Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
File:                     l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json)
Hash identifier:          bpk4BYJ/pfg+z2Dl3nGN4WNrU6SWsHBgr7pR/wXuAdM=
Subject key identifier:   F4:5B:88:71:0A:A2:82:56:6D:DB:0C:6D:7D:08:56:1D:1C:7A:38:FC
Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Certificate issuer:       /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Certificate serial:       0D25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
Manifest number:          0D1C
Signing time:             Wed 22 Jul 2026 18:26:27 +0000
Manifest this update:     Wed 22 Jul 2026 18:26:26 +0000
Manifest next update:     Wed 29 Jul 2026 18:26:26 +0000
Files and hashes:         1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: QDf7kMqb07nrDxJ2RDHHt/eCNDvk8xzYXT5/Dp+f/C0=)
                          2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3365 (0xd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
        Validity
            Not Before: Jul 22 18:26:26 2026 GMT
            Not After : Jul 29 18:26:26 2026 GMT
        Subject: CN=6a610b53-f117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:cc:ca:a4:af:74:e2:45:01:fc:5e:d5:ce:
                    24:06:27:86:c9:3a:5b:af:df:a4:2c:87:fd:af:26:
                    cb:bc:04:91:eb:c8:d4:43:b9:d0:9a:3c:03:a5:e2:
                    b4:ab:f6:93:f8:80:fb:5a:ea:02:ec:4b:eb:a0:21:
                    5c:75:9f:6f:70:85:c1:d2:24:1c:27:15:60:67:4a:
                    1a:c3:1c:0d:0c:3e:cf:b2:e7:42:2c:f8:bb:e4:07:
                    04:fd:49:92:a9:43:85:28:1e:6b:a8:5a:9d:79:a2:
                    77:9c:ba:ae:e4:74:f1:48:80:f8:79:ed:f2:9f:31:
                    3d:b6:13:a7:a0:82:17:a3:5c:28:22:ec:e3:dc:3e:
                    6f:80:1e:4c:01:84:ec:68:ac:e1:0e:f6:1e:7c:70:
                    09:bc:1f:bb:6f:35:2a:e9:ff:6e:2f:78:73:43:f5:
                    e9:c6:2b:fc:7c:aa:7e:04:30:dc:e8:b3:04:f8:1f:
                    d7:59:76:fc:78:b8:00:aa:62:b5:9a:b5:06:fb:f7:
                    5c:0b:1a:fb:c5:bf:2d:a9:3f:a2:23:07:2f:ac:51:
                    66:03:05:d9:07:93:21:8c:cf:b4:b3:83:4f:a1:1b:
                    1a:b1:6f:f3:2c:5b:93:57:a6:bc:e7:eb:92:ab:f5:
                    14:09:82:3f:e5:9d:6d:23:9e:46:51:60:16:b1:1f:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:88:71:0A:A2:82:56:6D:DB:0C:6D:7D:08:56:1D:1C:7A:38:FC
            X509v3 Authority Key Identifier:
                keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:98:5e:fa:15:e1:ea:a7:5f:3d:6b:1d:70:c8:99:8c:df:
         85:6c:56:83:8a:21:8b:34:13:dd:ce:c5:3a:7a:be:3e:9d:99:
         a2:86:80:70:c4:01:56:f1:a7:c2:19:b7:cc:98:2a:43:62:41:
         97:ec:13:44:13:20:21:f5:28:26:ea:9e:57:67:85:f5:fe:3c:
         09:03:d3:33:3b:df:fd:bd:0f:09:08:ce:10:43:d4:f1:96:b6:
         ff:66:de:42:52:05:ec:60:2b:57:3b:28:e0:65:bc:3a:58:89:
         d5:f7:ed:a5:a7:3a:0b:30:dd:fd:10:88:dd:d7:11:4c:94:93:
         c6:01:c5:d3:ed:c0:5c:f8:db:b2:88:ed:d8:80:5d:3c:2c:64:
         af:96:fc:43:7d:90:04:51:8b:72:c9:26:95:3c:fb:51:73:6e:
         88:9d:44:dc:ab:d8:4d:8d:da:df:35:22:2a:97:aa:a5:de:ab:
         df:4d:8a:0d:16:d7:13:bd:a7:43:ca:0a:3a:cd:d4:e1:0e:2e:
         97:25:72:a1:1d:7f:75:d1:62:97:22:ce:4d:9e:6c:3a:01:4f:
         1b:bc:0c:f8:e8:23:7f:2d:02:ef:6f:e6:ba:a3:3d:82:30:76:
         2d:05:dd:8f:42:a4:00:01:2b:60:ad:0c:f3:a8:be:2c:87:36:
         5a:f0:eb:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0
NjAyQkVENDQwHhcNMjYwNzIyMTgyNjI2WhcNMjYwNzI5MTgyNjI2WjAYMRYwFAYD
VQQDEw02YTYxMGI1My1mMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ePMyqSvdOJFAfxe1c4kBieGyTpbr9+kLIf9rybLvASR68jUQ7nQmjwDpeK0
q/aT+ID7WuoC7EvroCFcdZ9vcIXB0iQcJxVgZ0oawxwNDD7PsudCLPi75AcE/UmS
qUOFKB5rqFqdeaJ3nLqu5HTxSID4ee3ynzE9thOnoIIXo1woIuzj3D5vgB5MAYTs
aKzhDvYefHAJvB+7bzUq6f9uL3hzQ/Xpxiv8fKp+BDDc6LME+B/XWXb8eLgAqmK1
mrUG+/dcCxr7xb8tqT+iIwcvrFFmAwXZB5MhjM+0s4NPoRsasW/zLFuTV6a85+uS
q/UUCYI/5Z1tI55GUWAWsR/p2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRbiHEK
ooJWbdsMbX0IVh0cejj8MB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1
MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1
VTRyYkZSaWpTR3BHQXI3VVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABF+YXvoV4eqnXz1rHXDImYzfhWxWg4ohizQT3c7FOnq+Pp2ZooaAcMQBVvGn
whm3zJgqQ2JBl+wTRBMgIfUoJuqeV2eF9f48CQPTMzvf/b0PCQjOEEPU8Za2/2be
QlIF7GArVzso4GW8OliJ1fftpac6CzDd/RCI3dcRTJSTxgHF0+3AXPjbsojt2IBd
PCxkr5b8Q32QBFGLcskmlTz7UXNuiJ1E3KvYTY3a3zUiKpeqpd6r302KDRbXE72n
Q8oKOs3U4Q4ulyVyoR1/ddFilyLOTZ5sOgFPG7wM+Ogjfy0C72/muqM9gjB2LQXd
j0KkAAErYK0M86i+LIc2WvDrpw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:14 2026 by rpki-client