Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
File:                     05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json)
Hash identifier:          kNWfvFqhzCjJCR1Gdq1rgUAZZqwDKVv+iu++cXYgVp4=
Subject key identifier:   42:F4:35:4E:4A:09:C8:37:55:08:5D:C1:4E:94:7A:AA:9D:B7:E9:FF
Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
Certificate issuer:       /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Certificate serial:       022F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
Manifest number:          0223
Signing time:             Mon 27 Jul 2026 04:23:31 +0000
Manifest this update:     Mon 27 Jul 2026 04:23:30 +0000
Manifest next update:     Mon 03 Aug 2026 04:23:30 +0000
Files and hashes:         1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: vKajwKuVaD6ZT3ylWes7V/MQaYl4+u/AfR3XoU9Ee4E=)
                          2: 410453A46E7011F183E89C7A8DA30FBC.roa (hash: QfC79sH7/xbE1lm0xoV9ymCerPtxw6EWj4aqhq/0rkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
                          rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
        Validity
            Not Before: Jul 27 04:23:30 2026 GMT
            Not After : Aug  3 04:23:30 2026 GMT
        Subject: CN=6a66dd43-d118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:49:1b:ed:58:65:a8:7c:13:b4:9e:01:9d:
                    fe:07:7b:b2:46:e5:ba:48:3d:61:af:1d:c5:73:f0:
                    3b:0a:4b:26:d6:60:a3:35:c9:19:c8:fe:12:f6:e0:
                    9b:2e:0b:b3:33:11:9f:92:03:91:63:ca:f8:01:b9:
                    53:b7:7a:04:82:bd:cf:1f:f4:74:92:33:b9:4b:d8:
                    d0:30:43:6e:64:fd:d5:d6:27:96:d3:b3:18:71:df:
                    70:c3:01:92:5c:87:a5:31:1b:8b:64:62:e2:48:41:
                    25:ff:f9:6a:6f:09:56:dc:51:d0:ca:ee:6e:76:2b:
                    03:e3:3a:3f:bc:74:43:b1:d7:61:bc:2f:8b:9b:61:
                    25:45:e4:f3:af:12:39:5b:65:bf:f6:00:2b:78:83:
                    8e:8f:12:d1:f6:21:d2:67:31:85:16:a4:e4:d8:d2:
                    1f:0a:02:af:53:f2:a9:c0:35:5d:ee:47:44:88:d4:
                    ce:ea:05:a1:d7:39:e8:70:8a:de:a3:6e:88:8c:16:
                    ec:30:94:36:cb:d4:26:a6:4b:9c:3f:6c:4e:0f:48:
                    cf:bb:a3:af:cf:9d:e3:24:ba:0b:1b:eb:04:ef:d9:
                    79:6b:30:04:9e:ca:ff:44:aa:0d:c4:59:21:4f:2b:
                    46:fa:12:36:06:a7:81:c8:83:50:d2:3f:65:a9:00:
                    fa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F4:35:4E:4A:09:C8:37:55:08:5D:C1:4E:94:7A:AA:9D:B7:E9:FF
            X509v3 Authority Key Identifier:
                keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:ef:83:d9:01:cf:59:07:61:72:6e:3a:69:87:2c:7c:26:
         9a:90:1d:1c:5f:90:44:6d:46:8f:8d:89:e8:0e:9a:96:18:de:
         9f:a8:6a:97:76:9a:61:25:09:10:e7:5d:2c:27:46:3b:76:48:
         5e:73:5b:ac:a7:88:c7:40:fb:e5:90:d4:db:9e:76:3a:9b:3e:
         30:40:4d:18:7c:8a:b3:e0:26:63:f2:88:86:e3:02:4a:9f:97:
         2c:b3:32:e1:5a:bb:59:9a:4c:3f:28:ac:4a:06:62:2d:ec:1b:
         7d:d8:3e:6d:a8:dc:94:3e:f7:cd:2f:e8:6a:d0:02:d5:b2:4b:
         44:56:71:fb:16:de:d2:1e:03:74:d7:7c:93:43:41:54:4e:b1:
         fc:b1:35:7d:47:4a:9e:81:58:41:29:0b:ff:71:ff:6e:80:52:
         c4:6a:a3:08:42:5e:a6:7f:23:8e:6e:68:b0:0e:bb:fd:4e:2f:
         9a:62:42:8a:a6:06:89:17:a2:92:bf:4d:6f:e4:64:6b:01:fc:
         7d:d5:69:1a:53:44:e4:62:82:bc:d8:13:c6:8e:86:76:c3:1f:
         67:6d:8e:da:d4:dd:4d:c8:36:80:6d:44:24:d1:20:5a:03:c5:
         81:65:d3:ea:7b:f6:fd:91:ec:f0:60:19:15:d8:96:2a:59:0a:
         8c:71:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:04 2026 by rpki-client