Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
File:                     fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json)
Hash identifier:          GNmzYv2Ut5in3sAS7fV90GKppvLB7UPkIqtQBXyVK2s=
Subject key identifier:   10:59:CE:0A:BF:9B:0F:C1:03:D0:59:D1:0A:B8:7C:FF:AA:70:95:97
Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
Certificate issuer:       /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Certificate serial:       244E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
Manifest number:          2429
Signing time:             Wed 22 Jul 2026 15:52:25 +0000
Manifest this update:     Wed 22 Jul 2026 15:52:24 +0000
Manifest next update:     Wed 29 Jul 2026 15:52:24 +0000
Files and hashes:         1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: r42eP5aK1tdOH9tPcC7hfm5uG+FEYYkB34JnfPb+/QA=)
                          2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: qLDoFJBL4tjU3a5+OgqcUODZnGFeDhknY5OqvsDbWxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
                          rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9294 (0x244e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
        Validity
            Not Before: Jul 22 15:52:24 2026 GMT
            Not After : Jul 29 15:52:24 2026 GMT
        Subject: CN=6a60e739-7460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:fc:3c:85:78:18:15:66:83:f6:6d:ac:af:
                    1a:45:3a:a9:a2:5d:95:95:f4:b9:5b:91:c7:c3:65:
                    4e:91:32:e3:27:f3:90:49:cc:0b:d8:fc:72:fb:47:
                    56:0e:a9:c1:4d:3a:85:6d:96:a1:b2:31:53:de:4b:
                    8a:35:55:a6:73:46:41:af:11:33:da:00:98:86:7a:
                    1a:cd:7a:83:72:7b:ac:40:26:cd:6d:f6:d9:91:32:
                    9f:7c:73:e9:d0:92:32:95:20:b4:4e:25:d1:fd:e6:
                    f5:db:2f:c8:8d:4a:22:9d:cd:52:17:ad:52:c8:76:
                    b8:6a:f4:a6:0f:1d:09:fa:04:29:ff:9d:be:25:82:
                    93:a9:91:e0:87:36:49:e5:9c:ef:a4:e9:5a:aa:18:
                    c7:16:a4:b0:4c:39:ca:ad:bd:d9:29:ff:6d:53:bd:
                    2b:7a:6c:77:b5:df:a9:78:bc:e0:2a:f9:97:c0:6c:
                    53:f2:c1:ba:65:f9:de:b4:f3:a6:bd:10:88:c7:38:
                    27:ed:22:98:ac:06:f0:3c:0f:08:42:f6:61:ee:24:
                    28:de:79:33:a8:5c:fd:d8:be:3e:19:bf:63:df:de:
                    de:e3:f6:fb:8d:df:36:dc:d4:fc:6b:be:2b:a5:b6:
                    84:e8:ea:6e:51:43:a4:83:1a:71:6c:b5:fd:d8:70:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:59:CE:0A:BF:9B:0F:C1:03:D0:59:D1:0A:B8:7C:FF:AA:70:95:97
            X509v3 Authority Key Identifier:
                keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:31:ac:3a:e3:51:9e:ae:61:b2:9e:2d:30:aa:3f:4e:53:c4:
         06:36:d5:f2:bf:f5:9e:4b:7d:6d:3a:e0:65:fe:b1:f8:c3:f8:
         8f:ed:36:e9:b2:49:0f:32:b6:09:ca:98:96:d7:d6:88:0c:fa:
         89:35:6c:89:e7:06:db:83:b2:c7:55:e8:af:ae:20:5d:db:28:
         c3:fb:9a:8d:1b:84:7c:90:ee:8c:45:8d:dd:1a:d1:28:b1:ee:
         6a:04:ad:c7:d4:12:e3:94:38:a7:0d:ed:29:b8:dd:2c:0b:43:
         66:81:6e:27:81:31:ee:4b:2e:dc:13:a4:07:a4:83:3b:68:8c:
         14:1f:3f:57:34:5d:f2:0b:1e:cb:2c:aa:94:da:9d:c6:87:82:
         c6:7b:3f:5f:e4:2b:47:88:70:34:af:05:3f:d9:32:7c:a2:f5:
         b8:3c:93:76:fd:f6:f7:cb:cd:75:5b:75:05:21:7f:1f:7b:75:
         94:b9:eb:49:0d:fb:11:e4:41:fe:0d:ec:e8:01:1a:33:fd:b4:
         f6:be:b9:2f:b3:e1:74:ac:36:e8:3d:d0:b3:98:87:4c:84:af:
         a3:df:34:59:73:a8:b5:2c:f9:6e:32:69:f5:da:82:5d:32:07:
         74:b3:e3:0c:49:c7:6e:7e:da:ca:60:26:1f:f2:85:90:dc:35:
         fc:f3:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:48 2026 by rpki-client