Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
File:                     N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json)
Hash identifier:          D8MOZwtsUmV3a5W6Jzs5EmV2bphfZ3sbx6B0iAqjo1Q=
Subject key identifier:   69:96:AE:05:C6:43:E0:DE:BB:F2:2D:65:71:0C:44:26:66:D5:39:33
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Certificate issuer:       /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial:       165B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
Manifest number:          1651
Signing time:             Wed 22 Jul 2026 16:48:04 +0000
Manifest this update:     Wed 22 Jul 2026 16:48:03 +0000
Manifest next update:     Wed 29 Jul 2026 16:48:03 +0000
Files and hashes:         1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: k9I26bX4llZ1lgCGq+lpU1X/aRF1NjMSe5a8dOGMiQE=)
                          2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: XBmIpP4qinSeA1jzcuT6oilOKIYCzxkHKIGJU/Du2l4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
                          rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5723 (0x165b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
        Validity
            Not Before: Jul 22 16:48:03 2026 GMT
            Not After : Jul 29 16:48:03 2026 GMT
        Subject: CN=6a60f444-914c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:07:72:01:fc:e8:eb:44:3a:88:73:cf:7c:
                    a4:a0:72:aa:79:75:c5:79:9c:43:78:b5:88:1c:92:
                    e9:c9:73:cc:95:00:31:ea:ae:70:cc:8f:22:54:a4:
                    fa:c0:42:15:f6:b5:c1:a1:52:19:f9:7f:a8:9e:c6:
                    6f:2c:9a:13:15:1d:40:e7:35:af:72:2f:df:a3:df:
                    a2:64:15:ec:bc:a4:2e:a3:9e:b3:5c:8b:f1:42:8f:
                    d4:75:03:c3:60:24:4e:57:e4:dd:ce:3b:9f:ae:6e:
                    32:4c:68:da:94:e1:0d:5c:d9:88:cf:b4:12:14:d2:
                    a7:96:7d:b1:2e:bf:f6:65:08:b1:c1:6f:09:8c:b3:
                    f3:2a:8f:8a:32:27:0d:c7:01:5a:81:ed:08:6f:0e:
                    15:d2:a3:44:7c:3d:c1:d0:3d:d8:8e:9c:f3:2f:3f:
                    3a:b9:8c:9c:00:a8:56:35:5b:14:3c:ba:ab:ef:93:
                    2c:c2:56:a1:21:c3:ce:03:bb:34:d4:24:f7:3a:eb:
                    96:1e:1f:67:d8:2e:37:75:16:b5:8b:d9:c5:c3:dc:
                    0e:f8:59:52:4e:e6:73:bf:0a:2e:30:86:30:1e:76:
                    92:4a:f4:51:9b:b9:82:6e:cf:28:63:c3:90:4c:58:
                    99:48:6d:9a:7b:5a:e9:98:65:0b:14:a9:f3:7c:cf:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:96:AE:05:C6:43:E0:DE:BB:F2:2D:65:71:0C:44:26:66:D5:39:33
            X509v3 Authority Key Identifier:
                keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:d3:54:fd:4b:b1:2e:9a:4e:45:8f:8b:44:4a:e4:6c:8c:
         34:90:89:c6:e5:57:a8:86:3f:8f:4f:61:cf:fd:26:a7:f7:8e:
         5d:8d:df:e5:1f:8e:12:37:af:1b:97:37:16:09:fc:f0:c8:16:
         5f:33:21:fa:dd:b0:8c:69:41:f6:69:fd:0b:ec:99:f2:f3:9c:
         bc:59:80:7c:59:5b:10:23:da:83:6f:d3:70:dc:e5:be:93:09:
         71:cf:26:49:5a:0f:8f:92:3c:11:bf:5f:4d:fb:40:d8:ee:06:
         f6:bd:84:c8:f0:14:7f:85:12:7d:41:0d:2c:5c:3c:40:cf:bb:
         e9:48:6f:7c:ee:7e:c5:5e:a9:fa:3e:98:ad:d8:65:10:4b:b5:
         19:35:13:8a:71:e6:73:bf:49:95:25:86:f1:b8:62:3e:a6:67:
         9f:54:e0:96:70:c5:2f:95:1c:bf:60:36:8f:2c:f5:4b:00:78:
         26:8b:d3:1c:44:11:7f:16:7e:cd:e0:08:39:fc:88:c4:ce:6a:
         8c:67:08:3b:00:73:05:5b:d2:1c:50:20:48:00:52:0c:47:a1:
         78:71:60:20:ee:6c:10:fb:4c:f5:1c:6f:58:f3:5c:34:84:f1:
         b5:21:94:32:4d:10:4a:c0:b4:e0:04:2e:0d:db:36:dc:e3:6e:
         43:60:ef:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:36 2026 by rpki-client