Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
File:                     -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json)
Hash identifier:          xMnctQAxymnpKh6Y90HSRXfBfsTEsZSH4hDIEw+s0mg=
Subject key identifier:   53:D2:99:C8:07:0B:C3:F9:C9:48:99:C1:1A:88:C2:83:0E:F7:FC:D4
Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
Certificate issuer:       /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
Manifest number:          0183
Signing time:             Thu 23 Jul 2026 06:05:20 +0000
Manifest this update:     Thu 23 Jul 2026 06:05:19 +0000
Manifest next update:     Thu 30 Jul 2026 06:05:19 +0000
Files and hashes:         1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: iZYMpFwUs56E1MPLov9dKXA1+vCMBNohNU0Ihaagahk=)
                          2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: kDnQaZkgd3eRRV1TX5nuWTf0BQqvLUjGytAokBZ6vug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
                          rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
        Validity
            Not Before: Jul 23 06:05:19 2026 GMT
            Not After : Jul 30 06:05:19 2026 GMT
        Subject: CN=6a61af1f-2e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:10:9f:26:4c:fd:cc:8e:e3:63:bf:e4:4c:
                    1b:e4:af:e9:54:1c:44:74:25:d7:fb:f0:59:87:2b:
                    d6:32:84:66:d9:03:6c:ab:30:d7:a4:3e:5b:b4:d9:
                    3c:7f:6d:f3:da:bc:de:1f:fd:d6:b0:3d:71:c6:f3:
                    22:2a:7c:fe:68:e6:91:ee:94:e0:38:05:5b:44:c3:
                    1c:1a:93:e0:57:76:e7:30:f6:0a:8f:fb:3b:6f:a8:
                    a0:13:e6:a3:3b:44:70:5b:b3:55:29:4b:3c:08:01:
                    7c:22:d1:b6:63:0f:e0:e2:f7:15:54:e2:b9:98:85:
                    11:df:ff:dd:31:04:69:67:3e:a0:17:b8:65:bf:46:
                    50:b5:c5:f2:95:39:ad:94:10:1a:43:16:74:31:85:
                    d6:0f:7a:b1:c1:8b:7d:9c:7f:9a:41:78:2e:a5:fb:
                    5a:95:d4:e6:ca:b2:1b:3e:8e:bd:50:30:87:5a:c4:
                    36:fe:ff:b1:ac:b7:65:7a:9e:71:cc:db:c9:4d:06:
                    a6:44:e4:d8:8b:22:68:66:98:97:03:cd:d5:c1:a0:
                    3e:0e:48:9d:4e:0c:99:90:5d:c2:40:11:b6:68:1d:
                    04:0f:49:de:a9:0b:d1:21:e4:e7:6c:81:07:35:7b:
                    3f:5c:c3:ee:83:79:36:52:3d:7a:3a:55:d0:a0:3c:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:99:C8:07:0B:C3:F9:C9:48:99:C1:1A:88:C2:83:0E:F7:FC:D4
            X509v3 Authority Key Identifier:
                keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:89:67:9e:9e:4b:0a:df:a6:98:3c:5d:19:ee:42:d3:76:5c:
         6e:05:ca:da:b6:85:2c:d9:ce:59:fe:2f:ae:b1:a1:1c:dc:35:
         a1:72:94:2e:72:e2:2b:17:82:aa:90:5e:f5:40:f5:97:33:76:
         a6:ee:05:61:57:5a:e8:f7:9d:77:34:db:ba:58:59:79:c8:4d:
         7c:97:df:c3:a0:03:dd:e3:d3:3f:17:9e:b9:88:a1:02:e0:7e:
         2d:ab:2a:db:05:06:f4:36:98:1b:e9:60:c4:6d:ce:4a:ff:55:
         a4:e2:70:7c:a1:14:87:ed:77:45:31:54:5a:db:02:55:09:be:
         4b:4a:7b:e7:3c:3b:45:fa:56:f9:8e:1a:8e:70:f7:5b:68:78:
         b9:23:c8:81:e2:38:eb:ca:b2:92:05:06:8c:b9:4c:24:bd:64:
         cb:0c:94:47:01:eb:6c:3c:31:61:d6:ee:4b:f6:be:0e:0c:9b:
         31:5f:4c:ca:39:af:df:e0:cb:3f:9c:cb:f2:e8:25:bf:ea:70:
         09:7e:ed:e7:36:67:df:e7:6f:48:19:0f:8d:bc:d1:5f:6c:a4:
         28:df:c0:29:51:df:24:13:25:de:7c:af:5c:1e:93:5a:68:43:
         93:24:ca:02:d4:06:cf:c3:48:2c:4c:11:15:a8:f1:84:eb:0d:
         a5:75:f8:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjExRUUxMTAvBgNVBAUTKEZBQzJCMkU1NDE0NDVCNUI0N0M1OURBRTFERTJEREU4
ODc5QUI4QkIwHhcNMjYwNzIzMDYwNTE5WhcNMjYwNzMwMDYwNTE5WjAYMRYwFAYD
VQQDEw02YTYxYWYxZi0yZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApc0QnyZM/cyO42O/5Ewb5K/pVBxEdCXX+/BZhyvWMoRm2QNsqzDXpD5btNk8
f23z2rzeH/3WsD1xxvMiKnz+aOaR7pTgOAVbRMMcGpPgV3bnMPYKj/s7b6igE+aj
O0RwW7NVKUs8CAF8ItG2Yw/g4vcVVOK5mIUR3//dMQRpZz6gF7hlv0ZQtcXylTmt
lBAaQxZ0MYXWD3qxwYt9nH+aQXgupftaldTmyrIbPo69UDCHWsQ2/v+xrLdlep5x
zNvJTQamROTYiyJoZpiXA83VwaA+DkidTgyZkF3CQBG2aB0ED0neqQvRIeTnbIEH
NXs/XMPug3k2Uj16OlXQoDwXfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPSmcgH
C8P5yUiZwRqIwoMO9/zUMB8GA1UdIwQYMBaAFPrCsuVBRFtbR8Wdrh3i3eiHmri7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTFFRS9FOThBNDY1MjNF
ODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcxdEh4WjJ1SGVMZDZJZWF1
THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1zS3k1VUZFVzF0SHhaMnVIZUxkNkllYXVMcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTFFRS9FOThBNDY1MjNFODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcx
dEh4WjJ1SGVMZDZJZWF1THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQolnnp5LCt+mmDxdGe5C03ZcbgXK2raFLNnOWf4vrrGhHNw1oXKULnLiKxeC
qpBe9UD1lzN2pu4FYVda6PeddzTbulhZechNfJffw6AD3ePTPxeeuYihAuB+Lasq
2wUG9DaYG+lgxG3OSv9VpOJwfKEUh+13RTFUWtsCVQm+S0p75zw7RfpW+Y4ajnD3
W2h4uSPIgeI468qykgUGjLlMJL1kywyURwHrbDwxYdbuS/a+DgybMV9Myjmv3+DL
P5zL8uglv+pwCX7t5zZn3+dvSBkPjbzRX2ykKN/AKVHfJBMl3nyvXB6TWmhDkyTK
AtQGz8NILEwRFajxhOsNpXX4UQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:44 2026 by rpki-client