Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
File:                     mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json)
Hash identifier:          n3YDeF/ez2axy948V7YcBzgruByyDTOQdg/G0jpu8Ks=
Subject key identifier:   44:FD:2B:6E:F9:06:30:3D:08:A9:F1:09:FA:37:85:A5:ED:DB:2F:A9
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Certificate issuer:       /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
Manifest number:          0213
Signing time:             Thu 23 Jul 2026 04:10:56 +0000
Manifest this update:     Thu 23 Jul 2026 04:10:55 +0000
Manifest next update:     Thu 30 Jul 2026 04:10:55 +0000
Files and hashes:         1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: CiaoQ7gBOc0xluQP175+FlhebLZZQljF4P2C/Pvf8Lg=)
                          2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: SCwmxfDWW09S/YLmleV15ds27OPWcfPLn9LjAT3VnRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
                          rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
        Validity
            Not Before: Jul 23 04:10:55 2026 GMT
            Not After : Jul 30 04:10:55 2026 GMT
        Subject: CN=6a619450-4a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:25:b7:16:90:87:44:98:d4:85:2a:b6:4c:c4:
                    ce:91:5f:19:b8:f0:67:f3:c3:21:fa:9b:de:6a:6a:
                    b9:a6:98:7a:59:c3:c5:e7:ad:63:8e:2f:b3:ad:cd:
                    cc:24:3c:2d:7d:85:69:82:bf:f4:39:aa:ae:1f:c2:
                    ba:18:b8:10:a1:6a:ac:73:a0:3e:f7:c3:22:c8:03:
                    36:07:25:ba:21:f0:25:f7:08:5a:46:e9:61:e7:aa:
                    2e:a9:61:e4:1c:e4:12:77:ab:a8:d3:11:e2:80:2e:
                    e8:0c:7d:4a:ea:2a:8d:84:a8:49:c3:ce:fd:01:74:
                    7d:3d:46:8a:78:f3:39:ab:65:e6:96:ad:e4:4f:b1:
                    80:88:60:74:2f:2a:2f:5f:3d:f3:dc:46:fb:63:5a:
                    72:46:15:3b:7b:8c:29:02:a6:f7:a0:c4:64:e3:c1:
                    11:75:d8:48:61:7c:95:80:43:43:b1:4a:74:fd:0d:
                    d1:26:57:c8:91:38:17:c5:82:92:f4:3f:34:79:6e:
                    37:00:66:9e:7d:e6:c1:52:ed:93:b2:9f:26:b8:f7:
                    0a:09:52:ad:46:c9:0a:a2:db:df:b7:6e:c7:2b:89:
                    6e:7e:46:35:3d:91:a4:36:23:97:db:26:74:a4:81:
                    b7:ab:50:a7:93:79:26:40:b0:da:c1:ab:1d:30:a4:
                    a4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FD:2B:6E:F9:06:30:3D:08:A9:F1:09:FA:37:85:A5:ED:DB:2F:A9
            X509v3 Authority Key Identifier:
                keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:71:d4:22:54:c2:17:9b:40:b4:b1:f4:d6:2b:5b:d3:4a:d7:
         cc:8d:9c:0d:8b:d7:e7:47:06:2a:67:b5:74:0e:b6:35:63:fe:
         ca:0b:20:b2:27:ec:6b:e9:b2:75:d6:64:00:7f:22:4f:f4:07:
         7d:0e:e7:11:c9:cf:e2:f7:92:10:b1:ca:04:32:df:02:4b:ca:
         8b:63:ab:d2:5d:56:6e:ca:c4:0d:9b:04:3f:0a:ba:a3:e3:56:
         cc:58:39:af:d5:03:28:d6:b2:2c:b9:44:41:bf:6c:7b:ef:9a:
         15:52:99:00:2b:0d:96:96:b0:97:b3:aa:0d:5c:25:66:fb:12:
         a9:ea:68:c8:44:26:8a:d1:8a:6a:ac:8f:32:26:5f:7b:91:31:
         e0:74:ec:91:1a:e2:ed:eb:87:65:61:33:ef:f7:3b:04:be:dd:
         0c:0a:49:4b:30:d3:54:a5:db:fb:26:c7:02:02:a5:b9:30:f0:
         aa:12:35:37:80:4a:d5:c0:fc:b2:fb:8d:0b:b5:80:e4:51:17:
         bf:39:58:1c:27:b6:7f:8b:82:ab:75:1d:93:b8:fa:f0:7b:bc:
         2e:cc:20:22:15:d8:ae:11:3f:59:b9:8c:3f:de:0f:bb:19:54:
         d9:09:01:25:8c:cb:4e:f2:ab:c7:4a:68:83:1e:02:15:37:63:
         5d:00:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:40 2026 by rpki-client