Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File:                     _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier:          bRWD01NYsGcswJY5H1lxwfvlSrQ6ZkMErRnZaAsd2hI=
Subject key identifier:   A9:9D:43:5A:23:FB:C9:7E:E5:72:1E:08:76:F9:BE:60:26:20:7E:F5
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer:       /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number:          01BA
Signing time:             Thu 23 Jul 2026 05:17:10 +0000
Manifest this update:     Thu 23 Jul 2026 05:17:10 +0000
Manifest next update:     Thu 30 Jul 2026 05:17:10 +0000
Files and hashes:         1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: dlKiRHqRMajBAkAdNIJFwTvRUUddYOYQyrqqzx7MpLc=)
                          2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: iAJ7bJgPc3fvc0VT2Ih64KNDwG9PjNk9khGO+aQcVnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
                          rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
        Validity
            Not Before: Jul 23 05:17:10 2026 GMT
            Not After : Jul 30 05:17:10 2026 GMT
        Subject: CN=6a61a3d6-7718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:9f:70:22:f3:fa:a0:f0:15:b8:37:f0:23:
                    0d:cb:e5:04:59:e1:f6:e3:9b:c3:86:cc:38:d3:e9:
                    eb:62:67:22:49:44:d9:e4:a0:46:cf:d0:73:99:34:
                    d3:24:d5:18:91:fc:83:3d:ee:31:e3:43:b2:7c:4b:
                    b8:c0:13:f5:59:31:d4:75:29:37:41:ef:b4:f3:f6:
                    50:b2:63:38:98:b1:3a:0d:86:f8:ef:29:d1:24:e3:
                    04:d1:42:90:25:ff:30:72:20:0b:e3:99:f5:ce:04:
                    80:8f:a8:65:64:f9:d6:f1:eb:16:c1:a0:d1:2e:84:
                    c0:17:f3:0e:b5:a1:a3:a7:22:d7:93:f4:89:92:73:
                    24:3c:db:05:8a:5c:17:1b:bb:7b:ad:44:3d:1e:09:
                    ff:2e:ba:4c:54:ac:a1:a9:71:56:c8:2a:05:f4:a4:
                    1b:8d:46:5e:e5:6b:18:90:11:04:4d:47:62:bf:58:
                    05:c5:3a:85:dd:35:07:53:95:4e:8e:7a:7b:58:eb:
                    b0:df:d0:d2:bc:53:1e:a8:5d:e4:cf:33:76:da:6e:
                    f1:bd:3c:e9:13:16:d4:0e:3d:40:71:f0:19:f4:cb:
                    7b:34:53:21:3b:4f:07:20:ff:99:8b:68:b8:43:93:
                    d4:ba:e7:57:9e:1d:5d:a2:aa:a9:fa:46:28:14:80:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9D:43:5A:23:FB:C9:7E:E5:72:1E:08:76:F9:BE:60:26:20:7E:F5
            X509v3 Authority Key Identifier:
                keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:07:3c:c4:ec:08:c2:79:27:e2:af:96:8f:2f:f5:9f:b2:c1:
         13:74:3d:7d:79:ff:9f:25:4b:be:9c:69:2a:0e:3b:5d:a8:b6:
         c5:35:31:bb:a9:8e:59:f7:47:1a:1c:56:b5:4d:65:fa:7a:14:
         17:92:e3:d3:ec:82:eb:12:02:b4:aa:a3:14:dc:7d:db:fb:e4:
         72:74:fa:5f:bf:34:ab:49:58:f9:22:09:11:20:89:1b:3d:f2:
         de:af:6b:3c:40:c9:11:55:d9:29:04:8e:eb:4b:8e:32:ef:52:
         42:a1:b2:8f:ff:07:f3:0a:f7:53:8a:a9:af:e4:24:93:ce:e7:
         93:56:b2:80:6e:58:86:19:21:b0:a5:f7:e4:b8:18:7b:26:54:
         58:fe:50:ac:6f:2f:ac:ab:81:7c:0e:a0:99:d2:83:9e:17:58:
         55:d9:d8:f3:f8:2a:23:a5:d8:d7:cf:eb:f9:f2:fb:81:51:80:
         df:0c:c4:b8:8d:57:86:64:c2:c4:1c:6d:05:c0:8d:ea:c5:73:
         a9:82:5e:54:66:6e:fe:a2:6b:ae:ed:43:fa:e2:d3:5d:10:e8:
         e8:8b:6c:26:08:21:d9:6b:bc:7a:f0:03:01:1c:42:94:d1:35:
         dc:3e:92:78:6b:d1:0c:8d:de:80:96:b2:7f:29:5c:ff:e8:c6:
         f8:e4:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:42 2026 by rpki-client