Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
File:                     E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json)
Hash identifier:          2AWCJU4iyN69AC6pAXspJHYsZZ6BrM8YTvKPinupm9M=
Subject key identifier:   61:65:ED:D9:BA:12:58:77:F4:36:20:58:D0:55:B9:FA:D7:51:E6:AF
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Certificate issuer:       /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial:       22EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
Manifest number:          22A8
Signing time:             Wed 22 Jul 2026 15:55:38 +0000
Manifest this update:     Wed 22 Jul 2026 15:55:38 +0000
Manifest next update:     Wed 29 Jul 2026 15:55:38 +0000
Files and hashes:         1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: ip4KGV6xH0WzwRSS78i0Ye3Lpg2Pq5N8kq0du1PQ1Qw=)
                          2: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: wxjDOjPUxRLRD34v8WE1H+az7Rx+TeyfiWHK2UqJLRI=)
                          3: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: QxCNiNBYMR2TGsewuzvNm3DKJS3QbU2M8ViaV5gW44A=)
                          4: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: X++G4W4xVTOlRaDR1fv18JyctaLbbXwbI4BhZbctNFo=)
                          5: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: SAQ/7mXh/NtmmnV+LJmzxsU68oluvkfBK75HrdKY5ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
                          rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8940 (0x22ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
        Validity
            Not Before: Jul 22 15:55:38 2026 GMT
            Not After : Jul 29 15:55:38 2026 GMT
        Subject: CN=6a60e7fa-2621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:f3:46:c2:dd:00:cf:2b:90:d6:5c:e2:aa:
                    3e:35:0d:51:e4:75:b6:62:d0:50:58:07:98:80:9b:
                    b8:1b:3c:f6:98:8d:61:76:ea:9e:63:80:34:69:b3:
                    15:ff:ad:1c:6f:4b:e0:b1:1d:7f:a2:de:33:eb:4c:
                    39:2f:0e:31:81:06:d7:ea:87:2c:41:f4:95:5c:51:
                    1a:5e:89:db:96:40:22:11:8f:27:cf:2b:16:37:5c:
                    90:4c:42:3b:e3:73:2a:28:42:62:85:dd:07:4e:23:
                    86:45:e3:cc:0c:d1:cf:af:98:e8:af:34:ef:e3:3d:
                    d8:0f:35:41:96:b5:ce:f9:af:e4:dc:fc:e5:22:1b:
                    74:be:76:fe:b8:55:55:e6:b9:d3:37:ab:c1:fe:ed:
                    09:3d:94:1c:91:27:35:09:5c:3f:0b:f0:fc:9e:15:
                    d7:85:43:48:47:41:bc:ee:33:2c:49:cb:39:f9:f2:
                    19:53:d4:c1:89:a6:07:b7:57:08:75:22:46:35:12:
                    e0:2e:5f:d1:c2:e9:29:7c:c3:11:bf:64:16:cf:09:
                    09:69:69:6a:6e:63:43:47:17:35:41:fb:8c:7e:14:
                    3a:a3:a4:c7:51:3e:de:fd:bc:0a:78:56:66:b5:29:
                    b2:00:30:99:78:a1:d1:a3:33:7e:8b:f2:a9:a5:06:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:ED:D9:BA:12:58:77:F4:36:20:58:D0:55:B9:FA:D7:51:E6:AF
            X509v3 Authority Key Identifier:
                keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1d:6c:d3:52:32:b5:14:47:a8:8e:ed:18:ab:67:6d:26:71:
         7f:ec:39:f1:28:6e:1a:21:d9:72:bd:26:2a:2c:4b:03:36:54:
         49:24:87:e1:68:0d:bb:b2:d4:e6:01:52:6e:83:b3:90:3b:ce:
         30:df:dd:22:d1:2f:57:9b:b0:21:4d:0f:64:65:91:7e:e8:80:
         54:db:e0:a7:96:f5:9f:3f:cd:9b:9e:88:0c:cb:e5:57:0b:03:
         13:62:bc:e4:63:30:ff:7b:51:f1:53:a4:99:b9:df:b5:4e:0c:
         a3:81:23:1f:a5:61:be:32:bb:61:cc:d8:04:bf:21:30:46:e8:
         e5:cc:ee:5e:5d:ca:cf:96:10:de:8e:88:d9:e2:de:d6:0f:4b:
         c4:f6:0a:1c:cc:ef:86:e3:a8:a8:0a:a6:21:74:2d:ab:db:65:
         9a:6e:8e:18:23:b9:a2:78:d6:1e:28:c2:e0:71:49:28:d9:66:
         f2:82:6a:ce:08:42:75:34:ce:34:97:87:f2:24:78:a6:b2:8f:
         5f:73:f1:9f:fe:d5:62:39:e8:21:08:d3:8d:d5:e3:3d:27:67:
         e3:d4:e7:5c:13:f2:4b:81:15:69:92:d5:09:9f:e6:48:3f:e2:
         b0:ef:3c:b4:65:39:4d:34:58:4f:89:dd:43:56:4a:f6:f3:57:
         94:e6:2d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:49 2026 by rpki-client