Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
File:                     -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json)
Hash identifier:          xX3JbY4Q+44nFoT1XXkihch+J5WTR4ZxDki91/e/JiE=
Subject key identifier:   3D:E5:AC:E8:D5:F3:0D:08:CB:EE:6B:CD:5C:2F:AF:84:BE:8E:9F:9F
Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
Certificate issuer:       /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
Manifest number:          0208
Signing time:             Wed 22 Jul 2026 15:33:45 +0000
Manifest this update:     Wed 22 Jul 2026 15:33:44 +0000
Manifest next update:     Wed 29 Jul 2026 15:33:44 +0000
Files and hashes:         1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: 86XvtOgf44rGs6CW9WpZESf1i6bPnbpUptVoXhQHHyE=)
                          2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: 7WBF/67tQLlM0JIff5LKTgy333KC+LPGrQsaWqMRIeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
                          rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
        Validity
            Not Before: Jul 22 15:33:44 2026 GMT
            Not After : Jul 29 15:33:44 2026 GMT
        Subject: CN=6a60e2d8-0f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:6d:6c:a7:fe:e7:06:20:c6:48:55:f0:9b:
                    41:72:bd:c5:1a:22:5a:70:3c:a2:a8:da:a5:68:c8:
                    05:15:31:aa:c4:36:6a:a3:05:65:ca:39:b0:13:37:
                    62:20:0c:63:e6:1b:db:e5:3d:88:1b:e4:47:cf:6c:
                    e5:64:ca:57:a4:9a:81:10:6b:20:9f:1d:2e:9c:89:
                    49:66:aa:c2:87:20:54:7f:83:75:44:70:70:45:74:
                    cd:ad:5e:48:a5:54:1f:37:52:c1:13:54:8a:17:65:
                    f9:b2:a5:e5:0a:be:12:2b:c1:02:a1:31:b1:55:66:
                    53:4f:9c:5b:f0:0e:07:dc:b2:e9:f4:0e:ef:de:13:
                    fb:35:5b:59:45:f9:71:15:10:14:a5:ab:d0:a1:91:
                    23:7c:9e:8b:9a:b6:76:cb:cc:c6:53:78:3d:9b:ec:
                    5e:6d:9e:fc:38:9a:22:56:e9:d5:67:66:e3:cd:7b:
                    df:a8:7a:ea:f0:39:b8:57:b2:45:31:7c:92:d2:cc:
                    e9:cf:1e:23:1b:fd:4f:35:f3:38:97:e3:dd:8f:48:
                    ac:ae:ac:cc:ef:01:77:7d:78:fe:43:cd:72:60:a4:
                    bc:6b:b3:f4:d1:3b:3b:41:33:79:35:a5:80:3d:9c:
                    0b:39:50:05:a3:c0:d7:6c:61:cd:9e:40:ce:ba:0c:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:AC:E8:D5:F3:0D:08:CB:EE:6B:CD:5C:2F:AF:84:BE:8E:9F:9F
            X509v3 Authority Key Identifier:
                keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:14:19:45:bb:6f:97:e8:0d:5a:e6:ff:05:f6:f9:15:6e:
         c7:c0:22:bf:aa:0f:e7:b9:f8:58:ab:4c:16:de:09:40:e0:27:
         84:71:48:07:f9:6f:c2:6c:85:47:08:9c:84:a2:02:9b:1a:68:
         34:0e:d0:22:a9:45:4f:20:df:09:3b:eb:76:d5:7f:0e:40:e8:
         4f:08:d7:3a:ab:36:ad:45:fa:3f:39:d0:74:b9:1e:83:d1:b7:
         c1:2d:06:63:a8:60:6c:95:55:f9:14:0c:69:66:74:61:b0:75:
         77:9a:44:f2:29:b9:87:74:97:b2:46:89:e2:96:89:ea:cc:cb:
         cd:e2:46:97:f4:56:4d:23:07:17:6c:ee:24:ec:7b:ea:50:1b:
         d5:48:39:b0:e1:41:9e:4d:b4:4a:82:8a:7c:66:bd:d9:63:b6:
         26:ad:b9:e8:11:76:4d:ec:14:2a:43:57:13:31:a6:6d:27:8e:
         c6:b6:00:0c:6a:6f:c3:77:89:8f:32:30:29:1e:dc:f1:94:05:
         2f:f0:61:9d:69:de:87:9b:98:be:fd:90:af:56:24:0a:f1:46:
         78:c3:97:fd:9a:6a:98:9d:48:7a:a8:28:df:1c:56:fb:30:03:
         41:2a:72:b8:81:ca:89:cd:ad:fa:1e:57:d7:d5:96:01:dd:8e:
         ba:7c:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:34:08 2026 by rpki-client