Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File:                     Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier:          Z2Hi2pNCri1A+blG8Zq8o6clVlKiUobl0L63vT1puc0=
Subject key identifier:   94:69:12:2F:0E:5B:F8:0F:DC:54:02:AF:08:A6:D9:B1:FD:E6:23:84
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       123E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number:          10AF
Signing time:             Wed 22 Jul 2026 17:40:59 +0000
Manifest this update:     Wed 22 Jul 2026 17:40:59 +0000
Manifest next update:     Wed 29 Jul 2026 17:40:59 +0000
Files and hashes:         1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: 6UkyTJzWk5NQu6bLR3sf6/A+cezylw24N1gUQG29q/4=)
                          2: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=)
                          3: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=)
                          4: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=)
                          5: C2356A948FE811E98B967A66C4F9AE02.roa (hash: Spu6ueKiAix7Vx1bbz3QuH8zuY42SfhsOYEFzJ/3W4o=)
                          6: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=)
                          7: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: SwqLx1ykNlWfnGxIgnnplctUN2Uh69BTnr1sDfxJRlM=)
                          8: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=)
                          9: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=)
                          10: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=)
                          11: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=)
                          12: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=)
                          13: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: 0xacdRxIlt6XlMYC4ytgm5Wnpkb/XtvJrzfDYrQNkow=)
                          14: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=)
                          15: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: Dy3vf2brgO7ffq8geCJNrRWY4aeeqFaFWyK7H7SMUrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4670 (0x123e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Jul 22 17:40:59 2026 GMT
            Not After : Jul 29 17:40:59 2026 GMT
        Subject: CN=6a6100ab-c9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:5c:b0:e3:21:8f:20:bd:b8:e6:d4:c4:40:
                    21:26:05:15:3f:ac:9e:1e:e0:76:8c:48:e9:e7:ce:
                    82:18:53:d0:b3:96:7c:88:ae:b3:4c:d9:4c:f8:e8:
                    5f:35:a1:e0:b9:86:65:fc:4b:d4:d9:d8:63:1f:c8:
                    33:84:fd:0f:91:e8:6c:ed:a7:b0:81:85:b1:e4:7b:
                    c3:dc:0b:9d:1f:ae:47:34:97:e5:7b:a3:6e:02:ca:
                    77:20:72:d4:77:b8:25:07:52:6b:83:a1:52:ab:e3:
                    9a:cd:bc:36:26:05:e8:24:83:a1:85:57:c3:c0:76:
                    68:cb:01:1c:15:d0:d9:01:5b:17:bd:68:71:8d:b4:
                    5f:17:ec:98:4e:13:d7:67:4c:2d:b9:92:bd:de:ff:
                    6a:e2:18:5c:e0:de:2f:9c:e5:52:27:a6:92:52:b1:
                    45:ea:19:f3:7e:e7:d0:f4:74:5d:b7:b2:20:d1:b5:
                    b2:29:0f:e6:02:98:f7:0a:0f:01:6e:b7:56:01:35:
                    ce:76:2a:af:86:ce:5d:0f:3d:12:63:46:35:cc:cd:
                    47:d5:a7:79:6d:6b:67:70:7b:13:6a:85:ca:10:d1:
                    88:1e:2d:34:0c:ab:88:f4:62:aa:db:6c:13:a7:3a:
                    a4:f3:39:61:78:0f:5b:da:77:10:76:0d:16:0a:f4:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:69:12:2F:0E:5B:F8:0F:DC:54:02:AF:08:A6:D9:B1:FD:E6:23:84
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:7c:3a:4f:fc:a6:8d:70:7e:4e:93:7e:63:8f:98:76:e1:
         a8:8e:ab:45:2b:8b:fc:5e:a6:27:7b:5b:b4:7b:5f:fb:3c:19:
         b4:14:a6:7b:6d:83:f9:90:5f:84:db:be:ed:ff:8d:3c:5c:96:
         27:69:49:76:e1:25:1f:71:06:7f:ca:00:da:1a:61:e7:33:f5:
         87:34:38:e4:48:77:c5:78:62:b5:f4:f0:5f:66:7b:b1:ab:1b:
         33:fe:63:97:65:32:3d:55:69:24:ff:b1:1e:fc:4d:60:0a:5f:
         ef:97:b3:85:0e:a0:e4:e0:70:27:98:f3:c4:15:13:24:48:2a:
         00:fb:79:f5:6b:ac:d6:c9:55:c9:19:24:86:4d:65:e9:e5:49:
         e4:d4:e1:77:77:ac:1c:bb:dd:d3:a8:a1:f1:d7:a3:4e:20:f2:
         5b:e1:3f:04:d3:cc:4a:70:1c:00:3a:48:63:17:24:7b:7f:c0:
         95:f2:bb:11:1b:81:3a:da:ad:a0:4e:c8:b9:4c:ab:10:f8:e9:
         48:94:c5:a1:d0:5f:3c:60:76:fd:c1:f2:37:92:29:fb:c9:d0:
         7f:3a:71:fe:53:14:ce:2f:0a:64:28:e4:5f:63:a0:40:09:94:
         80:ee:28:01:6c:8b:ce:f3:e3:1a:7c:95:70:c9:98:bf:3f:22:
         96:aa:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:47 2026 by rpki-client