Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File:                     3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier:          UBayohNTTFVmXRKQJTD2HmKm414cU8jEejRptmUrBvE=
Subject key identifier:   26:3D:2E:EB:D2:94:FC:A8:0E:9F:77:8B:14:20:82:33:6F:EF:0A:72
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer:       /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number:          01B8
Signing time:             Thu 23 Jul 2026 05:19:50 +0000
Manifest this update:     Thu 23 Jul 2026 05:19:50 +0000
Manifest next update:     Thu 30 Jul 2026 05:19:50 +0000
Files and hashes:         1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: bCnVWKYlFspeXVUU2UfVSW6rCqatobC/oE5oM6tsRBM=)
                          2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
        Validity
            Not Before: Jul 23 05:19:50 2026 GMT
            Not After : Jul 30 05:19:50 2026 GMT
        Subject: CN=6a61a476-d2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:ed:91:00:f2:ff:9f:2d:06:88:0b:70:9e:
                    32:10:e2:41:1e:98:19:ce:bc:d8:f6:96:68:8d:e4:
                    01:cd:27:9f:88:24:ee:ed:ae:df:b2:84:b7:78:4e:
                    53:f0:aa:53:01:68:3a:b5:cf:2a:99:c8:ab:64:77:
                    d4:c5:05:90:4d:b9:30:a0:31:c5:f6:ea:4f:14:3c:
                    da:b8:89:50:bf:87:e2:58:28:84:94:a8:c2:bf:42:
                    c2:f1:87:ca:e4:6c:a0:c7:80:35:ef:c4:46:29:14:
                    d3:95:e4:0d:e7:de:23:a2:f2:5b:5d:f6:5d:32:a9:
                    40:fb:0a:ab:27:fb:b1:58:de:3d:31:77:c5:65:59:
                    ea:e0:77:27:df:bc:b1:98:a4:02:c8:7d:c7:c2:93:
                    fe:75:82:ba:b5:0d:85:50:aa:0e:86:74:e8:b3:0f:
                    09:6d:72:f6:33:23:99:2b:4c:91:30:4b:30:b3:48:
                    d8:8f:bc:6c:68:51:e6:57:a9:ab:17:17:e2:ce:12:
                    95:70:ba:c5:18:7a:3f:95:62:2a:24:75:1f:42:43:
                    61:0e:47:10:1e:33:6a:00:01:30:11:9c:2f:4d:50:
                    38:db:3f:a8:cb:cf:22:8d:44:25:40:d2:0d:bd:aa:
                    0d:e9:28:40:3c:39:aa:e7:9b:5d:3b:92:d3:79:f1:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3D:2E:EB:D2:94:FC:A8:0E:9F:77:8B:14:20:82:33:6F:EF:0A:72
            X509v3 Authority Key Identifier:
                keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:cd:0e:d4:6d:1b:60:ef:67:6e:1c:24:0f:9c:bf:99:5b:
         4b:44:31:a3:6b:e4:6a:e7:c0:3d:cb:cd:91:d2:da:61:0f:97:
         ff:a6:5c:1e:34:79:55:2d:73:1d:e3:97:a8:08:96:a5:7b:2e:
         ec:18:24:19:a6:c1:86:25:7a:43:e9:85:9c:b6:7a:26:bd:63:
         29:ac:8e:60:dc:d2:c8:95:32:01:0b:23:50:df:81:d9:56:f6:
         c3:ba:b8:00:c0:e0:c2:7d:d0:db:4c:9e:0e:4f:c3:e4:98:9b:
         1f:ef:5d:b0:3f:f7:bb:d5:e2:8d:db:98:65:9c:96:c2:de:ca:
         2e:7f:8e:e1:02:30:f9:9b:1f:da:df:97:7c:e8:91:2f:d5:7f:
         ab:21:98:81:eb:e1:e5:65:ff:35:1b:64:01:8f:60:56:7a:a3:
         88:bb:19:fa:37:5e:77:6e:f7:40:1c:85:1f:4c:7a:11:13:28:
         1b:14:08:a4:a0:1f:a5:8f:71:cb:df:1c:89:46:f3:f5:cf:b8:
         5d:47:66:53:76:83:3c:20:88:85:7d:44:2b:6b:b6:32:a2:cf:
         7e:1a:79:1d:a3:fe:0e:b9:d8:3d:ec:36:08:38:a6:23:a3:73:
         a8:ba:31:37:52:f5:d5:b6:eb:9b:6e:26:59:4b:c3:ef:51:90:
         bc:71:55:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2
REIyMjA3ODEwHhcNMjYwNzIzMDUxOTUwWhcNMjYwNzMwMDUxOTUwWjAYMRYwFAYD
VQQDEw02YTYxYTQ3Ni1kMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjPPtkQDy/58tBogLcJ4yEOJBHpgZzrzY9pZojeQBzSefiCTu7a7fsoS3eE5T
8KpTAWg6tc8qmcirZHfUxQWQTbkwoDHF9upPFDzauIlQv4fiWCiElKjCv0LC8YfK
5Gygx4A178RGKRTTleQN594jovJbXfZdMqlA+wqrJ/uxWN49MXfFZVnq4Hcn37yx
mKQCyH3HwpP+dYK6tQ2FUKoOhnTosw8JbXL2MyOZK0yRMEsws0jYj7xsaFHmV6mr
FxfizhKVcLrFGHo/lWIqJHUfQkNhDkcQHjNqAAEwEZwvTVA42z+oy88ijUQlQNIN
vaoN6ShAPDmq55tdO5LTefHKeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCY9LuvS
lPyoDp93ixQggjNv7wpyMB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1
QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2
UlZCZXFoSTdyMmh0c2lCNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAev/NDtRtG2DvZ24cJA+cv5lbS0Qxo2vkaufAPcvNkdLaYQ+X/6ZcHjR5VS1z
HeOXqAiWpXsu7BgkGabBhiV6Q+mFnLZ6Jr1jKayOYNzSyJUyAQsjUN+B2Vb2w7q4
AMDgwn3Q20yeDk/D5JibH+9dsD/3u9XijduYZZyWwt7KLn+O4QIw+Zsf2t+XfOiR
L9V/qyGYgevh5WX/NRtkAY9gVnqjiLsZ+jded273QByFH0x6ERMoGxQIpKAfpY9x
y98ciUbz9c+4XUdmU3aDPCCIhX1EK2u2MqLPfhp5HaP+DrnYPew2CDimI6NzqLox
N1L11bbrm24mWUvD71GQvHFVTQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:47 2026 by rpki-client