Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File:                     4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier:          wqbfVlHwCWw/wsqK/M5qaqv4STJDcw0A/9/um8/OPkY=
Subject key identifier:   D0:67:0F:98:1F:8E:A0:DF:79:5F:DC:AB:D4:0C:1F:83:2B:2C:BD:1E
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer:       /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial:       18E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number:          18A1
Signing time:             Fri 24 Jul 2026 16:38:01 +0000
Manifest this update:     Fri 24 Jul 2026 16:38:01 +0000
Manifest next update:     Fri 31 Jul 2026 16:38:01 +0000
Files and hashes:         1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: pt98ZSdeMQlUrqie+rqAuWzdGTM0GHnm/QyiUnFczjQ=)
                          2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=)
                          3: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=)
                          4: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
                          rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 16:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6372 (0x18e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
        Validity
            Not Before: Jul 24 16:38:01 2026 GMT
            Not After : Jul 31 16:38:01 2026 GMT
        Subject: CN=6a6394e9-7747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:d2:77:f8:66:a0:37:de:d0:62:ac:b1:ee:
                    17:e0:b9:dc:7b:7b:41:fc:54:12:22:c7:ef:dc:e2:
                    40:8a:b5:34:96:4c:02:ca:fd:62:53:1b:ab:02:20:
                    6d:cd:e2:77:c8:62:c9:a3:b0:98:17:9d:e6:f3:6b:
                    0f:d6:b4:31:1b:3b:2a:be:d1:d8:41:61:d6:06:f9:
                    eb:c8:5a:1c:65:22:2a:68:3d:71:5b:4b:5d:af:55:
                    da:d2:ef:44:20:dd:a0:d4:f5:5c:33:01:50:78:25:
                    0f:5c:01:cd:7f:e5:3a:10:82:ed:b1:b1:dd:42:8d:
                    1e:c0:26:5a:77:4c:f3:4e:d0:3a:bc:0a:57:22:8e:
                    78:56:31:23:47:27:b3:7f:88:c4:b1:9c:66:90:98:
                    22:1a:77:cd:28:3a:94:af:0d:d2:66:d3:85:a8:cc:
                    e6:ec:8f:f8:c1:c4:05:84:c8:17:17:87:cb:b2:0a:
                    c0:43:5a:6d:32:b4:76:62:85:b9:a0:fb:08:88:c0:
                    2b:1e:65:da:b6:57:36:52:e8:1c:90:e4:51:6e:bb:
                    c0:11:6d:03:08:a4:85:2d:82:27:4b:8e:89:a9:35:
                    f6:66:b5:0b:b8:ee:da:a5:cf:2b:d4:61:ba:74:26:
                    86:00:eb:97:f8:d2:22:31:c0:e7:9e:62:12:1d:9a:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:67:0F:98:1F:8E:A0:DF:79:5F:DC:AB:D4:0C:1F:83:2B:2C:BD:1E
            X509v3 Authority Key Identifier:
                keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5f:03:33:2b:d5:0b:39:a2:be:f6:e8:fc:dd:46:18:de:a3:
         21:5f:84:38:0b:99:76:d5:db:15:3d:b8:9d:20:92:4a:88:2e:
         f4:67:d8:2a:ce:a9:67:bb:90:03:58:60:2f:5b:6f:6d:8d:8a:
         5d:61:8f:ce:f3:8a:b4:a8:e2:a1:dd:5d:75:d9:7c:39:94:43:
         2d:58:cf:56:ac:c3:90:ea:80:2b:00:ee:ff:46:71:e4:e8:df:
         e4:2a:08:fa:3e:54:cf:97:28:03:56:3e:87:44:68:ae:25:1d:
         5f:45:ed:61:91:8a:0f:f9:a4:d2:e8:a6:3c:42:a2:ab:c5:23:
         09:84:a1:b5:49:c4:74:d5:c0:a4:35:3b:56:0c:65:83:a7:ef:
         82:63:4c:be:2c:20:29:42:b6:db:c4:0b:1d:9c:50:f6:57:96:
         ef:ac:ed:d7:99:09:02:ca:3b:4f:09:d6:68:6e:5e:8b:7f:c5:
         68:1c:7c:66:04:d8:7c:97:88:9d:93:78:ca:13:a9:ec:2a:1a:
         14:9b:cc:cc:d8:64:ce:76:a4:4f:83:da:4d:cf:de:66:93:47:
         78:d5:7a:2a:6e:84:c8:d3:67:16:fc:3f:a0:b1:c0:50:b6:85:
         cd:62:0e:94:52:14:69:32:9a:5b:9f:e6:41:c0:fc:e5:9a:35:
         46:e1:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:51 2026 by rpki-client