Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File:                     A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier:          zHD8DtPDXHuO4tB370+8OYpo0okEeYHkNOSE32r3uPQ=
Subject key identifier:   3B:C2:D8:32:60:03:4E:CE:F5:B3:CB:D8:3E:F3:BB:9F:5B:D3:66:B7
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer:       /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number:          0228
Signing time:             Thu 23 Jul 2026 03:57:06 +0000
Manifest this update:     Thu 23 Jul 2026 03:57:05 +0000
Manifest next update:     Thu 30 Jul 2026 03:57:05 +0000
Files and hashes:         1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: hcHXadnD/VEHtXGcZgQ+oIrLseBTVTvW+R4P38WhtpU=)
                          2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 9g+cXzlenM5QdNB0vC6zwv+Sc4F3maBeP/ANCVxlI0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
                          rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D727, serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
        Validity
            Not Before: Jul 23 03:57:05 2026 GMT
            Not After : Jul 30 03:57:05 2026 GMT
        Subject: CN=6a619112-b7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:19:5f:19:a5:0c:f6:af:93:07:40:0a:e9:
                    3e:e4:77:ab:3c:cc:c6:c9:1d:1c:3e:14:5f:fa:cc:
                    fc:ad:70:24:ff:e2:72:01:1e:e3:97:35:fa:32:ea:
                    39:f1:3b:63:c0:17:f7:65:5c:72:98:1c:76:fd:a8:
                    16:23:92:f6:d4:ec:1d:9b:56:ca:92:f3:6c:8f:19:
                    ed:a2:40:ea:92:c7:72:04:98:63:e1:65:91:41:58:
                    a6:d4:aa:7c:dd:55:05:71:79:e7:6f:78:b0:b0:9c:
                    05:1a:58:a3:47:c1:c1:06:af:7b:60:3a:75:ca:2e:
                    9f:61:d6:8e:43:be:5b:e5:ba:11:14:64:25:f4:38:
                    47:7b:84:92:2e:64:9a:7f:20:34:d2:d4:ff:d8:45:
                    8c:7e:a7:8b:be:c8:31:a1:be:40:2c:43:ef:59:c2:
                    38:16:a7:71:94:c3:2a:bc:31:8b:e0:5b:3d:53:c3:
                    7b:e1:2b:7f:3c:5f:e4:04:dc:84:2d:d1:74:ef:11:
                    f1:5b:f2:39:eb:ed:b2:99:9b:ec:0a:29:c9:2f:b7:
                    ea:7e:f9:e9:89:d7:81:21:18:39:07:b5:c4:16:30:
                    a5:16:b1:ca:a6:f2:39:85:8a:7a:ab:56:c5:9a:5e:
                    1e:19:d5:0b:52:ec:72:5a:d0:ae:13:4d:8d:1a:8d:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:D8:32:60:03:4E:CE:F5:B3:CB:D8:3E:F3:BB:9F:5B:D3:66:B7
            X509v3 Authority Key Identifier:
                keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:a4:d1:43:8d:79:f3:ad:a9:d7:e2:b3:fc:09:e7:07:27:
         62:4b:3c:a1:4b:6e:ce:71:18:1f:d4:44:2f:52:c0:b1:42:12:
         ad:7c:e9:80:e0:55:f4:16:75:73:23:d2:5a:e8:21:df:13:ae:
         55:55:e5:97:17:d2:71:dc:9c:fd:28:d0:37:e2:32:90:70:14:
         dc:0b:17:5e:de:34:4b:db:9d:c2:17:41:ef:53:c5:79:21:cc:
         08:bb:80:da:2b:90:b5:ad:cb:c6:58:68:27:2d:46:38:d3:45:
         d1:79:56:f9:ae:b5:93:71:e8:6f:b6:a8:02:18:a5:3e:19:1e:
         c3:67:16:ac:76:92:69:1c:c3:11:9b:85:27:52:7c:71:84:e0:
         93:35:98:e3:42:8f:c7:7d:ca:40:58:b7:5e:41:45:98:75:6c:
         df:8c:dc:a6:1c:fa:66:6c:ca:31:28:e0:c4:af:6e:25:e3:f3:
         3e:dc:ec:ff:a8:80:f4:91:63:de:97:46:b2:6b:36:96:21:43:
         fc:e7:6d:8f:75:8b:2e:21:12:3a:2a:32:d6:31:df:bf:52:94:
         d1:0a:a9:db:05:d1:15:c2:55:53:74:54:c7:ec:aa:cc:74:3e:
         f9:7d:3d:b7:14:aa:18:87:a2:be:11:97:30:bb:50:91:60:3b:
         7c:38:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:26:01 2026 by rpki-client