Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
File:                     k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json)
Hash identifier:          IELaClBwDzb/F8VUgF3TwRm5iHcjz5G8TOGVj6Pi2iU=
Subject key identifier:   31:7F:31:71:01:85:A4:95:11:C8:A9:23:57:C1:CC:28:B0:2C:17:A4
Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
Certificate issuer:       /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Certificate serial:       097D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
Manifest number:          0972
Signing time:             Wed 22 Jul 2026 20:32:14 +0000
Manifest this update:     Wed 22 Jul 2026 20:32:13 +0000
Manifest next update:     Wed 29 Jul 2026 20:32:13 +0000
Files and hashes:         1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: W0y9N/79STj7bhdJNyNJFo84/d2qwXBlESlEZaNwsOg=)
                          2: 3A30A1505D7611F1A65CDC84C1833773.roa (hash: xhAHuvmO3aSQ7a3p7cQ67FVXsueoW86sk1sPeDMX+RA=)
                          3: 9F5F74265D7511F18F235C80C1833773.roa (hash: 0fZccuokxMBdsDfqfz3v6IokDESdGPotG9nJBoFw7Zw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl
                          rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
        Validity
            Not Before: Jul 22 20:32:13 2026 GMT
            Not After : Jul 29 20:32:13 2026 GMT
        Subject: CN=6a6128cd-afd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:2a:b3:72:10:38:22:12:49:ac:31:95:58:
                    54:59:43:96:4e:43:48:79:f4:d3:18:99:6d:3f:a7:
                    af:fd:86:7c:73:a3:9a:50:70:f1:af:9b:7b:81:ea:
                    8c:c7:ec:05:98:a5:f5:6d:93:ef:c1:ea:3d:95:e3:
                    54:6c:2b:62:3a:71:4c:ec:0a:cf:38:06:08:e5:1a:
                    1e:7c:43:e8:9d:ad:41:43:f8:41:0d:4a:fb:a1:98:
                    63:db:9e:6c:9b:a8:f9:06:61:b8:dd:2f:1d:b2:34:
                    8f:69:3a:c7:14:24:26:70:4c:69:62:f2:2d:92:d4:
                    72:f8:9a:6b:52:99:2b:e7:05:be:de:6d:0d:60:bd:
                    bd:23:b4:89:02:14:c0:a2:b8:82:a5:ec:79:d5:11:
                    ca:7a:cd:56:3f:a4:56:cd:f4:81:12:5d:98:31:9a:
                    51:65:cf:02:86:5a:01:d2:e5:df:e8:cf:a6:68:4d:
                    29:7c:03:3a:da:09:34:49:2d:6c:99:bf:d4:77:c7:
                    8b:89:97:bb:13:1d:66:86:20:fe:a1:9c:0f:4f:a7:
                    a3:45:a1:7d:62:9c:17:a2:62:10:f4:8a:89:76:9f:
                    fe:41:51:1a:19:a6:2a:6f:ee:5f:5b:f3:27:70:44:
                    51:74:3a:de:50:a4:e2:52:7a:01:6a:c7:75:3c:30:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7F:31:71:01:85:A4:95:11:C8:A9:23:57:C1:CC:28:B0:2C:17:A4
            X509v3 Authority Key Identifier:
                keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:83:9b:a9:00:ca:10:27:8e:4d:7c:5a:49:d0:91:e1:69:fb:
         fd:a2:60:84:24:c0:05:6d:1e:74:1e:b0:a7:ea:33:c6:a2:74:
         53:81:d8:6c:d4:f2:60:7d:2e:8a:66:9e:49:44:e6:d5:1e:0d:
         77:c9:9f:96:ee:91:7c:e0:b4:21:bd:98:a2:ef:3b:3b:5f:c4:
         b2:03:c0:f3:74:6d:0b:67:7a:b7:57:b4:b2:20:e5:81:5a:08:
         e0:80:e3:5c:ff:80:86:b4:1a:49:8d:1d:79:d9:09:cf:ac:57:
         e3:02:2c:f3:04:d4:f6:46:ee:df:44:d6:50:62:3b:e0:13:be:
         eb:d4:54:ac:83:d6:e3:fb:de:92:1b:fb:c4:77:07:12:bc:ca:
         81:ee:86:57:be:4d:49:e5:1b:c0:7a:d8:c1:2f:d9:cf:61:e3:
         ef:3f:92:53:4b:83:76:0d:c4:f8:63:f3:22:80:04:65:a9:60:
         36:63:78:30:6e:90:72:02:b5:2d:a3:93:20:4d:69:e8:b0:40:
         5b:57:55:61:a6:d6:34:f2:39:4f:a6:89:de:22:86:a0:94:bf:
         c0:f2:f8:73:28:c4:79:41:bd:eb:58:95:00:02:a8:f1:0b:ae:
         7c:ef:e9:9f:41:ab:63:52:19:ac:ce:f7:7b:0c:8e:21:5c:7d:
         c8:c2:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:28 2026 by rpki-client