Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
File:                     rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json)
Hash identifier:          uF3aY1jEsfTaic+j5SS60Hr59Mcvy+A2AGmk4U0+7c0=
Subject key identifier:   7C:20:9A:F0:59:E6:36:94:3A:B9:45:2E:BF:5C:33:A2:41:D8:A3:46
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Certificate issuer:       /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial:       0561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
Manifest number:          0553
Signing time:             Thu 23 Jul 2026 00:13:04 +0000
Manifest this update:     Thu 23 Jul 2026 00:13:04 +0000
Manifest next update:     Thu 30 Jul 2026 00:13:04 +0000
Files and hashes:         1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: sgiymykupv0BNCtQeBKX1hkUcAOcp6ByGg+q59cgNMI=)
                          2: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=)
                          3: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
                          rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
        Validity
            Not Before: Jul 23 00:13:04 2026 GMT
            Not After : Jul 30 00:13:04 2026 GMT
        Subject: CN=6a615c90-0aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:6b:f1:b9:84:65:96:ab:14:97:d7:0a:44:
                    01:e2:39:3f:6a:6c:6a:da:bc:92:04:eb:b9:85:33:
                    94:c4:ac:46:3d:0a:3f:23:68:fc:f7:21:9e:9f:b2:
                    c8:43:72:c0:f6:62:e4:9c:2b:07:72:5f:37:e0:f5:
                    7b:09:e9:ec:0f:8b:2f:60:75:e3:b2:c5:f3:0c:96:
                    1c:13:82:42:fc:bc:f7:f2:c7:ac:fd:f6:24:db:7a:
                    50:3a:0a:5a:94:6e:2c:ca:04:23:dc:e8:32:57:ae:
                    31:f7:a4:d4:3e:94:97:fd:6f:ac:62:0e:ed:d1:2b:
                    36:02:49:b1:ad:03:89:ac:2e:22:f0:f7:1b:4b:a3:
                    9b:aa:75:f5:05:c5:f5:b9:29:19:9a:a5:eb:91:90:
                    e9:79:f2:46:67:79:fd:c2:0c:7d:f7:75:91:39:39:
                    1b:61:05:1a:dd:fb:40:e5:ea:f7:fb:f7:08:0e:e4:
                    e0:c1:bc:d7:4f:31:4d:ae:4f:72:43:cc:9f:f4:d6:
                    14:1e:96:f0:1e:63:85:d7:9f:e8:60:61:48:8d:af:
                    86:cd:43:17:e3:a6:f3:ae:d6:43:9c:25:14:06:ac:
                    24:e5:2d:83:01:10:38:a1:36:04:2b:04:b9:98:5d:
                    11:e9:31:e5:76:04:4c:a8:44:de:5d:22:fb:fb:3c:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:20:9A:F0:59:E6:36:94:3A:B9:45:2E:BF:5C:33:A2:41:D8:A3:46
            X509v3 Authority Key Identifier:
                keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:fe:07:82:85:56:1d:6a:3c:b2:6c:a9:a5:14:97:e5:34:
         fc:d6:af:cf:27:3e:78:63:9e:ba:18:b7:fe:8f:68:76:dc:72:
         60:16:1c:33:11:cd:b2:3f:52:3f:b0:0d:da:f9:40:d7:0d:72:
         50:0a:ec:0d:08:df:21:e5:8a:b5:4a:d2:c7:20:d3:95:b8:68:
         6d:1f:38:82:14:92:ab:1a:53:5c:4c:ea:6c:78:1d:50:e7:56:
         f5:5e:b9:f4:bb:25:ba:b4:00:da:24:2c:d0:4b:20:83:4c:37:
         71:a5:bd:38:0b:8b:01:7d:aa:37:e6:a9:3a:55:25:96:71:cc:
         dc:21:23:bb:16:56:87:17:b3:04:6b:ce:f8:45:3f:8c:6d:b5:
         d5:10:2a:62:0d:35:46:0d:9f:f3:c0:82:7a:16:61:1b:80:a8:
         11:21:68:8f:14:84:d9:8e:d7:99:96:c9:11:07:4d:e7:61:35:
         50:9a:b6:b1:26:5d:48:3a:53:20:a4:89:ba:1b:72:8d:71:76:
         8f:c5:8f:2f:9a:a4:2f:44:37:f9:e0:8c:1d:69:72:34:a6:74:
         88:2a:5e:69:b8:6e:8d:30:00:60:42:9a:36:de:de:a6:48:a5:
         04:0d:9d:b8:2a:93:88:0d:a9:41:f5:88:e4:6c:c2:73:31:a3:
         30:e7:be:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4
RjNCN0E5MjUwHhcNMjYwNzIzMDAxMzA0WhcNMjYwNzMwMDAxMzA0WjAYMRYwFAYD
VQQDEw02YTYxNWM5MC0wYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIJr8bmEZZarFJfXCkQB4jk/amxq2rySBOu5hTOUxKxGPQo/I2j89yGen7LI
Q3LA9mLknCsHcl834PV7CensD4svYHXjssXzDJYcE4JC/Lz38ses/fYk23pQOgpa
lG4sygQj3OgyV64x96TUPpSX/W+sYg7t0Ss2AkmxrQOJrC4i8PcbS6ObqnX1BcX1
uSkZmqXrkZDpefJGZ3n9wgx993WROTkbYQUa3ftA5er3+/cIDuTgwbzXTzFNrk9y
Q8yf9NYUHpbwHmOF15/oYGFIja+GzUMX46bzrtZDnCUUBqwk5S2DARA4oTYEKwS5
mF0R6THldgRMqETeXSL7+zy3xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHwgmvBZ
5jaUOrlFLr9cM6JB2KNGMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1
MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y
aS1hVm5XbURfaldQTzNxU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZK7+B4KFVh1qPLJsqaUUl+U0/Navzyc+eGOeuhi3/o9odtxyYBYcMxHNsj9S
P7AN2vlA1w1yUArsDQjfIeWKtUrSxyDTlbhobR84ghSSqxpTXEzqbHgdUOdW9V65
9LslurQA2iQs0Esgg0w3caW9OAuLAX2qN+apOlUllnHM3CEjuxZWhxezBGvO+EU/
jG211RAqYg01Rg2f88CCehZhG4CoESFojxSE2Y7XmZbJEQdN52E1UJq2sSZdSDpT
IKSJuhtyjXF2j8WPL5qkL0Q3+eCMHWlyNKZ0iCpeabhujTAAYEKaNt7epkilBA2d
uCqTiA2pQfWI5GzCczGjMOe+2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:31 2026 by rpki-client