Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File:                     U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier:          hc6UyERWKgaD31jh6J4A/L6BAHzZKzHJ2ju06hsQQn4=
Subject key identifier:   68:05:11:D9:9A:78:3D:6F:8F:2A:61:A1:1B:90:58:23:D8:9B:36:AA
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer:       /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial:       071C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number:          0715
Signing time:             Wed 22 Jul 2026 22:42:25 +0000
Manifest this update:     Wed 22 Jul 2026 22:42:24 +0000
Manifest next update:     Wed 29 Jul 2026 22:42:24 +0000
Files and hashes:         1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: Xj3DIyEDG0EQ4/H/++taymiSmhPEASQ0zTgNOIC+z6s=)
                          2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: P7BP6/E5VR32Uv8oMFIhpGR35nhbqoxIBUDOIRvP5g8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
        Validity
            Not Before: Jul 22 22:42:24 2026 GMT
            Not After : Jul 29 22:42:24 2026 GMT
        Subject: CN=6a614750-8181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:3a:35:c0:d9:ff:45:6d:a8:0c:63:6a:66:
                    54:4e:40:c0:da:16:b6:b1:66:cb:c1:49:bc:2f:cc:
                    2a:cb:1b:2e:3c:57:93:09:07:cd:21:19:0b:30:40:
                    12:ab:a8:5b:ea:51:60:14:fc:27:47:c2:57:19:bf:
                    55:e8:05:3e:e3:b1:d6:3a:4a:ce:32:80:c7:d0:1d:
                    fd:3b:2e:23:a9:07:31:b5:ab:1b:0b:fd:8f:62:92:
                    5b:78:6a:e1:e3:a7:f4:85:c6:7c:22:3c:2f:88:ec:
                    f5:90:7b:d2:fd:50:46:3a:46:09:a5:85:0a:15:a8:
                    1d:77:ae:92:57:ae:02:52:cc:82:08:75:a6:b2:67:
                    9d:2b:a9:42:98:48:27:3a:1a:98:d6:22:a4:31:83:
                    fc:96:0d:b6:c8:10:34:2d:a8:10:80:e0:9f:cc:eb:
                    78:a1:2b:40:53:93:db:d3:f4:ae:f6:69:39:87:6f:
                    c0:c6:47:98:2b:ad:98:37:cd:00:9e:49:0d:3e:48:
                    30:3c:52:be:40:e6:65:54:42:f3:da:06:e2:7c:e9:
                    77:c1:c2:e9:99:e8:03:7b:71:cf:66:b3:99:01:fc:
                    13:02:f3:c9:75:65:56:11:3e:ed:f1:57:f0:a6:a7:
                    61:8e:6a:ae:a0:06:be:23:23:74:55:15:0a:ab:82:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:05:11:D9:9A:78:3D:6F:8F:2A:61:A1:1B:90:58:23:D8:9B:36:AA
            X509v3 Authority Key Identifier:
                keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:cc:31:d0:b1:6a:ac:94:9e:87:ab:96:20:d0:28:e2:e0:
         51:8c:db:79:a5:13:e9:49:fe:5b:06:42:cb:2a:2d:90:ee:cc:
         24:8b:de:e1:2a:89:13:50:63:87:1d:dc:82:bd:3e:4c:0b:40:
         07:47:00:f2:cc:c0:c1:32:0a:c2:7d:cd:8a:61:72:30:ae:75:
         61:bb:ff:49:de:aa:e4:8c:68:00:09:55:63:a1:f3:a2:ae:9b:
         73:83:a0:00:c5:27:77:6c:9c:48:1c:7c:0d:48:ef:ba:eb:d6:
         bd:8e:7f:87:bf:72:b1:29:4c:db:a5:a2:c5:c7:ce:fd:e2:73:
         8e:83:bb:a9:52:7f:65:f0:c9:06:57:d8:62:b4:94:8c:a9:86:
         bf:a7:4d:26:d8:dc:46:aa:cd:fd:b1:a9:99:e7:3a:9b:42:d7:
         aa:ef:72:bc:bd:25:88:31:b9:0c:3d:e4:a1:e4:90:e7:34:ca:
         5e:98:4c:45:29:bf:ac:33:55:d6:32:0d:3b:70:4b:d2:c5:52:
         02:05:88:a1:49:f8:27:8c:86:4c:2b:89:55:4d:d2:81:70:26:
         d9:f7:a5:3d:bd:20:fd:7b:a4:76:9e:b7:85:17:f4:a1:90:09:
         01:0e:9c:94:d6:44:1e:24:a8:6d:15:46:22:67:0b:e1:62:41:
         26:b2:f5:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzNDAxMTAvBgNVBAUTKDUzRjZGNzkyNTNCQ0RCOEIxRDE3MTgyQ0U0RjE5RDM5
RkQ0OTlERjUwHhcNMjYwNzIyMjI0MjI0WhcNMjYwNzI5MjI0MjI0WjAYMRYwFAYD
VQQDEw02YTYxNDc1MC04MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsT46NcDZ/0VtqAxjamZUTkDA2ha2sWbLwUm8L8wqyxsuPFeTCQfNIRkLMEAS
q6hb6lFgFPwnR8JXGb9V6AU+47HWOkrOMoDH0B39Oy4jqQcxtasbC/2PYpJbeGrh
46f0hcZ8IjwviOz1kHvS/VBGOkYJpYUKFagdd66SV64CUsyCCHWmsmedK6lCmEgn
OhqY1iKkMYP8lg22yBA0LagQgOCfzOt4oStAU5Pb0/Su9mk5h2/AxkeYK62YN80A
nkkNPkgwPFK+QOZlVELz2gbifOl3wcLpmegDe3HPZrOZAfwTAvPJdWVWET7t8Vfw
pqdhjmquoAa+IyN0VRUKq4IxdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgFEdma
eD1vjyphoRuQWCPYmzaqMB8GA1UdIwQYMBaAFFP295JTvNuLHRcYLOTxnTn9SZ31
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC83QzFGRDFEMjkx
RTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0c2RGeGdzNVBHZE9mMUpu
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VfYjNrbE84MjRzZEZ4Z3M1UEdkT2YxSm5mVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDM0MC83QzFGRDFEMjkxRTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0
c2RGeGdzNVBHZE9mMUpuZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMgrMMdCxaqyUnoerliDQKOLgUYzbeaUT6Un+WwZCyyotkO7MJIve4SqJE1Bj
hx3cgr0+TAtAB0cA8szAwTIKwn3NimFyMK51Ybv/Sd6q5IxoAAlVY6Hzoq6bc4Og
AMUnd2ycSBx8DUjvuuvWvY5/h79ysSlM26WixcfO/eJzjoO7qVJ/ZfDJBlfYYrSU
jKmGv6dNJtjcRqrN/bGpmec6m0LXqu9yvL0liDG5DD3koeSQ5zTKXphMRSm/rDNV
1jINO3BL0sVSAgWIoUn4J4yGTCuJVU3SgXAm2felPb0g/Xukdp63hRf0oZAJAQ6c
lNZEHiSobRVGImcL4WJBJrL14Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:13 2026 by rpki-client