Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File:                     fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier:          /+FSv9gd4w2mwSf9yuuMBCP2XDmZM2y6bcxaIUUWuU0=
Subject key identifier:   19:48:B9:F0:25:7F:0E:57:47:C1:78:17:E6:0C:D5:B5:A7:C2:8F:F5
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer:       /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial:       0717
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number:          070F
Signing time:             Wed 22 Jul 2026 22:44:21 +0000
Manifest this update:     Wed 22 Jul 2026 22:44:21 +0000
Manifest next update:     Wed 29 Jul 2026 22:44:21 +0000
Files and hashes:         1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: /7/3C+GlJ/gYamltNcaFq+S1qbyrDnpWFAk0aIhonSY=)
                          2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
                          rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
        Validity
            Not Before: Jul 22 22:44:21 2026 GMT
            Not After : Jul 29 22:44:21 2026 GMT
        Subject: CN=6a6147c5-a3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:35:2a:86:c1:7d:9e:19:a6:d9:a1:fb:f9:
                    7e:d6:fe:48:8b:62:cf:85:7b:ef:f9:5a:40:73:a7:
                    a0:e0:5b:4d:4e:7c:6f:62:b0:10:11:78:08:a9:9f:
                    51:e6:13:48:60:2c:f9:99:ae:84:e1:ff:28:2a:db:
                    92:58:a6:b8:9a:be:5d:a5:fc:f9:db:9b:9b:2b:4b:
                    73:41:7a:ec:d2:2a:76:fb:10:ca:d3:cf:a0:ac:aa:
                    80:e2:8f:2f:dd:31:1d:69:60:3f:f0:d9:cd:b8:9d:
                    06:82:b5:3f:a5:bc:03:ca:08:9d:88:6c:a0:a6:e6:
                    f6:9e:16:ca:47:90:63:67:5f:30:9a:da:77:7a:52:
                    6b:8e:f9:1e:b6:4a:8a:2e:b4:1f:be:69:dc:98:71:
                    e8:1b:f8:a1:13:19:0d:bc:4b:c5:cc:54:bd:29:b7:
                    6d:0a:16:91:e1:9e:b7:00:f7:fa:eb:45:1b:24:2f:
                    86:41:a1:bb:4c:25:cf:c4:d1:be:27:51:a3:89:93:
                    e7:0c:ac:ba:f7:1b:4e:c4:f1:15:41:84:90:cb:93:
                    c5:5d:d8:d5:04:48:99:f7:41:86:22:e8:78:25:ad:
                    ff:b9:e6:08:53:6a:bb:46:f1:4c:28:58:80:c1:fd:
                    3d:ab:13:d0:fc:28:be:fb:c3:57:cd:3f:fb:38:a5:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:B9:F0:25:7F:0E:57:47:C1:78:17:E6:0C:D5:B5:A7:C2:8F:F5
            X509v3 Authority Key Identifier:
                keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:80:83:2c:eb:ac:3b:42:95:78:62:c6:ae:f5:7a:6a:55:
         a7:06:23:3d:cb:60:69:b7:40:03:51:0c:80:4c:a2:6f:47:2c:
         ec:3f:6a:80:72:06:78:08:63:b5:3c:dc:60:41:3d:68:b2:08:
         0f:70:a6:f8:5d:86:b4:5b:b1:df:ac:52:e5:1d:3b:2c:fc:1c:
         bd:12:b4:1d:93:65:2b:c1:70:dc:e0:1b:e3:f8:f3:20:13:14:
         d5:36:0a:7e:fc:18:35:a9:a8:6b:7d:85:e5:33:fb:62:89:5e:
         6d:95:39:e1:03:a7:48:a1:e9:44:b8:1b:a1:b6:a8:08:54:05:
         a7:52:65:41:f2:da:16:33:b6:60:fa:d1:cd:75:3c:8c:23:f3:
         84:54:ee:be:98:eb:f4:49:b2:35:90:98:f2:7a:02:a6:68:48:
         b8:ec:ce:4f:4a:b6:e7:9d:ad:ff:bd:e4:2f:e4:a5:61:8c:c8:
         6c:4b:80:ca:4e:6d:47:04:87:4a:4d:14:81:9c:ac:25:b0:05:
         ed:b1:b8:f3:f8:a7:75:2c:0a:f6:ec:4f:09:bf:2d:a8:fb:1f:
         31:9d:3d:52:36:10:2b:19:44:95:1e:51:4e:2a:bf:04:88:4a:
         f6:ae:40:c9:e5:7a:d1:a0:54:e7:63:6a:68:dd:72:7d:d1:8d:
         57:9a:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:27 2026 by rpki-client