Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
File:                     AryISFcqsaDRBj5XuCIPK1LWvec.mft (raw, json)
Hash identifier:          2JXSDfpVTT7bh8vTdSUjmavF9lbkEnU+ipqJtGU/Wck=
Subject key identifier:   C1:C3:FE:65:F7:7A:82:4A:D8:0E:A5:1E:16:03:F9:B2:22:35:8D:D7
Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Certificate issuer:       /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
Manifest number:          74
Signing time:             Thu 23 Jul 2026 09:47:06 +0000
Manifest this update:     Thu 23 Jul 2026 09:47:05 +0000
Manifest next update:     Thu 30 Jul 2026 09:47:05 +0000
Files and hashes:         1: AryISFcqsaDRBj5XuCIPK1LWvec.crl (hash: lpjYhZZq4JLYMeZalFJ/Wr+OVcbMAKXhQBa+tn/ECWY=)
                          2: 36256C16D96011F0BB00DFAC96D3641D.roa (hash: BZhp55139TaDhIi/iXNGDBndZI5iisOCsjZn6WgMrG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
                          rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
        Validity
            Not Before: Jul 23 09:47:05 2026 GMT
            Not After : Jul 30 09:47:05 2026 GMT
        Subject: CN=6a61e31a-cb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:ad:41:85:ba:c1:f8:44:2f:47:81:9b:b5:
                    a9:62:9c:18:b7:3c:8c:d1:63:c8:92:d0:55:d1:aa:
                    84:e9:68:dd:35:f5:a4:aa:59:2c:dc:69:0d:f2:af:
                    e5:b5:ae:30:a3:ea:d0:d1:85:e7:8c:fd:d9:41:c2:
                    15:06:c2:50:87:a5:80:f9:64:b1:16:7a:00:a1:2f:
                    6c:c8:90:84:e0:02:81:be:52:00:6e:4f:2e:4f:52:
                    89:9e:16:e7:7e:1f:7c:bc:a0:7e:d1:aa:f2:7d:96:
                    ab:82:b1:89:08:aa:4a:af:72:38:6f:21:68:71:7b:
                    1d:c5:e9:92:73:47:b3:78:e9:3a:9b:f9:bc:f4:be:
                    98:cd:a6:88:8c:5f:44:f5:8a:59:30:a5:a8:bb:45:
                    2f:a3:3c:8f:1d:39:31:24:ae:73:83:53:b7:33:48:
                    30:4e:5b:fc:70:7e:af:3b:1b:5c:df:1b:ed:6d:7b:
                    28:24:d1:2b:c8:55:0c:8e:d3:1a:7c:ca:6a:c6:31:
                    16:51:24:28:c0:7b:50:a8:18:e5:54:66:d1:49:8f:
                    95:be:02:84:42:96:ee:88:82:ec:52:7b:b6:48:71:
                    f8:68:d0:2f:10:c0:e4:8c:a3:8f:ac:fd:59:35:e4:
                    dc:cc:36:0a:e4:50:8e:e7:98:2c:17:b6:d5:9c:29:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C3:FE:65:F7:7A:82:4A:D8:0E:A5:1E:16:03:F9:B2:22:35:8D:D7
            X509v3 Authority Key Identifier:
                keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:22:72:12:e2:2a:bd:73:ba:8d:eb:9a:95:50:d5:d4:8c:bf:
         bd:f1:b7:ed:d0:f8:fc:a3:04:5a:ba:f1:d8:9d:f5:fd:d4:b3:
         b9:87:c3:23:01:97:ca:6f:10:26:b8:f9:49:7d:fb:23:17:c0:
         e5:11:bf:59:92:7f:05:64:16:4f:d0:f8:39:cd:8b:5e:05:a7:
         c9:d1:d3:9a:5c:89:8a:3f:bd:42:8a:62:26:12:25:37:41:4b:
         87:49:70:bd:64:a2:b9:d1:ab:18:ea:1e:73:a5:11:83:e1:f2:
         df:1c:83:c5:47:7e:93:71:24:01:7e:96:3a:97:f3:b8:39:db:
         3a:11:ce:01:d3:3c:30:ab:0f:49:bf:f0:87:44:4b:ab:c3:ad:
         13:ba:f2:0c:4a:85:f8:c7:fc:80:04:f6:6a:9a:d7:f9:c2:59:
         ed:aa:37:6c:b4:c1:c1:74:5c:eb:11:50:6c:32:08:e6:89:50:
         09:08:28:70:69:c9:24:00:43:b8:a7:e4:8e:d3:cc:83:6c:b7:
         97:36:34:42:54:cb:b2:ff:16:9b:18:ca:5f:4f:45:18:fb:cc:
         04:9a:11:3e:e3:8e:b1:51:10:5d:e1:9c:bf:0b:a3:28:7f:84:
         b2:a1:e2:a3:62:ce:18:b1:4b:87:bf:a8:c6:69:0d:4d:4c:95:
         29:ff:cf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:05 2026 by rpki-client