Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
File:                     aIdCVFR7NLOvid21tI0CAj9Xrhc.mft (raw, json)
Hash identifier:          HEj2iSNa61XQKvGfpF1Mq4hIJ55nklyMWWwjk03QiGY=
Subject key identifier:   86:A3:94:B6:01:CC:AD:23:C5:56:75:9A:73:4F:08:AC:4B:B4:A7:83
Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
Certificate issuer:       /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Certificate serial:       0E06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
Manifest number:          0DF8
Signing time:             Wed 22 Jul 2026 18:03:28 +0000
Manifest this update:     Wed 22 Jul 2026 18:03:28 +0000
Manifest next update:     Wed 29 Jul 2026 18:03:28 +0000
Files and hashes:         1: aIdCVFR7NLOvid21tI0CAj9Xrhc.crl (hash: NLgjtXOMEkxFEbEhZcHPlnXcUCjH+erqm0aUGWo1MSc=)
                          2: 3CB0977C608811F1B5BB4F7F6F47A888.roa (hash: obvUvp1oAFlcd8oLgkACJL5wq5dkzfXfQHSgoe/uzAw=)
                          3: 0198539E94F311EA9429BF86C4F9AE02.roa (hash: x6WdVTtqXyzo1or27OKiZdwiQ6/5q3EEmbhvmI/FqvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl
                          rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3590 (0xe06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
        Validity
            Not Before: Jul 22 18:03:28 2026 GMT
            Not After : Jul 29 18:03:28 2026 GMT
        Subject: CN=6a6105f0-52be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:49:58:45:27:12:96:ac:c7:f8:12:cb:de:
                    c6:64:45:67:75:8d:fb:ae:1c:ff:63:1c:79:da:2b:
                    85:b8:98:04:4d:d9:5d:2a:45:6e:c6:7e:a9:bf:5a:
                    53:fb:7b:f9:3e:df:dc:f2:ac:31:14:de:b3:ac:ad:
                    54:39:3f:0a:46:9b:bb:76:a8:ea:1b:ef:2a:01:fd:
                    fe:83:37:d3:53:97:83:10:5f:98:98:c2:a3:66:10:
                    8b:33:f0:d8:c6:6c:32:17:29:57:61:83:e8:bf:69:
                    c0:cf:ff:d2:15:66:8a:c2:1e:a3:03:8e:14:18:e0:
                    04:ff:f4:24:78:0f:a5:54:6b:5c:aa:39:e3:13:2e:
                    90:89:7c:08:37:07:4a:32:ae:e3:24:a1:84:7b:f7:
                    f9:23:36:e5:35:27:7c:45:63:a9:b1:e3:6c:66:3b:
                    9e:22:17:0d:a0:94:4c:d1:2a:16:e3:be:7e:0f:e4:
                    0e:ce:a3:c9:4e:7e:82:48:c8:90:02:99:45:49:f7:
                    07:48:a1:b1:bf:27:ea:66:f4:e9:5e:7b:7f:7a:9a:
                    ea:32:88:12:9d:a5:39:bb:55:98:90:d5:56:c5:81:
                    39:31:a2:9b:6f:15:a6:5b:8d:8f:17:91:78:b6:c5:
                    04:b2:d9:5d:8b:bf:00:01:35:dc:55:40:4e:fc:d8:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A3:94:B6:01:CC:AD:23:C5:56:75:9A:73:4F:08:AC:4B:B4:A7:83
            X509v3 Authority Key Identifier:
                keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:b4:b2:b1:cb:45:d1:ae:72:bf:da:65:32:bd:cc:88:ac:
         93:43:25:8a:00:3b:d0:f4:00:77:28:94:56:88:79:cc:2a:84:
         9d:79:0e:fb:c0:2e:62:69:62:ac:8e:c1:0d:55:c9:a1:ba:ad:
         4e:24:ea:b6:8b:b2:00:09:80:9b:51:d1:0e:d5:82:9a:09:21:
         36:93:d9:c5:31:02:df:00:a3:a3:c4:2a:a1:2b:7a:06:3f:b2:
         49:40:31:6a:b1:61:bf:fa:ec:54:b4:2d:08:fd:b3:9f:ac:ac:
         30:88:da:ac:2c:bb:79:60:16:83:50:f4:67:a7:52:ce:a3:0d:
         6f:c9:fb:d1:b0:b6:0d:59:fa:3f:09:28:3c:fe:ab:58:eb:f7:
         0a:3a:c8:a8:09:43:06:9d:a3:6e:fe:c8:bd:6d:eb:c3:4c:45:
         81:62:78:77:c5:1b:79:fb:5d:b1:0f:4b:b1:5a:3f:08:8d:87:
         ba:bb:89:ef:b8:e5:1f:f3:2e:17:7c:ca:34:9d:07:60:85:c3:
         d3:05:cd:bf:af:f6:a1:08:fa:8e:8c:94:6b:57:15:e3:37:bf:
         c0:9d:0c:ff:9a:a5:e5:48:c2:bd:33:ce:24:86:0d:91:38:c0:
         6a:d8:31:3f:cc:2e:f0:ae:69:84:8e:11:2d:39:ee:98:28:72:
         7c:ae:2f:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhENTIxMTAvBgNVBAUTKDY4ODc0MjU0NTQ3QjM0QjNBRjg5RERCNUI0OEQwMjAy
M0Y1N0FFMTcwHhcNMjYwNzIyMTgwMzI4WhcNMjYwNzI5MTgwMzI4WjAYMRYwFAYD
VQQDEw02YTYxMDVmMC01MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoVJWEUnEpasx/gSy97GZEVndY37rhz/Yxx52iuFuJgETdldKkVuxn6pv1pT
+3v5Pt/c8qwxFN6zrK1UOT8KRpu7dqjqG+8qAf3+gzfTU5eDEF+YmMKjZhCLM/DY
xmwyFylXYYPov2nAz//SFWaKwh6jA44UGOAE//QkeA+lVGtcqjnjEy6QiXwINwdK
Mq7jJKGEe/f5IzblNSd8RWOpseNsZjueIhcNoJRM0SoW475+D+QOzqPJTn6CSMiQ
AplFSfcHSKGxvyfqZvTpXnt/eprqMogSnaU5u1WYkNVWxYE5MaKbbxWmW42PF5F4
tsUEstldi78AATXcVUBO/NjiDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIajlLYB
zK0jxVZ1mnNPCKxLtKeDMB8GA1UdIwQYMBaAFGiHQlRUezSzr4ndtbSNAgI/V64X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1Mi8xRDRCNDRFRURC
NkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05MT3ZpZDIxdEkwQ0FqOVhy
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJZENWRlI3TkxPdmlkMjF0STBDQWo5WHJoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEQ1Mi8xRDRCNDRFRURCNkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05M
T3ZpZDIxdEkwQ0FqOVhyaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARP60srHLRdGucr/aZTK9zIisk0MligA70PQAdyiUVoh5zCqEnXkO+8AuYmli
rI7BDVXJobqtTiTqtouyAAmAm1HRDtWCmgkhNpPZxTEC3wCjo8QqoSt6Bj+ySUAx
arFhv/rsVLQtCP2zn6ysMIjarCy7eWAWg1D0Z6dSzqMNb8n70bC2DVn6PwkoPP6r
WOv3CjrIqAlDBp2jbv7IvW3rw0xFgWJ4d8UbeftdsQ9LsVo/CI2HuruJ77jlH/Mu
F3zKNJ0HYIXD0wXNv6/2oQj6joyUa1cV4ze/wJ0M/5ql5UjCvTPOJIYNkTjAatgx
P8wu8K5phI4RLTnumChyfK4vkQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:13 2026 by rpki-client