Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File:                     Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier:          nmDbL3IAKemAqeBJPk2CLu325B2ujVqkfH40ansXOXI=
Subject key identifier:   4F:49:C3:C7:12:7E:DD:A9:75:3D:72:E0:1F:D8:3E:36:65:D8:2D:1C
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer:       /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial:       0341
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number:          033A
Signing time:             Thu 23 Jul 2026 01:59:15 +0000
Manifest this update:     Thu 23 Jul 2026 01:59:15 +0000
Manifest next update:     Thu 30 Jul 2026 01:59:15 +0000
Files and hashes:         1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: urqNuLw6yzerPKSPw+CG+ArISC6zAofcXLFlUlgzwCg=)
                          2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: LqX1NYcUBpIFn4nEYWAdBnB30XYthrymeUC3YsifzY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
        Validity
            Not Before: Jul 23 01:59:15 2026 GMT
            Not After : Jul 30 01:59:15 2026 GMT
        Subject: CN=6a617573-34ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:32:73:b2:22:55:20:db:48:60:b0:31:41:
                    6c:b6:ac:eb:73:75:89:3d:bf:72:d2:b3:24:12:8e:
                    0a:07:34:da:4e:60:aa:88:9a:f5:62:2e:89:63:fb:
                    ee:8d:ff:19:8b:42:16:e1:03:57:4c:12:a3:bc:6e:
                    bf:84:d3:24:e3:1d:88:bf:64:d2:41:a4:2e:67:c2:
                    e0:43:b2:b1:25:02:b5:20:e8:5e:37:2b:db:50:5c:
                    9e:32:db:c0:9d:4e:8b:82:2b:ac:7c:22:ce:ab:6c:
                    f9:8e:9c:98:f7:9d:f4:17:f6:a1:db:f8:3f:0e:bd:
                    3f:75:c4:3c:58:75:86:39:3d:7b:13:80:33:12:31:
                    36:b2:c6:27:03:74:46:39:1f:21:bb:48:47:f6:b0:
                    46:3d:99:e6:2f:ba:74:ff:de:db:8b:74:b9:8e:58:
                    b5:77:46:fe:00:b4:71:d9:7f:dc:39:ea:3a:47:00:
                    d6:99:8f:e9:b3:5a:46:b4:f0:89:bf:a1:41:d3:e1:
                    fe:19:02:e7:37:5d:a5:d7:e2:c3:ac:0e:61:e0:5e:
                    23:a4:42:f2:ad:45:13:bd:db:b1:21:75:3c:a1:1f:
                    48:63:f6:52:90:c3:c3:93:85:6d:16:d6:67:0a:79:
                    42:24:f7:76:ee:6d:4c:a6:aa:7d:f8:50:ae:47:8e:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:C3:C7:12:7E:DD:A9:75:3D:72:E0:1F:D8:3E:36:65:D8:2D:1C
            X509v3 Authority Key Identifier:
                keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:62:29:45:4d:9a:9d:ec:27:e5:d8:b4:3d:ad:87:1e:3b:23:
         eb:c8:8f:24:a9:f1:32:5f:2a:f6:67:23:3e:21:9e:f0:56:d1:
         b5:ed:cf:3c:59:a3:e3:2f:fc:1a:46:bb:d7:4d:40:27:96:a2:
         b5:96:ae:d1:e8:0b:a4:0a:33:79:5a:45:ef:90:fa:5a:17:7c:
         a1:24:33:56:94:c1:64:0c:bf:bc:da:c5:69:1c:91:f9:97:1a:
         32:fa:06:34:38:eb:ae:d3:d5:13:ab:2f:9e:66:68:a7:45:53:
         92:8c:88:0b:67:b4:6c:bb:88:cd:38:ba:d6:52:65:83:bf:44:
         a6:39:b1:f5:d1:35:8f:34:b0:d3:92:e9:4b:0c:e1:d5:0e:9e:
         6e:02:11:54:77:21:5f:d3:61:61:c4:c1:ab:49:09:c6:12:79:
         c8:20:d3:80:71:1b:91:bd:de:29:56:6c:83:78:37:e7:dc:03:
         5d:7b:20:be:0c:68:c6:e2:ec:6f:be:d8:34:48:38:80:0a:20:
         92:1f:8b:dc:be:d6:ed:af:09:63:eb:0a:e0:1a:ad:80:cc:5a:
         9b:d3:e7:bd:46:3f:4b:04:05:ab:b1:3d:51:4a:fc:68:82:a4:
         51:05:3c:3f:00:93:ef:87:72:72:74:a9:27:e2:9e:99:1e:db:
         5f:ea:96:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz
QjIyMDE4OUQwHhcNMjYwNzIzMDE1OTE1WhcNMjYwNzMwMDE1OTE1WjAYMRYwFAYD
VQQDEw02YTYxNzU3My0zNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDgyc7IiVSDbSGCwMUFstqzrc3WJPb9y0rMkEo4KBzTaTmCqiJr1Yi6JY/vu
jf8Zi0IW4QNXTBKjvG6/hNMk4x2Iv2TSQaQuZ8LgQ7KxJQK1IOheNyvbUFyeMtvA
nU6LgiusfCLOq2z5jpyY9530F/ah2/g/Dr0/dcQ8WHWGOT17E4AzEjE2ssYnA3RG
OR8hu0hH9rBGPZnmL7p0/97bi3S5jli1d0b+ALRx2X/cOeo6RwDWmY/ps1pGtPCJ
v6FB0+H+GQLnN12l1+LDrA5h4F4jpELyrUUTvduxIXU8oR9IY/ZSkMPDk4VtFtZn
CnlCJPd27m1Mpqp9+FCuR45oTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9Jw8cS
ft2pdT1y4B/YPjZl2C0cMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2
QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ
TVc5bVF0bnJYMHc3SWdHSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARGIpRU2anewn5di0Pa2HHjsj68iPJKnxMl8q9mcjPiGe8FbRte3PPFmj4y/8
Gka7101AJ5aitZau0egLpAozeVpF75D6Whd8oSQzVpTBZAy/vNrFaRyR+ZcaMvoG
NDjrrtPVE6svnmZop0VTkoyIC2e0bLuIzTi61lJlg79Epjmx9dE1jzSw05LpSwzh
1Q6ebgIRVHchX9NhYcTBq0kJxhJ5yCDTgHEbkb3eKVZsg3g359wDXXsgvgxoxuLs
b77YNEg4gAogkh+L3L7W7a8JY+sK4BqtgMxam9PnvUY/SwQFq7E9UUr8aIKkUQU8
PwCT74dycnSpJ+KemR7bX+qWKQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:36 2026 by rpki-client