Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
File:                     6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json)
Hash identifier:          TUfHIVZj0PafAnwDItSllY9XZiDI77UOvUSHxV1hybE=
Subject key identifier:   8A:A5:76:1B:B5:53:9D:BC:9F:5E:96:91:07:F0:EE:C9:80:5F:50:77
Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
Certificate issuer:       /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Certificate serial:       04D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
Manifest number:          04C5
Signing time:             Thu 23 Jul 2026 00:39:34 +0000
Manifest this update:     Thu 23 Jul 2026 00:39:34 +0000
Manifest next update:     Thu 30 Jul 2026 00:39:34 +0000
Files and hashes:         1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: 45PVi+AitI4jZUvWdgmvOsoUzl+k5wS1TvTpIVudLBE=)
                          2: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: TGbZZQRtOxkLwoI+sDoyzXNZ3IGSlLxUsDOYQ4o4eXY=)
                          3: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: gUiW2vAjoVWGmxrK7l/5cBeg47nEU1anGQrH3sCs9Nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
        Validity
            Not Before: Jul 23 00:39:34 2026 GMT
            Not After : Jul 30 00:39:34 2026 GMT
        Subject: CN=6a6162c6-3df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:87:8b:9e:d1:57:83:73:05:0e:e2:47:ea:
                    05:07:c0:63:95:6f:55:fb:a3:0d:89:58:0b:57:55:
                    85:54:14:72:48:1a:25:dd:bd:ba:52:85:0b:41:a0:
                    92:88:18:54:34:f3:5f:7e:92:ea:c8:43:27:9b:91:
                    a1:b6:d6:fb:52:4a:20:bb:d0:9f:ed:d7:30:01:b3:
                    0b:c5:26:3d:22:e4:5d:c7:51:c0:df:64:9b:9e:c3:
                    c7:5f:f7:68:e6:1c:f0:29:fa:6a:72:9c:3e:40:f6:
                    f2:8f:97:dc:66:48:fe:ba:51:eb:38:51:07:1e:df:
                    23:59:91:7e:6a:dd:99:25:a0:0d:48:4a:92:d8:59:
                    24:af:b4:29:bc:87:2e:cb:f8:4a:6a:dc:72:65:66:
                    b5:78:e4:51:03:43:47:cf:54:68:bb:3a:7f:a9:cb:
                    1e:72:59:ce:d1:15:80:81:a4:c3:de:9e:48:e2:19:
                    17:58:79:f8:1f:9f:dd:de:f1:c5:99:a1:1e:f1:6c:
                    66:8c:a3:01:49:d6:f0:cf:e7:bb:96:88:ff:93:fb:
                    e0:7b:bf:b9:2d:2c:bf:c0:7b:1b:6a:16:ea:21:33:
                    da:48:18:3b:c6:6e:36:df:bf:28:2e:53:01:da:9a:
                    5c:a7:69:b5:43:ee:5a:ad:b9:08:5b:ba:53:4e:f7:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A5:76:1B:B5:53:9D:BC:9F:5E:96:91:07:F0:EE:C9:80:5F:50:77
            X509v3 Authority Key Identifier:
                keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:8b:20:3f:ba:bf:08:f3:b9:d3:4b:92:2c:89:f8:c1:c1:f4:
         2c:27:54:fe:c0:ec:a0:34:e5:52:dd:d5:9c:bf:30:1e:e7:2c:
         56:01:b5:3f:ac:e7:0b:9d:31:07:8f:a8:9a:11:19:e9:0b:28:
         f9:1d:09:17:11:75:38:e1:c1:21:9c:d3:4f:c8:ec:e2:da:31:
         1a:e3:a4:ee:c8:06:e8:8e:eb:cb:1e:c4:ba:e6:1a:5a:ae:e1:
         bb:dd:9a:26:63:03:cb:eb:e0:a6:50:17:25:a2:f0:43:fb:eb:
         21:0b:70:70:23:41:c4:a5:a6:e4:0a:97:24:51:5d:98:04:a7:
         c9:22:f0:46:94:c4:9b:19:ea:17:e2:47:5a:fd:76:58:17:31:
         2f:6f:cd:f2:47:87:c4:ec:62:c8:b9:05:19:23:70:df:d4:35:
         bb:ba:9e:59:30:0d:0c:c7:3f:d0:86:c7:4e:f1:71:a6:cd:90:
         1c:71:a5:3f:46:15:d9:c8:88:18:63:03:ce:a8:c0:0d:a7:ec:
         f0:54:40:a4:27:61:d6:d3:1a:d1:50:47:28:47:7a:8b:d4:11:
         fe:b0:2f:cc:da:27:40:e4:1b:bd:99:63:ab:93:a1:50:d5:bb:
         10:e4:0c:61:22:6f:d8:4f:0b:70:03:2a:59:cf:d8:1b:78:e3:
         52:a3:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:12 2026 by rpki-client