Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
File:                     _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json)
Hash identifier:          nlqvlHo+8CW9hd6jucxh5mahUDp2HZcV/dwSx9qwbB4=
Subject key identifier:   DD:12:E9:CE:61:6A:F6:9E:6D:C4:5B:EE:AF:34:F3:65:7E:E2:0C:DE
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Certificate issuer:       /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial:       02F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
Manifest number:          02EC
Signing time:             Thu 23 Jul 2026 02:11:43 +0000
Manifest this update:     Thu 23 Jul 2026 02:11:42 +0000
Manifest next update:     Thu 30 Jul 2026 02:11:42 +0000
Files and hashes:         1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: B8AVNMcxtV9ZhCzd/5pt55ZgJZ2qaYAeOr9NLT7xG6A=)
                          2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: FbLoVUwsuqm0sT8Nxbam5MwbDmX4JcPXq2npG0lokuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
                          rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
        Validity
            Not Before: Jul 23 02:11:42 2026 GMT
            Not After : Jul 30 02:11:42 2026 GMT
        Subject: CN=6a61785e-b0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d5:f8:fb:a7:ca:90:54:6e:5d:d1:89:52:99:
                    60:44:7e:36:d2:36:0f:51:d7:dd:3b:cb:9e:6f:b0:
                    b5:29:57:8f:d1:29:90:d5:01:4a:4d:af:81:e2:48:
                    8d:f0:17:d3:6f:aa:f1:11:32:17:55:6f:76:f0:50:
                    5b:48:33:d0:2b:db:cd:5d:be:d2:96:90:98:ee:90:
                    04:cb:3c:37:b9:4f:fb:7f:f7:72:8b:9b:1b:87:16:
                    e4:a6:5a:ef:8d:4c:22:93:b1:5b:c1:4d:5e:db:be:
                    1c:06:3b:45:17:66:37:32:db:95:0f:b4:83:3a:29:
                    12:ff:b2:0d:70:a9:73:e2:eb:6e:34:eb:2d:4e:ff:
                    96:e7:ad:c3:da:c3:fb:8c:ab:97:7e:2e:b9:73:c0:
                    5e:dd:0f:52:06:b2:1a:ea:3f:dd:bf:0c:a5:d6:74:
                    14:de:79:32:d6:ea:a0:1e:69:10:00:b1:5f:13:cd:
                    3b:ad:df:74:56:b9:19:77:e4:cb:3a:90:b1:9c:b7:
                    ce:c5:c6:85:56:b9:74:6c:3b:e0:dd:0d:14:e6:be:
                    b1:08:bc:d9:32:54:f1:25:6d:f2:95:cc:6c:3c:e1:
                    fb:6c:d8:be:23:b5:99:cd:c0:80:59:43:3b:f7:cc:
                    cb:a8:84:89:82:a3:ff:6b:4e:02:f8:16:2b:fa:40:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:E9:CE:61:6A:F6:9E:6D:C4:5B:EE:AF:34:F3:65:7E:E2:0C:DE
            X509v3 Authority Key Identifier:
                keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c9:82:2f:64:4f:37:cb:8c:16:fb:8e:90:3d:73:12:1a:d9:
         98:5d:ef:dc:79:a9:94:6e:2c:5d:f4:06:03:64:17:11:07:2d:
         7b:5c:3d:ed:0d:da:18:75:84:e8:8b:da:74:61:f4:01:ea:df:
         37:a9:11:c5:3d:93:6a:e7:1d:d6:98:68:98:dd:07:73:2b:6e:
         93:d2:c3:f0:62:98:35:3c:d1:d0:f4:22:91:7f:63:aa:d0:25:
         1b:06:fe:ce:9d:1f:a1:60:01:9c:94:28:eb:4c:31:31:94:19:
         89:26:8d:59:43:e2:91:4c:ae:69:a7:8c:f6:a9:88:8a:4e:ba:
         6d:b6:ba:e7:e7:89:93:40:7c:e3:b7:97:45:23:db:85:57:a1:
         0d:d3:9b:6e:47:8b:c3:93:71:13:25:4f:08:eb:40:96:2a:6f:
         df:fa:b9:7b:25:aa:78:78:89:ac:2c:35:36:4d:d1:b6:3b:66:
         d9:1f:19:71:5b:c8:9f:01:c0:15:52:0f:18:f6:14:d4:3c:2d:
         ce:7b:c5:6a:af:dc:6c:a1:51:3b:64:dd:10:5a:84:59:fb:eb:
         8c:d5:62:02:ee:87:e5:f7:a9:95:2d:82:42:44:88:ed:d8:2f:
         18:61:1e:60:f5:80:09:66:e0:84:2b:e0:97:a1:89:ff:48:99:
         cb:2d:32:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIxRjUxMTAvBgNVBAUTKEZGM0UwRTBGQTdGRjI1N0RCRDg2RTYyQjEyOUE5OTRE
OEE0OUQ4NEUwHhcNMjYwNzIzMDIxMTQyWhcNMjYwNzMwMDIxMTQyWjAYMRYwFAYD
VQQDEw02YTYxNzg1ZS1iMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA69X4+6fKkFRuXdGJUplgRH420jYPUdfdO8ueb7C1KVeP0SmQ1QFKTa+B4kiN
8BfTb6rxETIXVW928FBbSDPQK9vNXb7SlpCY7pAEyzw3uU/7f/dyi5sbhxbkplrv
jUwik7FbwU1e274cBjtFF2Y3MtuVD7SDOikS/7INcKlz4utuNOstTv+W563D2sP7
jKuXfi65c8Be3Q9SBrIa6j/dvwyl1nQU3nky1uqgHmkQALFfE807rd90VrkZd+TL
OpCxnLfOxcaFVrl0bDvg3Q0U5r6xCLzZMlTxJW3ylcxsPOH7bNi+I7WZzcCAWUM7
98zLqISJgqP/a04C+BYr+kBnbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0S6c5h
avaebcRb7q8082V+4gzeMB8GA1UdIwQYMBaAFP8+Dg+n/yV9vYbmKxKamU2KSdhO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjFGNS8wRDIxM0VEQzMz
RkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pYMjlodVlyRXBxWlRZcEoy
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL196NE9ENmZfSlgyOWh1WXJFcHFaVFlwSjJFNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjFGNS8wRDIxM0VEQzMzRkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pY
MjlodVlyRXBxWlRZcEoyRTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALMmCL2RPN8uMFvuOkD1zEhrZmF3v3HmplG4sXfQGA2QXEQcte1w97Q3aGHWE
6IvadGH0AerfN6kRxT2Taucd1phomN0Hcytuk9LD8GKYNTzR0PQikX9jqtAlGwb+
zp0foWABnJQo60wxMZQZiSaNWUPikUyuaaeM9qmIik66bba65+eJk0B847eXRSPb
hVehDdObbkeLw5NxEyVPCOtAlipv3/q5eyWqeHiJrCw1Nk3Rtjtm2R8ZcVvInwHA
FVIPGPYU1DwtznvFaq/cbKFRO2TdEFqEWfvrjNViAu6H5feplS2CQkSI7dgvGGEe
YPWACWbghCvgl6GJ/0iZyy0ySA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:03 2026 by rpki-client