Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
File:                     4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json)
Hash identifier:          dDtuQShYmRQCGE+tg8fnS2JIIcnZJdoaL91bE9Pz3yw=
Subject key identifier:   10:52:44:76:62:9A:66:A8:55:30:30:43:5C:8B:33:58:FE:9A:96:D4
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Certificate issuer:       /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
Manifest number:          DA
Signing time:             Thu 23 Jul 2026 08:21:53 +0000
Manifest this update:     Thu 23 Jul 2026 08:21:52 +0000
Manifest next update:     Thu 30 Jul 2026 08:21:52 +0000
Files and hashes:         1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: U1Dh52ZVz4+zoNRYQvd1m3V5TZi3M/sQj4U2SUxVsRw=)
                          2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: j7nDmBZXblO/tpvpaih+MGRhVNByB2VTssko4z3YvKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
        Validity
            Not Before: Jul 23 08:21:52 2026 GMT
            Not After : Jul 30 08:21:52 2026 GMT
        Subject: CN=6a61cf21-e8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:dd:5f:10:ab:76:a3:3d:d2:af:39:88:b9:
                    f8:ee:2e:c4:cd:f0:b1:54:35:ab:2e:e2:cf:3b:ee:
                    79:20:51:91:f2:b4:e9:94:8c:f5:ca:b0:2b:ff:27:
                    26:a7:0f:7b:eb:04:3c:58:d2:6c:76:73:e4:35:95:
                    5c:1e:26:81:39:2b:97:e2:9a:15:60:ef:7c:7e:59:
                    d6:dc:b7:04:df:8d:08:95:4a:b3:15:97:62:60:64:
                    b4:dd:e5:36:a2:1b:fb:34:29:33:0d:3b:41:9a:16:
                    ce:fc:76:ae:ed:bc:13:10:59:b7:3d:6a:04:82:41:
                    fa:5a:79:13:91:a8:84:d6:10:fd:6a:a1:9a:a1:8a:
                    9c:4c:87:16:7a:2d:e1:17:7c:6e:fd:13:2d:4e:8c:
                    61:18:20:58:c8:99:72:60:12:ce:ef:1b:a3:92:b7:
                    f2:75:b3:ef:f9:47:3f:6b:de:19:d6:72:90:d1:1b:
                    22:29:b3:e2:da:ba:d7:5f:4f:07:90:fd:fb:97:49:
                    01:d7:87:d8:f7:7f:ef:83:fd:00:a7:96:5d:1b:88:
                    bf:01:be:21:2c:7b:a7:94:53:73:78:45:8b:5a:37:
                    6e:f9:5b:16:48:b3:c4:b0:e0:3f:76:ba:6c:13:8f:
                    dd:34:18:86:a3:32:b2:6e:75:76:6c:42:ed:8c:ae:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:44:76:62:9A:66:A8:55:30:30:43:5C:8B:33:58:FE:9A:96:D4
            X509v3 Authority Key Identifier:
                keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:0e:0c:e2:ee:49:96:ec:e1:62:07:6f:10:88:11:58:4a:
         56:58:6a:f5:8f:d7:c3:d3:9f:4b:4e:6e:ad:18:f0:b3:c4:43:
         0f:38:95:c6:86:45:f4:38:6f:8c:ba:72:9b:0a:87:03:7d:8c:
         6b:9b:aa:98:97:20:6d:de:d3:07:c5:c5:3f:0e:29:21:f1:2c:
         18:75:f0:2b:44:a0:cc:9c:8d:f9:23:4d:1c:f4:47:3e:e2:c4:
         e9:09:57:44:4e:83:42:70:b3:a0:40:ea:89:cb:e2:c7:df:a0:
         b1:a2:5a:6a:81:75:4a:42:1a:77:86:14:78:52:56:6f:bb:f0:
         37:eb:fa:82:43:04:ca:65:b9:58:1b:bc:5a:fb:7e:c5:41:37:
         16:56:1b:ef:fc:94:a2:fb:8a:3e:38:5e:b9:d4:d8:5e:f3:c3:
         1d:f0:f4:88:7c:b6:f1:0b:bf:29:4a:ad:8a:86:89:52:a7:a7:
         ce:b5:42:c0:35:6c:ad:e8:e7:d3:26:d7:2f:36:c4:f7:96:59:
         6c:55:1e:8d:c5:ef:e5:31:83:47:8b:4f:8a:0d:5b:20:c7:e9:
         9f:6e:cd:94:11:2e:ee:27:b7:e8:ac:6a:31:b1:34:70:4c:5d:
         60:d0:79:80:d4:38:83:7b:4c:01:77:c8:7e:5b:62:fb:69:1e:
         6d:de:37:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:52 2026 by rpki-client