Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File:                     MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier:          7abJOfeCJWKUjGf6cA+rG2WDOKPrrR28DzomMJUVp6Q=
Subject key identifier:   D5:0B:DB:27:C9:19:A8:26:8F:11:E0:24:92:5E:6D:3B:B7:AB:CD:B8
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer:       /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number:          012A
Signing time:             Thu 23 Jul 2026 07:30:13 +0000
Manifest this update:     Thu 23 Jul 2026 07:30:12 +0000
Manifest next update:     Thu 30 Jul 2026 07:30:12 +0000
Files and hashes:         1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: 2fjrlYlFUtGLdVmmT2QfTcbQT7bo4RHGqtlGwAeKcmU=)
                          2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: 8RwXImvokvSX9GnVWZYfh0skm/ZCGYwhT4s+TGjd6Vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
        Validity
            Not Before: Jul 23 07:30:12 2026 GMT
            Not After : Jul 30 07:30:12 2026 GMT
        Subject: CN=6a61c305-1e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:c1:f7:78:e6:e3:f0:d2:dc:37:73:1f:0d:
                    df:25:59:eb:e5:e3:64:ae:0a:22:b6:8a:0d:9c:bd:
                    6a:fa:89:60:f2:9b:f5:0b:96:19:eb:fe:c6:c2:41:
                    f2:fd:dc:bf:c4:73:a1:65:ee:8e:b0:b8:ba:8c:1b:
                    05:6d:a0:22:2f:7d:96:ef:58:40:7b:05:b5:59:21:
                    41:39:76:eb:d1:ae:62:e6:e8:d1:32:e0:5c:71:28:
                    3b:c9:e0:e0:00:fb:3d:7d:3a:97:ef:fd:4f:b5:84:
                    fa:84:e9:64:a4:84:ec:13:d3:87:6d:61:70:22:0e:
                    e4:46:d4:29:01:c7:ee:e0:08:e0:d1:c0:a8:53:94:
                    3d:37:3d:ae:bf:8c:15:bb:58:80:49:ff:4b:03:3f:
                    eb:18:28:40:98:a1:3d:2b:eb:8b:c4:66:43:b4:9c:
                    14:95:77:9d:2b:62:c8:5c:bd:3a:ff:84:24:fd:e3:
                    75:06:ae:f7:65:56:9d:a0:e8:b9:33:44:b6:c9:85:
                    6e:c0:56:ed:db:bd:33:4f:1a:ce:5b:44:06:6f:af:
                    56:90:9d:c2:e3:56:f6:6e:1b:37:0b:01:c5:d4:e3:
                    2e:fd:11:a7:f9:ef:d5:d3:85:d0:e6:ea:4f:0e:48:
                    2a:db:2b:9a:09:d7:1d:d3:a4:eb:77:b7:44:5a:d7:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0B:DB:27:C9:19:A8:26:8F:11:E0:24:92:5E:6D:3B:B7:AB:CD:B8
            X509v3 Authority Key Identifier:
                keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:32:62:03:8d:a7:ee:af:06:dd:32:e4:ed:a7:77:d6:7f:c1:
         34:d4:b4:65:de:b7:9b:90:75:f7:ec:77:f7:f8:90:f1:a0:d4:
         b6:2e:0c:e5:36:4f:a8:ec:1b:38:1f:1d:8c:8c:12:9c:96:a2:
         86:4f:89:2e:9e:eb:6c:46:c6:72:19:2e:1f:23:89:a6:0c:89:
         b6:35:2c:9d:12:c5:5c:1e:5e:c8:ec:ff:09:c2:1e:c5:a5:54:
         62:b6:6b:8a:78:e3:f0:ab:80:57:1d:04:64:46:d5:66:ad:7e:
         18:1c:67:94:83:96:84:51:78:ea:c0:aa:9e:ef:6c:b8:3d:f0:
         ed:c4:1b:98:b7:c3:6f:e1:be:92:39:07:85:e2:ba:89:8b:f3:
         bb:0d:ed:8f:1b:52:b4:e0:0d:bd:44:cf:a7:9e:d6:88:3a:64:
         a2:e7:c2:48:d8:8e:e3:06:98:4c:96:0f:87:64:91:18:87:3a:
         70:9f:c6:4e:e7:79:9f:ae:3c:7b:f2:cd:a7:02:d3:4a:f5:c2:
         a9:6f:b9:64:38:11:83:3e:45:b3:32:0b:97:c1:8b:df:1e:72:
         62:1f:f1:0f:85:23:db:a8:63:87:1f:c4:a1:f8:3f:ef:b5:bc:
         84:16:21:15:ac:7d:0b:9a:a3:3d:47:53:b0:40:00:a2:b0:ad:
         e9:2b:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:40 2026 by rpki-client