Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
File:                     0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json)
Hash identifier:          7bSKGddi4HLow3VCMcadHdJPrlWkUK/3uELGsZ5Dacg=
Subject key identifier:   4B:50:3A:F6:C5:EC:10:62:4B:A9:DA:C6:EF:38:B7:17:A3:18:49:35
Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Certificate issuer:       /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Certificate serial:       056D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
Manifest number:          0565
Signing time:             Wed 22 Jul 2026 16:33:30 +0000
Manifest this update:     Wed 22 Jul 2026 16:33:29 +0000
Manifest next update:     Wed 29 Jul 2026 16:33:29 +0000
Files and hashes:         1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: ChUAKP/104NZh3aHZDRxR+aRLB+zVJqm8gcfydO45QM=)
                          2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pPVg90RNjRjphrQIpFi1Dtq7Yfiqt2CKG2uE/Sw0pBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl
                          rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
        Validity
            Not Before: Jul 22 16:33:29 2026 GMT
            Not After : Jul 29 16:33:29 2026 GMT
        Subject: CN=6a60f0d9-7572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:b0:22:36:81:ec:64:97:81:05:61:29:58:
                    82:28:3d:9a:2a:80:0a:1e:1f:0d:5a:f9:66:42:b6:
                    9d:a7:7d:a4:36:16:0a:4b:09:85:8b:47:7c:c2:6c:
                    20:2f:3c:0c:06:b3:ce:f1:98:3d:47:fa:9d:87:c9:
                    b9:41:b4:fa:d4:33:05:67:13:8c:b6:1c:3a:7b:46:
                    8b:da:c2:97:01:12:fd:65:ea:69:bc:39:5d:92:23:
                    29:f0:fe:5a:a2:e4:c4:16:c3:b3:09:43:30:3d:5f:
                    1a:59:41:36:e7:ed:b6:3f:22:4a:85:d7:0c:82:d7:
                    0d:66:38:06:ca:25:5c:86:ff:66:d2:e7:ca:c0:ea:
                    f2:ae:01:a4:e9:8a:e1:19:60:71:4c:07:45:24:21:
                    01:f7:3e:ae:aa:ea:2c:d2:a6:64:e3:1e:11:8d:39:
                    a5:a9:69:e8:23:d2:4f:a4:ae:61:69:f3:38:a3:ac:
                    a5:83:00:79:b2:ad:c0:46:c7:74:fc:32:3e:9a:91:
                    d0:18:3b:ac:4e:5e:34:45:3f:ae:9c:38:fe:25:52:
                    1d:52:2c:65:f6:d9:29:aa:a4:ca:55:09:b6:a7:dc:
                    20:bd:f4:5d:ac:9a:0e:58:c9:8c:84:1e:c9:fc:5d:
                    93:a4:98:a4:16:8d:7b:01:67:6c:96:e3:6a:67:22:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:50:3A:F6:C5:EC:10:62:4B:A9:DA:C6:EF:38:B7:17:A3:18:49:35
            X509v3 Authority Key Identifier:
                keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:87:b2:79:5b:c6:b5:e5:81:d9:c3:31:e7:84:9c:3c:c5:7a:
         b0:35:25:59:29:7e:46:86:65:4b:42:c1:e7:cb:66:ab:de:74:
         af:93:bd:65:60:63:9b:0a:58:1a:9b:21:cd:98:be:72:54:d5:
         73:37:3b:85:9c:56:54:bf:de:1b:3d:79:ab:6c:af:1b:b4:ff:
         cd:1f:c3:71:70:f1:99:78:3b:5a:d6:3b:d7:0b:77:e6:3b:90:
         28:fb:3a:1c:8b:74:33:26:18:78:33:85:67:96:8b:9e:ea:dd:
         ba:03:6e:90:a0:ad:6d:f7:e6:51:b7:77:c0:35:99:6c:8e:44:
         0d:79:2a:29:33:c2:b5:32:71:dc:7e:1f:03:5d:cb:12:30:70:
         da:00:ed:1f:06:12:8e:e2:0e:9d:da:4a:5b:ee:19:20:b3:b7:
         c9:d3:ad:1b:61:91:c5:d0:11:ff:ed:e2:9d:10:82:b1:80:f1:
         ea:c6:2f:1f:0c:66:93:7a:73:aa:ef:ea:34:11:89:55:05:a2:
         e3:52:16:68:cf:a4:4e:08:96:7e:32:40:4c:ad:18:73:d1:69:
         cd:4d:e3:ca:33:b0:c3:d2:1e:2d:e6:5a:51:bc:ed:81:73:27:
         05:31:1e:fa:da:f6:64:a7:3d:2d:57:2a:d1:94:cd:c8:dc:19:
         f9:13:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:57 2026 by rpki-client