Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File:                     4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier:          CSf6GA/vLxDHSmmqB31FHA1u5CGj0i/Q05BnhRzaRnA=
Subject key identifier:   A6:93:43:F3:BE:74:C6:5F:9A:EF:3B:1C:4A:C1:E8:C7:DA:AD:FB:D2
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer:       /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number:          0122
Signing time:             Thu 23 Jul 2026 07:26:06 +0000
Manifest this update:     Thu 23 Jul 2026 07:26:06 +0000
Manifest next update:     Thu 30 Jul 2026 07:26:06 +0000
Files and hashes:         1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: /zQP1R/MkQDXKOmjZocyblWN56HVlsW9pnB4YXlxDtM=)
                          2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
                          rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
        Validity
            Not Before: Jul 23 07:26:06 2026 GMT
            Not After : Jul 30 07:26:06 2026 GMT
        Subject: CN=6a61c20e-c880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:7f:55:84:f4:35:29:83:76:e5:d1:8f:73:
                    cc:86:90:26:00:00:8d:f2:eb:05:cf:2c:64:0c:67:
                    87:51:35:eb:db:65:8d:53:98:dc:8c:60:73:1c:93:
                    bf:1b:8e:90:ad:4c:bf:a9:6b:80:be:8c:55:a4:55:
                    62:12:3f:a3:ab:61:35:50:a2:8c:12:a6:6f:7c:ca:
                    4b:42:73:44:57:33:88:d4:28:a8:e1:e3:75:82:44:
                    8d:6f:ab:c0:78:2e:3d:8a:1d:c5:a5:51:bc:11:b1:
                    bb:56:3a:11:60:ed:8e:41:81:c7:49:14:84:44:64:
                    e0:9a:82:c1:9d:53:d5:6c:1d:83:48:93:da:68:20:
                    da:3f:c3:15:e1:f0:72:d3:3e:44:92:96:9b:8a:03:
                    b5:f7:17:02:53:c6:02:95:a6:ba:a9:48:23:c5:56:
                    43:ab:b5:d3:23:af:a4:49:8d:23:6a:02:fc:eb:8e:
                    c9:78:f4:2e:14:be:4f:2e:77:c7:05:95:b7:e7:b7:
                    32:fb:3d:65:14:93:26:3b:e3:c4:a7:b0:30:4b:b5:
                    78:e1:62:f4:66:51:50:bb:f5:86:89:37:d4:bf:51:
                    a9:d1:71:5f:33:35:04:29:78:39:a4:d8:8e:9f:f3:
                    4e:6b:a4:08:1f:d9:65:62:6f:b1:8c:6d:1d:22:14:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:93:43:F3:BE:74:C6:5F:9A:EF:3B:1C:4A:C1:E8:C7:DA:AD:FB:D2
            X509v3 Authority Key Identifier:
                keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c8:00:d4:74:5c:64:5a:86:a1:1a:33:fd:4b:d2:d0:35:a8:
         65:5a:79:3a:ac:9c:31:05:23:b4:34:d1:f2:2a:ae:1f:a3:b7:
         7b:83:23:85:d1:24:48:a3:14:af:e3:82:6b:2b:c3:c7:aa:aa:
         0d:6e:61:16:e7:d8:99:f7:e1:1d:86:27:3e:61:f3:7c:94:fc:
         a4:46:7c:1a:9f:36:61:9c:4a:0f:bc:67:5f:7d:63:36:1d:b1:
         66:ad:9e:d7:c6:29:0b:f6:d2:0b:81:c2:92:8c:56:15:3d:e4:
         9c:95:79:0c:61:c1:6e:6c:fc:9b:19:b2:be:a1:02:83:d1:4d:
         fb:f3:b3:80:f6:4f:0d:da:c3:25:98:86:16:70:46:4f:a5:62:
         a0:32:da:e3:20:91:cd:bc:1c:19:81:89:5c:f8:44:8f:97:48:
         e3:75:77:77:13:b1:a3:53:0b:b5:c8:98:8a:ff:6f:02:57:f9:
         c7:24:f5:0a:55:35:b0:40:ba:ca:e9:39:2d:ac:a5:87:10:25:
         45:49:b5:b3:f9:19:40:e6:ca:46:03:fc:c7:e6:61:70:2d:6e:
         cc:7a:7a:41:d5:8c:af:aa:21:f1:1a:3a:77:04:c1:90:ee:a8:
         b1:bd:82:45:e8:10:10:40:ca:bb:1f:02:91:d1:17:f0:a7:54:
         1b:4d:07:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YwQUYxMTAvBgNVBAUTKEUxMTQzNzhEQTkzNDg2MTQ2OUY0OTVEOTc1OThFMEYw
MDI4OUMzMzAwHhcNMjYwNzIzMDcyNjA2WhcNMjYwNzMwMDcyNjA2WjAYMRYwFAYD
VQQDEw02YTYxYzIwZS1jODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjR/VYT0NSmDduXRj3PMhpAmAACN8usFzyxkDGeHUTXr22WNU5jcjGBzHJO/
G46QrUy/qWuAvoxVpFViEj+jq2E1UKKMEqZvfMpLQnNEVzOI1Cio4eN1gkSNb6vA
eC49ih3FpVG8EbG7VjoRYO2OQYHHSRSERGTgmoLBnVPVbB2DSJPaaCDaP8MV4fBy
0z5EkpabigO19xcCU8YClaa6qUgjxVZDq7XTI6+kSY0jagL8647JePQuFL5PLnfH
BZW357cy+z1lFJMmO+PEp7AwS7V44WL0ZlFQu/WGiTfUv1Gp0XFfMzUEKXg5pNiO
n/NOa6QIH9llYm+xjG0dIhRbpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaTQ/O+
dMZfmu87HErB6MfarfvSMB8GA1UdIwQYMBaAFOEUN42pNIYUafSV2XWY4PACicMw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBBRi8yRDdBN0UwRUND
NEYxMUVGQTg5QThGMTRDNEY5QUUwMi80UlEzamFrMGhoUnA5SlhaZFpqZzhBS0p3
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRSUTNqYWswaGhScDlKWFpkWmpnOEFLSnd6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjBBRi8yRDdBN0UwRUNDNEYxMUVGQTg5QThGMTRDNEY5QUUwMi80UlEzamFrMGho
UnA5SlhaZFpqZzhBS0p3ekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu8gA1HRcZFqGoRoz/UvS0DWoZVp5OqycMQUjtDTR8iquH6O3e4MjhdEkSKMU
r+OCayvDx6qqDW5hFufYmffhHYYnPmHzfJT8pEZ8Gp82YZxKD7xnX31jNh2xZq2e
18YpC/bSC4HCkoxWFT3knJV5DGHBbmz8mxmyvqECg9FN+/OzgPZPDdrDJZiGFnBG
T6VioDLa4yCRzbwcGYGJXPhEj5dI43V3dxOxo1MLtciYiv9vAlf5xyT1ClU1sEC6
yuk5LaylhxAlRUm1s/kZQObKRgP8x+ZhcC1uzHp6QdWMr6oh8Ro6dwTBkO6osb2C
RegQEEDKux8CkdEX8KdUG00HTw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:43 2026 by rpki-client