NDU5MzM2MzdDQ0EzMDlBNEMxNjFBQkZFREY4Nzc5
Q0IyQUIxM0YwHhcNMjYwNzIzMDUxMjM5WhcNMjYwNzMwMDUxMjM5WjAYMRYwFAYD
VQQDEw02YTYxYTJjOC0xOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA78jmKSAYcANP0ypXliyoxmAtmpFJgD8RXRgULEbCtNo1VHtxJvdmPHxCclan
FoUB2YdiDebR3Hf365pEbF7g9wVxOKYblXebnXGZQh+gNrl072Qy5uQ+2/l4UQR9
HTjOqfT3TSYfxDFf3ErFg/hXetxJBvVvlBVxCp1c+OqW3cvyMxzg8c1IMdp52a8M
3gSp3rU5Ur6WGSDd42kricw7s3nC1e7ZoI98xgjBN3ufCYiGXd+noIqPxqSKM5/8
Er6iIIxiawmw1ltrrcRqnBwGeHwAdiqPHLmNSSsFg7YAPdR5IRcaQVNjjwzV8Yj5
hB7GhsAfvNAwckKtV13P/SCSgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtApuiN
1HwW7WWCjH/c/r7FQllQMB8GA1UdIwQYMBaAFHRFkzY3zKMJpMFhq/7fh3nLKrE/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy8yOUI4Njk5NDkw
M0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93bWt3V0dyX3QtSGVjc3Fz
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTUzQy8yOUI4Njk5NDkwM0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93
bWt3V0dyX3QtSGVjc3FzVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl0b/q69tmvhXtKFsGFCPqvCr4Hsm7ALK71/lVhiT+Wyw2gF9DkJXNW5eZRYq
XjNXEMT+ngGbwa/9kfRXdPsSgMMrMAopu5kVJMkhQAxBKw3cKqqVdtXm+gpOs9CU
UyXfsqg6rGN+kfdTuzumuUl/ZNPY/UxvMRFEr/heVdPcLp4rM2gkZ+aKKi5KfhIM
yNYfYdpcEytRMsFRzx+tscT3MG2eJhG+gv3SNIdTGOVD5M5J7zQJPJCLgKn3lQgg
Sb/Ws4qZdir45Mm739OSFl10KoabohtAu6f+9zMO0AQEyQ8E2Omvhs3m9Xh/dzzM
BiwbeaCv0Am+hKJu7ecNZ7WHfg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:56 2026 by rpki-client