Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
File:                     r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json)
Hash identifier:          SiKntpt9sK5Fe3equ3DEdDKtaVE6gBqJienXDADseYk=
Subject key identifier:   D9:30:0B:A4:03:67:3A:43:E4:E2:CA:A4:12:35:CA:8A:CB:73:5A:91
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Certificate issuer:       /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial:       1F97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
Manifest number:          1F26
Signing time:             Fri 24 Jul 2026 16:09:08 +0000
Manifest this update:     Fri 24 Jul 2026 16:09:07 +0000
Manifest next update:     Fri 31 Jul 2026 16:09:07 +0000
Files and hashes:         1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: MVc+kKrTk9a2tUNKuoOFFivvpCp+uVEvT5pYip4meSg=)
                          2: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 8+HVn+1aDWLHtIQalu+KT6alxAIGWOxLQB3VgePG+TU=)
                          3: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: R0F5zzc+BpzP1/ZU/NVRkNdsAgNiR161974QmuBaZJM=)
                          4: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: orzccmiNSicAop/OpjFFJ2tGr1eSdfKFi4jU7YLYc30=)
                          5: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: yrw/Wliea2v/nhT95C1H6CHn+Y9xHNL1DsyB2AthFt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
                          rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 16:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8087 (0x1f97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
        Validity
            Not Before: Jul 24 16:09:07 2026 GMT
            Not After : Jul 31 16:09:07 2026 GMT
        Subject: CN=6a638e24-7a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:67:20:21:55:de:21:10:b2:7c:c7:81:cd:
                    70:33:ac:a2:bf:0f:e0:ba:f1:f2:6a:cb:30:e0:48:
                    03:d8:7e:c5:27:1c:a5:ed:fb:9a:4d:f7:79:ee:2f:
                    11:74:c9:ea:ae:84:e5:81:32:a3:ff:e3:24:16:e6:
                    53:f0:f0:96:e6:bd:03:96:c6:d9:c6:c8:b7:d6:e7:
                    35:24:7d:a8:e9:b0:20:43:06:24:44:71:49:d4:e9:
                    a1:89:74:0a:54:a0:38:ce:18:25:ec:6c:60:a3:e4:
                    82:3b:3b:a6:bd:f8:3b:ea:80:6d:07:4d:63:fd:a8:
                    d7:69:c4:7d:fc:3d:b3:f3:e2:0c:55:67:61:1f:64:
                    8f:72:e1:ce:59:65:ab:a0:29:e1:a1:b2:8c:d1:f9:
                    e6:e0:53:12:36:09:43:e8:83:66:78:b3:2f:31:b2:
                    51:84:34:39:44:18:4d:6e:04:ae:a5:83:51:05:db:
                    47:4f:8c:fa:96:17:c6:99:b2:ef:51:91:77:76:e3:
                    71:c9:9e:84:26:c6:39:78:a1:a6:b9:05:b1:0a:5b:
                    18:fc:fb:0d:33:f5:a8:dd:00:e2:48:a8:62:0e:82:
                    18:74:8e:21:c8:6c:5f:00:fc:4a:e5:51:df:cc:8c:
                    70:4f:65:2b:b4:9b:ee:a7:ba:bf:81:27:9e:81:e9:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:30:0B:A4:03:67:3A:43:E4:E2:CA:A4:12:35:CA:8A:CB:73:5A:91
            X509v3 Authority Key Identifier:
                keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:51:c6:ca:f1:b3:50:db:30:3e:8e:04:63:0c:2c:c6:0e:6b:
         1f:7c:c9:93:32:46:72:53:2e:13:12:2e:5c:5e:eb:24:c8:69:
         96:0d:84:0c:a8:45:e3:65:70:0d:03:a4:b0:97:1f:f4:04:a4:
         fc:d5:b7:05:d4:c0:2e:e7:df:da:a3:1d:2f:6e:8c:fc:41:3e:
         dc:8a:e4:a4:e8:1d:1c:c4:99:31:dd:30:fe:82:35:29:7c:fa:
         21:53:ca:7b:ca:71:6d:4b:4f:9d:ec:04:ca:c3:56:46:d0:0b:
         71:9e:a1:2b:17:13:4a:61:4d:39:4b:98:30:10:df:43:42:20:
         14:79:9d:48:85:bd:37:11:04:12:45:aa:6a:57:7f:c2:94:f6:
         8e:3d:c5:7f:0d:2e:9b:a2:b6:2a:56:09:50:2f:5a:74:29:88:
         0e:df:8a:b2:76:cf:a8:a2:00:2c:a9:00:66:65:5a:69:2e:b0:
         e0:a8:f8:2c:d8:ae:a7:50:0a:73:b0:66:68:55:3a:6a:8d:6c:
         22:6d:b2:08:db:23:7e:e0:7b:37:b1:03:96:d1:4f:c1:fa:68:
         d2:ec:9a:5a:46:a9:1c:74:77:e3:b1:5a:79:33:49:0e:af:81:
         e8:db:f0:1b:1f:14:8b:5d:d8:40:c2:bc:8b:90:13:3a:cf:c1:
         89:b2:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:07:47 2026 by rpki-client