Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
File:                     pZmI7E1t1bpqMPhmUatWLBimo04.mft (raw, json)
Hash identifier:          eOAepjTgviaCP1cDfvUMPpobd+WW3zwmTcBTB3E3+k4=
Subject key identifier:   6C:F7:8E:22:79:44:FC:6B:EA:FA:0C:0A:DC:21:86:35:04:BB:91:30
Authority key identifier: A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E
Certificate issuer:       /CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
Certificate serial:       05B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
Manifest number:          05AC
Signing time:             Wed 22 Jul 2026 23:53:57 +0000
Manifest this update:     Wed 22 Jul 2026 23:53:56 +0000
Manifest next update:     Wed 29 Jul 2026 23:53:56 +0000
Files and hashes:         1: pZmI7E1t1bpqMPhmUatWLBimo04.crl (hash: D38aYQ5dHrgOJrluLAGTfkxfbzc9raNDakgLZOHpN3g=)
                          2: A027E062300911ECAE581534C4F9AE02.roa (hash: XCRNe+IjMfdiRFsViU2603VxuIrA3a9k3c/heY8WZhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl
                          rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FF5, serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
        Validity
            Not Before: Jul 22 23:53:56 2026 GMT
            Not After : Jul 29 23:53:56 2026 GMT
        Subject: CN=6a615815-dac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:4a:f9:56:fa:72:da:59:72:39:2c:5e:ac:
                    50:fb:d2:38:f0:9b:1d:8e:25:83:53:07:4d:fb:03:
                    19:3a:e8:54:c9:20:9a:28:30:29:de:e7:18:12:91:
                    98:c6:c5:3c:37:65:0a:63:8e:8f:5a:78:78:7d:56:
                    f6:b8:66:19:46:6e:5d:51:61:30:7b:e9:ee:7a:b5:
                    95:1e:91:5f:20:c1:ff:bf:03:cd:e9:15:60:e8:c5:
                    4e:5e:d3:48:54:d0:a2:b5:0e:49:40:99:4e:f3:55:
                    2d:31:96:09:43:b8:64:59:42:98:52:06:6c:9c:c2:
                    77:17:17:fa:40:3f:f3:68:85:5e:e3:29:f6:34:ab:
                    55:4d:32:66:0a:dd:ef:b0:cd:79:89:fe:a0:e6:11:
                    bc:07:0d:09:cf:58:44:e7:dd:a9:84:33:cd:ad:5a:
                    db:fc:1d:c7:c1:44:d2:4b:fb:d8:4e:f9:59:73:06:
                    3f:08:2f:79:a4:36:03:d8:da:a7:ef:63:c4:16:a3:
                    30:0b:2c:af:39:23:31:b2:31:4a:7c:b8:e9:d2:75:
                    02:98:9d:61:e6:0f:3e:b7:00:3c:00:83:2e:20:8d:
                    80:9f:cb:fe:8e:72:f2:8f:90:25:ff:3e:30:d8:ad:
                    36:86:6e:7a:ae:b2:2c:ad:33:74:7d:0e:90:54:20:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:8E:22:79:44:FC:6B:EA:FA:0C:0A:DC:21:86:35:04:BB:91:30
            X509v3 Authority Key Identifier:
                keyid:A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:23:d7:b8:64:16:66:de:c3:2a:67:cb:10:2f:17:3c:83:
         63:79:69:b6:76:07:5e:e3:96:bb:7d:36:22:b5:65:26:f4:7b:
         44:49:50:e5:c9:cb:62:fd:3c:66:46:47:ff:fb:cf:62:19:97:
         86:2b:4d:02:16:65:4a:80:23:a8:30:37:7d:55:23:b9:3b:76:
         25:a7:2d:bc:a6:c4:c9:d4:da:4d:d7:9a:6c:07:50:80:67:b7:
         5b:a8:b2:72:14:5b:04:0a:bf:b1:ed:29:9f:d5:d3:a9:83:92:
         31:b3:16:8f:14:46:39:53:39:38:68:83:85:f1:36:a6:f7:c0:
         71:5e:42:ad:f1:17:54:aa:07:7c:ee:5f:6f:d1:b9:fe:c6:94:
         ba:3d:25:08:5f:c5:c0:ca:4c:43:ff:ef:e1:0c:09:e2:4f:75:
         63:0d:43:91:e2:37:9b:00:c1:1f:f8:53:18:7c:d6:05:8c:57:
         9c:0b:04:ac:14:e5:a1:6b:7d:09:cf:f7:ea:7d:d7:57:2f:5d:
         af:f7:0e:88:d6:a1:ba:d3:49:3b:f8:6e:e9:e7:3b:1d:fb:90:
         c1:54:89:3e:ad:79:23:af:ad:5a:7c:91:08:29:84:b3:57:3c:
         f0:ac:29:25:36:28:61:ec:68:4d:64:0d:2f:35:5d:cd:ee:fe:
         38:b5:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:22 2026 by rpki-client