Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
File:                     47jqsa6RbflaLVWue7e7eaULSuc.mft (raw, json)
Hash identifier:          Xs7gCqtjY/bIjjDsKKG3kQdmkwFNk1P0fa1BPBfIraI=
Subject key identifier:   C1:7C:B7:8D:A4:BB:CE:FD:F4:37:BB:13:03:A8:4D:3B:27:7E:0C:56
Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7
Certificate issuer:       /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7
Certificate serial:       0817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
Manifest number:          080D
Signing time:             Wed 22 Jul 2026 21:46:06 +0000
Manifest this update:     Wed 22 Jul 2026 21:46:06 +0000
Manifest next update:     Wed 29 Jul 2026 21:46:06 +0000
Files and hashes:         1: 47jqsa6RbflaLVWue7e7eaULSuc.crl (hash: Eq8dKFvdP2SxgJSgH7V3A1VmLUYkUY1qhxr+nmdGTBc=)
                          2: D2E2417A2F7211EB80969C22C4F9AE02.roa (hash: NL0gqlt7sgRjcOJd57M8ANhXVyltVKX/f6EHVjrmMqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl
                          rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B591, serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7
        Validity
            Not Before: Jul 22 21:46:06 2026 GMT
            Not After : Jul 29 21:46:06 2026 GMT
        Subject: CN=6a613a1e-d96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:86:09:c1:e7:8e:95:c1:6d:97:1c:21:58:
                    3a:89:34:7d:89:c0:8d:e8:72:f1:fb:db:78:9f:ee:
                    0f:d7:05:f1:6f:44:b4:88:9e:bd:84:a5:f6:ac:11:
                    cf:6c:4f:7c:2c:a3:77:b1:9e:9e:58:41:49:f7:46:
                    32:e1:f2:a6:b5:9c:8a:1f:94:1b:ac:f0:fb:31:b8:
                    da:7b:e8:ce:97:22:d8:82:2e:a4:22:6e:f1:d2:2b:
                    55:75:47:01:e4:19:25:b5:77:5c:05:ce:e5:d9:5b:
                    a5:98:dd:61:91:8e:93:66:b1:f3:80:74:79:e2:71:
                    d7:67:63:c1:29:5b:3f:6e:be:a0:33:99:b0:3b:05:
                    e2:48:d5:67:19:51:4c:fd:73:c8:47:dc:bf:03:23:
                    a4:bd:70:03:b0:b7:59:c7:54:e8:bb:2c:17:67:61:
                    c6:27:47:36:30:f8:5e:3f:0c:9d:df:74:77:d5:85:
                    5f:16:56:7d:14:2f:ce:3b:05:b3:02:e3:79:fc:05:
                    e7:51:da:fa:e4:b5:1b:40:14:47:2c:08:01:f4:c0:
                    10:db:ec:e7:78:5a:9f:bd:01:2a:1f:c6:aa:49:43:
                    6e:cd:26:6f:bc:b2:b6:a9:19:41:91:0a:ba:5c:68:
                    51:41:56:e6:d5:07:56:86:38:60:ba:c8:b5:a2:c7:
                    7d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7C:B7:8D:A4:BB:CE:FD:F4:37:BB:13:03:A8:4D:3B:27:7E:0C:56
            X509v3 Authority Key Identifier:
                keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:18:f4:2a:31:36:14:23:d7:a2:00:f6:ba:92:ce:09:15:a1:
         b7:e0:9c:ab:70:90:f1:d8:cd:74:05:1b:cc:5c:f3:34:b7:e4:
         7e:90:f4:6d:cc:3b:b2:0d:27:30:bc:36:c8:26:f4:10:1d:a7:
         bd:92:a8:e8:ec:46:ed:dc:07:93:a9:a0:32:ac:30:84:59:f3:
         2b:9e:21:16:1f:af:45:67:32:27:ab:57:09:78:f5:ca:35:81:
         31:ab:d3:1c:4e:91:17:f7:d7:96:8c:08:1a:95:06:26:db:51:
         d6:a6:25:22:19:dc:d6:4d:42:b9:e3:56:2e:bc:26:f8:cf:42:
         30:af:ce:49:c6:ea:cd:0b:08:fb:fe:8f:b7:60:46:3f:0e:ee:
         19:70:57:e7:17:ed:2d:9e:96:ff:a5:7f:30:1c:e0:93:6d:98:
         12:86:04:04:7a:f3:ef:c9:81:b0:f9:5a:85:49:57:52:93:5b:
         11:ea:26:79:7a:ee:94:a1:0c:ad:96:e2:71:dc:2d:0d:6c:fa:
         59:95:31:43:5e:5e:29:06:f1:ee:e3:0f:ae:6f:5c:e7:63:94:
         5d:c3:7e:d6:97:0e:be:bc:9b:e8:d2:eb:32:fa:fa:00:b3:a6:
         8c:e1:8c:d2:a2:41:e6:1a:c4:19:89:00:62:41:b9:c8:65:a8:
         e0:52:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:58 2026 by rpki-client