Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
File:                     rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json)
Hash identifier:          f1JnIsKUxMj/Oc1Jsa3uSS2sGmEeQNTdRHimZr2m9TI=
Subject key identifier:   8D:D0:4D:29:39:17:2F:BF:F6:F7:0A:7B:E0:AD:EA:EA:B0:87:B8:AD
Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1
Certificate issuer:       /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
Certificate serial:       02AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
Manifest number:          029D
Signing time:             Thu 23 Jul 2026 02:46:17 +0000
Manifest this update:     Thu 23 Jul 2026 02:46:16 +0000
Manifest next update:     Thu 30 Jul 2026 02:46:16 +0000
Files and hashes:         1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: dcDEVDgeBhOg3fNvSbSpovlVjaDGNHdL8IoMdElLa/4=)
                          2: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: Fb1xzXA0N8kLKjAHbkG0rnvKJoUR3GKUs1zEAFSrTAg=)
                          3: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: N1EuDA/H1b+aKfv07j358tw2r8s6Ntwxnui6Zw/IAWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl
                          rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913168E, serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
        Validity
            Not Before: Jul 23 02:46:16 2026 GMT
            Not After : Jul 30 02:46:16 2026 GMT
        Subject: CN=6a618078-e221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:25:18:2f:a0:1d:f2:7d:0e:05:56:0a:a5:
                    e4:1a:8c:c0:a8:17:c9:58:1f:33:f5:f5:2b:30:96:
                    be:cd:32:04:b6:c8:ed:8a:a5:ab:c5:d5:26:57:89:
                    e8:7f:13:fc:06:8d:3f:04:e7:f6:9f:28:e3:d0:84:
                    1d:1c:c2:32:f4:c8:eb:c2:b4:bb:d4:bb:12:ff:a2:
                    99:a8:36:5c:ca:98:de:03:77:72:d4:48:62:aa:ad:
                    cf:0a:4d:1c:52:06:ac:99:35:3f:30:38:c5:e1:34:
                    d1:8e:d0:94:d6:9a:e0:6c:42:ce:9a:cb:7b:2c:40:
                    2e:e6:98:e1:e1:c0:97:c8:ac:e8:56:de:1a:5a:88:
                    d4:e5:11:e8:4d:e4:3a:6e:93:00:cd:d7:83:39:62:
                    29:c6:20:14:4a:9a:fe:72:72:e9:dc:a6:37:8d:ce:
                    38:b9:ba:4a:69:ab:70:81:d9:67:82:f0:ca:6f:54:
                    5e:ae:e2:df:2f:4d:fd:91:20:c1:ea:a9:f7:5b:d4:
                    1f:d6:2b:ce:68:14:c0:2a:3e:01:78:e5:91:71:33:
                    29:74:34:34:4c:01:bb:38:c9:73:0e:85:34:c9:14:
                    c4:b3:0b:db:a1:dd:ce:ba:95:57:9b:79:a3:08:c2:
                    64:a2:5d:1e:64:c8:dc:08:cc:42:cd:2f:9a:8e:e3:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:4D:29:39:17:2F:BF:F6:F7:0A:7B:E0:AD:EA:EA:B0:87:B8:AD
            X509v3 Authority Key Identifier:
                keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b1:9e:aa:eb:a8:2c:a0:55:23:67:b4:5b:a4:6f:69:9a:73:
         fd:ec:87:46:f4:02:65:9d:48:74:4e:3c:47:e2:87:55:22:dd:
         b0:9e:8f:b4:28:35:99:fe:bc:f0:c6:20:f6:45:a2:05:15:d4:
         c7:3d:a2:b7:33:24:19:68:da:4f:47:77:91:22:1d:94:40:d9:
         aa:e7:aa:db:26:5a:ab:f6:58:8f:ff:45:46:08:f8:1a:01:d4:
         ef:9e:89:e1:2f:b6:f4:3e:12:a8:23:7b:77:ff:fe:54:3b:52:
         2d:93:1a:19:79:8f:84:33:43:9e:b3:b8:9e:08:d9:78:c6:4d:
         39:91:91:59:ab:6c:77:78:c1:aa:b2:6e:14:ea:ec:29:78:48:
         55:aa:60:3b:c9:c0:30:3a:b5:54:aa:cf:fb:47:ef:0a:81:34:
         fa:69:ee:e8:b8:72:a0:d6:b8:5a:41:f3:36:87:d7:cd:10:9a:
         1c:b5:d2:46:ce:61:ec:e5:3f:29:8e:d1:63:36:44:9c:48:9b:
         6e:2e:ab:ce:93:86:eb:4f:f6:8a:36:30:84:7b:cc:69:d0:65:
         e0:7c:ad:37:f7:ee:5d:b8:5a:44:60:b9:7a:22:08:6c:a8:2a:
         c7:5a:9e:c0:8b:ba:20:65:e4:b4:6a:18:7c:87:75:85:ed:7e:
         9d:e4:83:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:31:41 2026 by rpki-client