Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
File:                     mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft (raw, json)
Hash identifier:          /UtcuwHg7cG3AWkLM1tGUpD8xkuwa+KYr3P6N6Xu2bM=
Subject key identifier:   D7:06:1A:CD:EF:3F:D0:9F:34:73:93:59:5B:1F:1E:28:AC:25:91:65
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Certificate issuer:       /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial:       112A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
Manifest number:          10E7
Signing time:             Wed 22 Jul 2026 17:30:18 +0000
Manifest this update:     Wed 22 Jul 2026 17:30:17 +0000
Manifest next update:     Wed 29 Jul 2026 17:30:17 +0000
Files and hashes:         1: mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl (hash: RDr7toM91DWujLOoonpveDBV81NmcZl3UWU/JIsof0I=)
                          2: 2E680D2AC99911F0BDA2F55CC4F9AE02.roa (hash: Q/eCF0AzmK8tNl3R3SFQuYN54I5IONWrSmL4B/NCtck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
                          rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4394 (0x112a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
        Validity
            Not Before: Jul 22 17:30:17 2026 GMT
            Not After : Jul 29 17:30:17 2026 GMT
        Subject: CN=6a60fe29-e6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:2e:98:1b:59:76:b4:86:f1:19:20:0c:29:
                    a8:09:e2:71:12:e3:04:61:77:e0:c9:8a:5e:94:10:
                    e8:2d:41:8f:d9:44:d3:99:13:be:38:c5:00:03:ad:
                    fc:66:45:fe:7f:07:fe:15:66:b9:ac:55:45:7d:94:
                    e2:d0:d3:9b:66:e5:d1:d6:85:b7:1b:3a:a2:61:3a:
                    07:b8:25:22:69:70:b6:f8:f2:b5:99:42:6c:5c:4b:
                    b1:ad:a2:06:bc:a0:12:06:24:d2:bd:28:f4:a8:62:
                    62:0e:81:a4:cf:53:95:d5:93:29:be:d3:a2:e2:9b:
                    bf:ef:c0:60:64:84:83:a0:ec:32:e6:ac:13:b2:71:
                    23:ba:77:04:dc:45:0c:20:28:b1:05:37:83:96:39:
                    da:e8:d3:2a:a2:d6:8e:ec:9a:bb:a8:43:a9:34:53:
                    0e:e8:4f:ae:aa:4c:f1:94:bd:4d:1e:60:c7:19:d2:
                    2c:55:16:8b:79:c4:87:fb:6f:33:ec:9f:b8:d8:4f:
                    9f:40:ae:d4:92:7f:d1:fd:19:ee:d9:3f:6a:e1:af:
                    bb:89:c5:5a:ce:41:20:9d:5e:a2:fb:42:d0:26:15:
                    ff:cd:7b:9b:35:be:f3:05:fb:f5:a1:f8:41:2b:f8:
                    70:7f:75:0a:4f:d4:ff:e2:cc:b9:66:7e:4c:8c:ab:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:1A:CD:EF:3F:D0:9F:34:73:93:59:5B:1F:1E:28:AC:25:91:65
            X509v3 Authority Key Identifier:
                keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:96:92:c3:6e:0f:47:b1:75:02:39:da:53:8c:ab:8a:45:40:
         b4:bc:c0:75:4e:be:c9:f7:03:8e:20:f2:b8:f2:42:18:e3:e8:
         70:91:d0:d7:bc:32:52:4e:31:9c:07:42:b8:d1:c6:08:36:51:
         6a:f9:9c:e1:5f:82:50:d5:40:11:73:b2:53:83:a2:cf:9b:a3:
         7c:69:41:09:2b:46:76:56:38:26:3f:ae:3a:80:83:e2:7b:87:
         a9:6a:df:c7:ad:8c:00:c4:8a:a5:0a:8f:bc:cb:39:89:a8:46:
         00:e0:fe:4c:b7:bf:6f:91:54:c8:42:6c:e3:67:d3:a0:de:e2:
         96:28:62:df:d2:e0:0f:64:75:1d:22:fe:f3:0d:ba:a3:31:69:
         b3:2f:88:7b:af:e0:96:a8:c3:60:da:4b:76:51:e2:06:5d:ba:
         b7:1a:13:c9:69:f7:bb:fa:2c:56:9a:99:cf:19:9f:48:f9:42:
         fc:6c:f8:03:9d:cf:d6:d2:fd:67:22:41:02:83:de:47:36:0f:
         25:51:8e:fe:9b:4c:50:fd:9a:b1:38:bd:5d:77:c6:56:75:ff:
         50:aa:d3:df:55:55:c2:87:15:e1:09:96:59:ca:d1:29:73:4b:
         f0:9f:8d:02:35:10:db:98:dc:8b:2d:4b:da:47:32:67:be:6f:
         3c:22:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:29:00 2026 by rpki-client