Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
File:                     28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json)
Hash identifier:          Wfyw4Mc/4KHvxu1NyGA0bp/eIWmdUncPg22sXX4c51g=
Subject key identifier:   56:88:8B:96:1B:D3:3B:88:AE:D0:21:5D:C6:18:DD:E7:DF:6E:22:0C
Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6
Certificate issuer:       /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
Manifest number:          014B
Signing time:             Thu 23 Jul 2026 06:50:42 +0000
Manifest this update:     Thu 23 Jul 2026 06:50:41 +0000
Manifest next update:     Thu 30 Jul 2026 06:50:41 +0000
Files and hashes:         1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: 5QrgVq2GkK4Q76sjq5RzC6/XyNQMSzZgy9ZFpCJh/zw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl
                          rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
        Validity
            Not Before: Jul 23 06:50:41 2026 GMT
            Not After : Jul 30 06:50:41 2026 GMT
        Subject: CN=6a61b9c2-e338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:5c:41:1f:97:de:bd:ac:ee:b6:5d:61:af:
                    b1:8f:b3:b9:90:3d:f8:46:d6:c6:c0:c4:02:0b:72:
                    05:db:87:e4:c2:a6:7b:69:41:94:04:6c:62:6c:0f:
                    4e:74:29:f2:36:e4:ae:bf:9a:81:1c:f5:64:3d:17:
                    2f:5c:16:8b:00:86:3f:a3:d2:e0:28:fc:33:2e:46:
                    0b:7c:fa:9e:8c:fb:8d:b1:97:f3:4e:c7:43:5d:67:
                    37:7b:1b:ad:3f:6e:d0:6d:f8:82:c8:fe:e5:e2:70:
                    4b:7e:30:1f:6e:01:97:97:13:1d:35:bc:94:c5:ad:
                    f4:27:10:22:36:78:4e:0a:8f:d1:b9:e8:fd:b7:71:
                    df:07:17:ef:aa:6d:ce:41:7a:7e:fc:d0:47:06:d5:
                    6c:52:c7:e4:db:44:46:f5:d4:27:4f:c6:a6:72:41:
                    55:3e:38:cf:0d:47:fd:ce:de:93:ce:9e:69:b7:c7:
                    a9:87:6c:41:92:2b:9c:a4:1c:60:c3:4c:7a:c5:52:
                    d3:96:0f:f2:85:42:e6:0f:07:d7:64:72:ec:33:f8:
                    56:6f:04:89:2a:e7:01:67:08:29:b1:cf:85:74:e7:
                    37:b8:fc:c0:29:ee:24:ad:af:9d:9a:b3:24:9f:84:
                    fe:57:55:98:bd:4c:cc:ce:5a:ec:ec:a7:60:cf:98:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:8B:96:1B:D3:3B:88:AE:D0:21:5D:C6:18:DD:E7:DF:6E:22:0C
            X509v3 Authority Key Identifier:
                keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:2b:07:89:d9:95:c1:89:6a:2a:21:23:43:42:8e:0b:dd:30:
         a0:e9:a9:b9:8b:4e:67:fd:5a:aa:97:05:e8:f8:13:0a:fd:65:
         56:b1:cb:a9:b9:3a:6e:07:b4:4f:e3:04:34:6d:c3:b0:96:ef:
         a3:3d:8e:79:1a:c0:69:aa:c7:3c:c0:ec:dc:29:ed:a6:8b:5f:
         0e:93:a5:b4:0c:36:1f:20:4f:91:02:73:b1:c6:65:87:45:04:
         d7:75:c0:82:23:59:32:00:37:ce:3d:42:75:71:5d:8a:e8:29:
         f0:a0:db:94:e6:5c:28:31:52:36:c1:59:d8:de:1f:d3:1d:c3:
         12:bb:12:55:fe:5e:35:de:f5:29:b3:8a:9b:04:80:f8:a1:98:
         f3:28:0c:f1:ff:4f:f8:ca:96:3f:da:ca:23:32:73:3c:c8:a9:
         7c:72:0c:f4:66:ec:58:e2:76:9f:61:78:7a:89:f7:8c:6b:f2:
         1f:24:81:9e:0d:84:dc:53:60:fb:5b:11:3f:47:bb:f4:42:bd:
         f5:bd:16:3c:91:50:e5:30:a1:38:db:dc:ba:92:ed:7d:47:ce:
         0f:43:b3:8b:62:44:c7:70:ab:31:01:c8:86:46:33:44:b5:a0:
         b1:94:8d:f0:06:cf:4c:89:c1:93:7b:11:79:c6:57:9a:6e:6f:
         24:53:dc:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQwRTMxMTAvBgNVBAUTKERCQzZGMjI1NkRERTVDMkM0NkE4MEVCMjQzMkYyNTcy
RURDNTM3RDYwHhcNMjYwNzIzMDY1MDQxWhcNMjYwNzMwMDY1MDQxWjAYMRYwFAYD
VQQDEw02YTYxYjljMi1lMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbVcQR+X3r2s7rZdYa+xj7O5kD34RtbGwMQCC3IF24fkwqZ7aUGUBGxibA9O
dCnyNuSuv5qBHPVkPRcvXBaLAIY/o9LgKPwzLkYLfPqejPuNsZfzTsdDXWc3exut
P27QbfiCyP7l4nBLfjAfbgGXlxMdNbyUxa30JxAiNnhOCo/Ruej9t3HfBxfvqm3O
QXp+/NBHBtVsUsfk20RG9dQnT8amckFVPjjPDUf9zt6Tzp5pt8eph2xBkiucpBxg
w0x6xVLTlg/yhULmDwfXZHLsM/hWbwSJKucBZwgpsc+FdOc3uPzAKe4kra+dmrMk
n4T+V1WYvUzMzlrs7Kdgz5h7lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaIi5Yb
0zuIrtAhXcYY3effbiIMMB8GA1UdIwQYMBaAFNvG8iVt3lwsRqgOskMvJXLtxTfW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9CMzVBQjlGQThD
N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhDeEdxQTZ5UXk4bGN1M0ZO
OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI4YnlKVzNlWEN4R3FBNnlReThsY3UzRk45WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDBFMy9CMzVBQjlGQThDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhD
eEdxQTZ5UXk4bGN1M0ZOOVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvCsHidmVwYlqKiEjQ0KOC90woOmpuYtOZ/1aqpcF6PgTCv1lVrHLqbk6bge0
T+MENG3DsJbvoz2OeRrAaarHPMDs3CntpotfDpOltAw2HyBPkQJzscZlh0UE13XA
giNZMgA3zj1CdXFdiugp8KDblOZcKDFSNsFZ2N4f0x3DErsSVf5eNd71KbOKmwSA
+KGY8ygM8f9P+MqWP9rKIzJzPMipfHIM9GbsWOJ2n2F4eon3jGvyHySBng2E3FNg
+1sRP0e79EK99b0WPJFQ5TChONvcupLtfUfOD0Ozi2JEx3CrMQHIhkYzRLWgsZSN
8AbPTInBk3sRecZXmm5vJFPctA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:46 2026 by rpki-client