Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File:                     aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier:          uzYmPIksrAtYV3FuJ7EupkeAKPOIG9xdI5jKo0N2aVE=
Subject key identifier:   60:0F:D4:BB:F4:45:55:9B:CE:B3:09:A4:AE:8C:F6:CB:65:F2:7F:FC
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer:       /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial:       3592
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number:          356D
Signing time:             Wed 22 Jul 2026 15:20:58 +0000
Manifest this update:     Wed 22 Jul 2026 15:20:58 +0000
Manifest next update:     Wed 29 Jul 2026 15:20:58 +0000
Files and hashes:         1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: kBjH55pP23CsC6/oM+IwtLhzuGX0rkmGITKmqRh6cOQ=)
                          2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=)
                          3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
                          rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13714 (0x3592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
        Validity
            Not Before: Jul 22 15:20:58 2026 GMT
            Not After : Jul 29 15:20:58 2026 GMT
        Subject: CN=6a60dfda-e8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:6e:3c:c6:1b:44:b2:64:17:5f:29:3e:c0:
                    b8:ec:6b:7b:63:ac:20:fb:ff:27:34:d2:35:5f:4e:
                    83:eb:a6:d6:7e:eb:b8:75:78:80:e7:94:b8:e9:43:
                    6b:f0:2d:50:f3:01:4e:a1:03:99:b2:e6:37:75:c8:
                    b5:d6:f3:e3:38:a0:45:3a:ce:ba:57:6c:30:fe:87:
                    58:89:e4:89:d8:d1:93:c9:15:d6:c8:da:79:7d:13:
                    c9:08:17:8d:ae:87:65:6e:3d:97:95:16:40:03:d1:
                    e4:67:1d:ed:0c:78:cc:20:b4:26:a3:83:2e:4f:9d:
                    35:4b:10:fb:51:eb:b5:a5:aa:28:e3:8e:62:4e:c4:
                    5d:eb:5a:54:d3:b9:ba:89:a6:fc:b4:d2:d3:ac:f1:
                    78:ed:95:23:d5:b2:16:4c:e7:5f:24:d7:04:df:27:
                    ae:23:98:35:d1:94:f8:31:44:55:e8:96:0b:b6:39:
                    5b:5a:2e:65:97:16:f7:65:f2:c7:c0:62:b1:a4:e3:
                    6e:99:b9:fb:f5:91:03:bc:98:83:bc:e1:8a:fc:6d:
                    04:f3:02:ab:7f:96:e9:4f:65:06:4b:7e:af:72:81:
                    7d:65:4d:11:34:99:6a:4a:a4:5e:75:0d:aa:54:cd:
                    77:0c:49:7b:a1:d8:f3:16:89:e7:23:af:95:21:f9:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0F:D4:BB:F4:45:55:9B:CE:B3:09:A4:AE:8C:F6:CB:65:F2:7F:FC
            X509v3 Authority Key Identifier:
                keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:05:c0:00:22:53:97:c0:b9:af:6f:1e:a0:2a:38:24:5f:
         f5:f4:61:4c:90:67:38:d9:77:0f:39:7c:72:03:53:61:cb:e0:
         b0:fd:6e:c7:e5:e8:a4:45:52:5c:34:69:bb:b1:b1:e6:c4:8e:
         4e:ef:36:a8:9c:ad:f5:61:f2:76:72:bb:33:90:3c:54:43:91:
         fb:91:7f:ec:d2:7c:01:b9:ef:d4:68:b2:e6:2a:bb:fd:5a:2f:
         82:8b:fb:3f:09:46:fd:13:e4:d0:a9:ef:99:be:97:eb:51:17:
         0f:5c:f6:d8:95:4f:e6:fb:8e:87:e0:5d:8a:60:6a:14:40:ea:
         dd:ff:fe:0b:5a:c8:d1:27:e0:56:68:a2:82:b4:1c:31:20:07:
         29:60:11:ef:75:40:8d:8d:c2:f3:4b:2d:fa:a8:1f:dc:8d:db:
         ba:6f:e2:b1:9f:c9:26:e4:56:7f:0a:8e:0f:82:0c:ca:9f:80:
         2b:94:81:16:1e:e6:94:21:f2:11:5c:d3:04:5a:18:13:d3:75:
         d3:15:99:18:56:e6:ac:41:b4:38:2d:b2:09:ef:0c:f5:1a:07:
         74:00:fe:e0:40:4b:8b:47:e6:b3:f0:df:d8:ba:b8:3e:ce:7d:
         56:b1:93:8a:bd:69:48:2e:fb:33:51:6b:80:72:09:8d:19:37:
         ae:55:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:05 2026 by rpki-client