Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
File:                     vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json)
Hash identifier:          TkOZY1dsHhJM3LUMYG08QJSFvBfWGvelP4kHEJjoYio=
Subject key identifier:   58:EF:CF:29:CE:E4:1A:27:37:88:2A:95:97:20:53:06:CE:9E:AA:66
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Certificate issuer:       /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial:       0D48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
Manifest number:          0D3D
Signing time:             Wed 22 Jul 2026 18:17:38 +0000
Manifest this update:     Wed 22 Jul 2026 18:17:37 +0000
Manifest next update:     Wed 29 Jul 2026 18:17:37 +0000
Files and hashes:         1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: 242/8tGYi+zrh5GPhp248GnSymvyzZwJUXeHludP4pA=)
                          2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
                          rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3400 (0xd48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
        Validity
            Not Before: Jul 22 18:17:37 2026 GMT
            Not After : Jul 29 18:17:37 2026 GMT
        Subject: CN=6a610941-52cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:10:8d:85:02:30:09:aa:a4:e8:57:fe:d2:
                    1f:c1:fc:79:3a:ca:af:c1:1c:80:ff:16:7d:25:15:
                    42:79:1f:1c:8f:fe:f1:75:b6:e7:d5:7b:34:71:e8:
                    7a:01:2a:f2:d9:dd:5c:8d:50:e9:74:55:ea:39:89:
                    7d:1f:b9:b0:a2:99:80:2f:cc:df:83:12:0d:5d:de:
                    cb:40:c4:b3:fe:c4:40:5e:e4:5b:93:c6:ed:da:ec:
                    5c:7a:1c:87:12:56:03:1b:99:cd:9a:40:97:f3:64:
                    15:8f:0b:bb:38:a6:d8:65:0f:52:41:5b:75:72:71:
                    d3:f3:fc:98:90:80:95:c8:90:5a:40:07:20:e4:0c:
                    51:b5:2d:85:00:a1:44:24:eb:cb:ed:ed:fe:e0:3c:
                    d6:5c:37:b2:f8:2d:1f:9e:b5:60:b5:72:15:28:5f:
                    16:24:db:91:c5:7a:d1:b8:fe:04:89:d0:eb:28:3b:
                    41:84:1d:a3:41:e0:f7:3e:ee:da:14:d0:16:61:7a:
                    ce:77:0a:cb:b4:a0:31:62:b8:32:d1:c9:aa:53:fe:
                    70:52:79:07:66:68:e8:f0:6e:c0:22:d8:53:30:6e:
                    2e:a4:a5:9c:c0:da:72:1c:90:38:af:43:01:4b:3c:
                    9d:a8:d8:5d:b5:50:d1:4f:d9:8b:c3:21:73:90:2c:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:CF:29:CE:E4:1A:27:37:88:2A:95:97:20:53:06:CE:9E:AA:66
            X509v3 Authority Key Identifier:
                keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:a5:0f:e6:fd:d9:41:7b:e8:0e:d9:51:09:13:1d:71:a8:
         f2:bd:8b:a9:83:e0:55:0f:4f:6a:3a:09:86:c9:50:71:2c:33:
         df:75:ce:b6:5f:e0:c3:ab:a3:79:54:97:36:82:07:9d:52:bc:
         c4:c1:27:cc:b6:f3:99:61:11:59:dc:72:f4:95:88:a0:54:d5:
         87:d2:5c:b0:4f:96:75:4e:32:e6:87:8d:da:8f:2e:34:34:29:
         d8:25:98:9e:08:1c:ec:54:16:c3:b6:e3:e2:78:00:32:5f:c9:
         5d:76:78:79:b5:8e:e6:80:84:b0:51:6f:c3:2b:0c:c9:04:79:
         d6:60:17:c4:8a:23:a9:fb:67:89:4f:1d:c3:88:ca:5e:76:d9:
         6d:f1:a9:f3:2b:0d:b7:d2:6f:82:90:fd:c5:b6:fb:28:12:fe:
         fe:83:f8:7e:99:2e:cc:0a:e9:e0:e0:79:53:ad:06:ac:b5:8f:
         ca:00:f9:e2:f8:dc:25:a6:b1:04:ea:c4:6a:af:c3:8a:a4:df:
         24:16:62:b2:28:d7:14:d8:64:83:b9:23:81:e0:97:76:7b:b3:
         cd:38:dc:5d:4f:f9:b8:0b:9f:5f:a1:d2:90:bc:6b:79:e1:06:
         ad:07:0d:be:99:51:e3:bb:e5:7a:15:98:df:50:f5:5e:ed:04:
         f2:ba:82:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC
ODFFNkFEMUQwHhcNMjYwNzIyMTgxNzM3WhcNMjYwNzI5MTgxNzM3WjAYMRYwFAYD
VQQDEw02YTYxMDk0MS01MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYsQjYUCMAmqpOhX/tIfwfx5OsqvwRyA/xZ9JRVCeR8cj/7xdbbn1Xs0ceh6
ASry2d1cjVDpdFXqOYl9H7mwopmAL8zfgxINXd7LQMSz/sRAXuRbk8bt2uxcehyH
ElYDG5nNmkCX82QVjwu7OKbYZQ9SQVt1cnHT8/yYkICVyJBaQAcg5AxRtS2FAKFE
JOvL7e3+4DzWXDey+C0fnrVgtXIVKF8WJNuRxXrRuP4EidDrKDtBhB2jQeD3Pu7a
FNAWYXrOdwrLtKAxYrgy0cmqU/5wUnkHZmjo8G7AIthTMG4upKWcwNpyHJA4r0MB
SzydqNhdtVDRT9mLwyFzkCzLWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjvzynO
5BonN4gqlZcgUwbOnqpmMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG
OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5
VHR1UmpONGJjMFc0SG1yUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPYelD+b92UF76A7ZUQkTHXGo8r2LqYPgVQ9PajoJhslQcSwz33XOtl/gw6uj
eVSXNoIHnVK8xMEnzLbzmWERWdxy9JWIoFTVh9JcsE+WdU4y5oeN2o8uNDQp2CWY
nggc7FQWw7bj4ngAMl/JXXZ4ebWO5oCEsFFvwysMyQR51mAXxIojqftniU8dw4jK
XnbZbfGp8ysNt9JvgpD9xbb7KBL+/oP4fpkuzArp4OB5U60GrLWPygD54vjcJaax
BOrEaq/DiqTfJBZisijXFNhkg7kjgeCXdnuzzTjcXU/5uAufX6HSkLxreeEGrQcN
vplR47vlehWY31D1Xu0E8rqCnA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:39:30 2026 by rpki-client