Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
File:                     pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json)
Hash identifier:          FPTh7VhnCYNSrmf+a2NcZ8jBVrKEinr1txeUMXy0ypU=
Subject key identifier:   EC:EF:53:F4:84:CB:49:43:BF:FA:31:1B:50:61:D9:71:FB:86:21:A0
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Certificate issuer:       /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
Manifest number:          0211
Signing time:             Wed 22 Jul 2026 19:16:51 +0000
Manifest this update:     Wed 22 Jul 2026 19:16:50 +0000
Manifest next update:     Wed 29 Jul 2026 19:16:50 +0000
Files and hashes:         1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: k/zbaUVkmpQp+t3L/Uxh08T7BTXlxdROy7ertaIhxlg=)
                          2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: IZDaa3RvwLLyBno3E88edLLqf6N/YltnYG0ukbjvIk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
        Validity
            Not Before: Jul 22 19:16:50 2026 GMT
            Not After : Jul 29 19:16:50 2026 GMT
        Subject: CN=6a611722-47f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:ac:4a:86:c8:b4:d4:4e:74:10:3a:83:aa:
                    c1:1c:25:4b:ca:28:eb:9f:f5:49:a0:0c:8f:22:ed:
                    93:3d:b4:b1:ef:7f:b8:83:52:a0:fe:a5:cf:61:bc:
                    b9:d7:7e:df:81:85:00:e9:09:79:97:08:91:f1:8d:
                    f7:62:38:3b:79:75:76:b7:de:f7:a7:f9:38:c8:0b:
                    23:b3:cb:6f:c7:9d:45:82:4f:90:35:f3:d4:81:62:
                    50:66:cb:dd:ad:69:c7:69:7d:10:70:82:e2:ed:df:
                    3a:dd:c7:d3:25:03:1c:a6:4d:af:1d:1f:bc:ea:85:
                    83:a0:c1:a4:b0:95:f1:92:9b:1a:4f:ea:af:12:33:
                    9a:8d:25:a9:31:2a:4a:58:02:17:68:20:f4:37:ae:
                    6b:a9:5f:c7:30:21:8f:12:5d:4b:57:d1:f5:ca:47:
                    37:02:2a:5c:bc:75:6f:5c:e0:26:41:41:0a:4d:17:
                    11:af:12:15:35:55:04:86:63:a1:19:73:3e:63:08:
                    dc:cd:16:4a:e2:50:78:07:6f:f8:8e:30:21:94:1d:
                    ea:b7:4b:0f:15:71:08:8b:b1:bc:7f:ee:be:dd:39:
                    5e:65:cb:89:19:b4:5f:18:60:54:8f:99:5a:e7:80:
                    d0:7d:1e:f7:6a:4f:3c:47:78:80:21:fc:2e:58:bf:
                    8f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EF:53:F4:84:CB:49:43:BF:FA:31:1B:50:61:D9:71:FB:86:21:A0
            X509v3 Authority Key Identifier:
                keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9a:ef:d3:b3:5b:46:34:0f:9d:8a:ad:1e:b6:9a:9a:50:74:
         5d:74:94:cd:c2:fc:ae:94:8c:74:b2:18:36:ce:72:91:df:03:
         dc:64:c3:ee:ca:be:52:d6:f4:39:fb:6d:73:0d:1c:4d:4e:b3:
         2b:de:c9:b8:26:59:3c:e8:81:3b:d5:10:e5:d0:11:11:e5:18:
         17:60:c6:5e:fa:b9:53:9c:05:f1:c1:61:44:de:ed:28:11:73:
         99:6c:be:b1:75:c1:27:77:6c:12:7b:48:a4:f0:02:67:ad:d1:
         3b:a8:db:c7:10:09:92:24:a9:a5:0b:9e:6f:60:ea:70:ef:46:
         ac:72:de:c1:3b:e6:84:c4:7f:fe:bc:d3:35:c1:94:f1:e4:40:
         e5:10:9a:07:01:59:88:e6:25:4f:99:68:77:15:cf:fa:f9:b3:
         2b:36:5c:3c:d5:ff:f3:57:2f:f1:1c:10:23:ef:a6:c5:01:5a:
         a0:2e:f3:01:ed:8c:ca:1c:15:f7:c3:83:7c:8b:6e:02:1a:d3:
         d6:80:56:8a:8a:5a:a6:56:9b:21:01:74:e0:e2:aa:ca:8e:da:
         e2:c7:10:9c:ad:99:e1:0e:8d:17:dd:c3:79:2b:59:ca:9e:b6:
         f2:83:75:be:03:07:f2:c7:2f:1c:1e:ac:dc:fd:c7:9d:3b:fd:
         71:9e:99:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENBQkYxMTAvBgNVBAUTKEE0REVFRDk1OTNFNTkxMzAzQTlCMDM5ODA2MUZFOEVG
NTE4NjY1Q0EwHhcNMjYwNzIyMTkxNjUwWhcNMjYwNzI5MTkxNjUwWjAYMRYwFAYD
VQQDEw02YTYxMTcyMi00N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5WsSobItNROdBA6g6rBHCVLyijrn/VJoAyPIu2TPbSx73+4g1Kg/qXPYby5
137fgYUA6Ql5lwiR8Y33Yjg7eXV2t973p/k4yAsjs8tvx51Fgk+QNfPUgWJQZsvd
rWnHaX0QcILi7d863cfTJQMcpk2vHR+86oWDoMGksJXxkpsaT+qvEjOajSWpMSpK
WAIXaCD0N65rqV/HMCGPEl1LV9H1ykc3AipcvHVvXOAmQUEKTRcRrxIVNVUEhmOh
GXM+YwjczRZK4lB4B2/4jjAhlB3qt0sPFXEIi7G8f+6+3TleZcuJGbRfGGBUj5la
54DQfR73ak88R3iAIfwuWL+P8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzvU/SE
y0lDv/oxG1Bh2XH7hiGgMB8GA1UdIwQYMBaAFKTe7ZWT5ZEwOpsDmAYf6O9RhmXK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi8xODkxOTVBQzY4
MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtUQTZtd09ZQmhfbzcxR0da
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BON3RsWlBsa1RBNm13T1lCaF9vNzFHR1pjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0FCRi8xODkxOTVBQzY4MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtU
QTZtd09ZQmhfbzcxR0daY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARJrv07NbRjQPnYqtHraamlB0XXSUzcL8rpSMdLIYNs5ykd8D3GTD7sq+Utb0
Ofttcw0cTU6zK97JuCZZPOiBO9UQ5dAREeUYF2DGXvq5U5wF8cFhRN7tKBFzmWy+
sXXBJ3dsEntIpPACZ63RO6jbxxAJkiSppQueb2DqcO9GrHLewTvmhMR//rzTNcGU
8eRA5RCaBwFZiOYlT5lodxXP+vmzKzZcPNX/81cv8RwQI++mxQFaoC7zAe2MyhwV
98ODfItuAhrT1oBWiopaplabIQF04OKqyo7a4scQnK2Z4Q6NF93DeStZyp628oN1
vgMH8scvHB6s3P3HnTv9cZ6ZQg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:57 2026 by rpki-client