Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File:                     33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier:          2wv62yReL+Z1odzNz4aDaxhGHYprRWJlQlqX3PJxAgQ=
Subject key identifier:   97:5C:09:9A:DD:F4:34:81:E2:67:38:6B:48:38:2D:77:90:1F:B2:8A
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number:          0522
Signing time:             Thu 23 Jul 2026 00:25:59 +0000
Manifest this update:     Thu 23 Jul 2026 00:25:58 +0000
Manifest next update:     Thu 30 Jul 2026 00:25:58 +0000
Files and hashes:         1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: 7RhgFSJO0T3+Sl7LU4G4GAeUqIxgCWyErucq+K+93iw=)
                          2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: 99vdeYRHmvAZBTn+o2vbxAXonLGmmxRzUfRMT6ujYvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Jul 23 00:25:58 2026 GMT
            Not After : Jul 30 00:25:58 2026 GMT
        Subject: CN=6a615f97-da7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:60:c0:54:35:ec:1c:76:e7:d2:1e:0e:17:
                    ab:a9:11:73:39:a1:99:d8:d5:a9:83:b5:a7:06:e3:
                    14:39:4e:bc:39:8e:3c:79:04:63:e4:ac:df:70:42:
                    31:4f:8f:7f:93:6e:67:22:98:d3:59:2f:9f:73:c3:
                    c2:f6:3e:b7:23:9d:31:a5:c1:1f:1f:55:95:44:8c:
                    bf:1d:00:71:7d:4b:37:fc:f1:84:0c:0e:38:30:d8:
                    e1:72:63:aa:38:50:5e:08:ce:06:6f:63:1f:3c:04:
                    ea:1e:63:2c:57:fc:c6:e2:96:9e:b7:7c:d0:13:2f:
                    f0:17:ba:43:32:31:84:ca:79:a3:2b:47:1b:1b:1d:
                    a1:36:a9:42:a1:a0:33:3c:3f:4c:c7:c7:d2:ea:d9:
                    7a:81:19:2f:19:52:1c:5b:df:7e:f2:0b:b9:24:b7:
                    19:87:28:23:f3:da:39:9a:d3:48:20:de:19:33:b5:
                    52:ec:db:e7:d3:f5:1a:3b:19:77:13:c7:c9:e3:37:
                    92:66:11:6b:01:d7:48:27:6a:13:4e:39:62:fa:45:
                    88:03:82:b2:09:1e:fa:1e:d4:b6:43:70:5c:64:11:
                    0f:01:34:f9:12:40:d9:3c:c2:35:29:46:0f:3f:db:
                    c4:18:08:62:c3:86:2f:e6:81:b8:ed:8a:1a:1d:a6:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5C:09:9A:DD:F4:34:81:E2:67:38:6B:48:38:2D:77:90:1F:B2:8A
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2b:08:c4:28:67:02:34:f6:22:fe:30:ff:43:61:f9:a9:b9:
         45:7c:05:d7:f4:f0:11:9a:22:a6:e2:36:d0:78:c1:5f:5c:88:
         8c:f4:1e:ed:21:0b:03:cd:15:44:8a:10:51:ed:5e:49:18:ec:
         82:b7:ec:d0:72:6d:16:8e:13:68:ba:72:4e:c6:c6:d0:ea:8a:
         71:34:07:ff:2b:1d:e6:97:00:73:88:3f:19:10:26:20:18:68:
         29:d5:15:42:3e:31:54:c1:0f:4f:c7:08:2a:42:19:4a:4d:8a:
         11:bb:42:fe:0d:db:77:97:83:7f:1b:82:97:2b:04:ee:e4:5e:
         d3:09:a8:0b:07:3f:72:51:ac:20:f0:b4:dd:9b:cd:5e:37:04:
         95:6a:97:cb:95:41:75:33:9e:4b:d6:f7:49:a2:ac:98:d1:57:
         9c:c3:a4:6e:1f:82:be:d9:70:66:fd:9e:a1:1c:38:06:ff:54:
         b7:f1:b6:b1:8d:17:f0:ee:4f:19:62:c3:71:de:73:2d:c4:16:
         42:18:f4:7b:92:e1:33:b1:51:9b:dc:51:40:76:5b:67:a0:3f:
         56:07:d6:e2:45:0b:d3:b4:0a:af:f2:a8:b5:42:40:44:a0:18:
         a7:2b:c2:39:43:db:b4:73:ec:7b:d3:21:eb:81:1a:5c:b2:bd:
         4d:04:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:07 2026 by rpki-client