Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
File:                     diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json)
Hash identifier:          bsIljStRlBnFvHe9bIzClQo/otdZ8cqCp/FdB8uUdI0=
Subject key identifier:   FB:00:10:81:0E:B7:C2:6A:E1:4D:91:43:ED:5B:3E:B9:2E:25:E3:3C
Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
Certificate issuer:       /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
Manifest number:          34
Signing time:             Thu 23 Jul 2026 10:38:23 +0000
Manifest this update:     Thu 23 Jul 2026 10:38:22 +0000
Manifest next update:     Thu 30 Jul 2026 10:38:22 +0000
Files and hashes:         1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: 4vnz8U8pMgGrOtBu5/aQ+1b0hf1EcPba33fOi4S0yYo=)
                          2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
                          rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
        Validity
            Not Before: Jul 23 10:38:22 2026 GMT
            Not After : Jul 30 10:38:22 2026 GMT
        Subject: CN=6a61ef1e-204e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:fd:c9:6b:2d:d8:59:98:5c:ec:60:35:f0:
                    79:80:a2:29:da:c4:57:e0:80:13:40:a5:e9:ff:ec:
                    1f:7b:0d:f0:0b:b2:09:52:ee:0b:c0:cb:86:99:e1:
                    80:7d:67:cd:44:04:08:26:da:cb:30:7f:3c:f8:5d:
                    c0:73:dc:2e:94:36:1e:2c:e2:99:95:f4:c8:11:06:
                    90:c2:62:38:78:89:b5:98:07:13:f9:9b:00:51:6f:
                    98:98:cc:cb:02:57:10:73:69:72:54:f0:da:3c:ca:
                    6f:70:ce:2d:7b:06:3d:34:6c:32:4e:e2:7b:2f:3c:
                    0e:cc:97:06:f5:b0:13:26:b2:ac:ff:48:df:9d:e1:
                    43:a7:1c:3f:98:a1:f9:70:e7:c3:b8:92:48:81:06:
                    96:d7:01:d6:e3:90:45:9c:57:c6:7b:a2:80:74:47:
                    42:15:9e:ce:78:d4:55:01:dd:26:fe:31:c2:28:db:
                    22:03:9f:ac:04:dd:9f:79:40:3f:e2:02:94:4d:37:
                    1b:8f:5b:c7:fa:29:f0:c6:a9:82:22:c9:8f:ec:2b:
                    99:fc:26:78:c5:e7:33:e5:3d:ae:1f:ce:dd:1f:93:
                    34:42:44:18:5d:fb:a7:0b:35:4c:01:7d:b7:0c:75:
                    9a:27:45:d7:d7:9b:0e:1d:ed:87:6d:e7:b8:c2:80:
                    8c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:00:10:81:0E:B7:C2:6A:E1:4D:91:43:ED:5B:3E:B9:2E:25:E3:3C
            X509v3 Authority Key Identifier:
                keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:04:68:ac:98:42:2d:4b:ec:26:b7:93:f2:1b:3e:6e:b4:d8:
         05:1e:c9:1b:57:98:be:07:6f:00:f2:87:12:54:e4:43:e5:df:
         7f:0c:1c:69:26:8b:13:91:d7:46:b9:f5:87:a7:4d:ae:1d:c7:
         75:b5:d0:64:80:66:59:9e:56:45:38:8a:94:e7:92:a9:8e:a3:
         39:da:c9:fa:94:07:6c:9a:3b:c5:5b:2d:4b:7a:8a:57:58:12:
         de:32:42:94:c2:1c:06:dd:eb:c8:89:bd:95:72:23:a1:d3:37:
         bd:17:72:9c:14:60:8e:2e:50:19:90:25:d4:bd:28:b4:43:f6:
         e8:f8:94:c6:44:c8:4f:79:01:9e:c2:51:b9:8e:e5:0b:aa:94:
         a2:f7:0d:5d:85:9b:bb:f0:c6:f5:b7:40:9e:6e:cd:c7:41:74:
         46:74:b4:0f:30:a5:25:ca:68:8b:50:96:2b:11:92:e1:67:5e:
         2d:b4:cc:c6:4b:18:5a:e2:72:75:be:1a:48:f4:f0:89:35:41:
         5d:06:f8:db:b2:cd:e2:17:1d:2d:9e:b7:01:63:02:13:e4:e5:
         0d:b1:bf:e4:40:1d:70:aa:44:1a:da:d5:8b:96:a7:c7:1a:92:
         c8:44:89:92:38:cc:67:d6:b2:d4:3f:a9:7f:c9:02:a4:d5:32:
         df:89:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:48:30 2026 by rpki-client