Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
File:                     1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft (raw, json)
Hash identifier:          ZPd5116gnTwa2mCMUsWEB8wV1mJbe87H4EZmC8+EgkY=
Subject key identifier:   1B:AA:62:C4:F5:0C:C2:73:45:14:EC:79:3D:D7:ED:50:8D:07:6E:4F
Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
Certificate issuer:       /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
Manifest number:          69
Signing time:             Mon 27 Jul 2026 10:17:28 +0000
Manifest this update:     Mon 27 Jul 2026 10:17:28 +0000
Manifest next update:     Mon 03 Aug 2026 10:17:28 +0000
Files and hashes:         1: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl (hash: Y2ev/StoXpVjQk2zpNCQAHad1FPezUr8OpQD3aFtelQ=)
                          2: F5568448F11C11F0AC52AD484D6F56BC.roa (hash: FSRnxAS3d/oxWCt/mXgTvn1rm5+e0wMamnNqPiiIkGI=)
                          3: 2235EF78F12011F0BFBF3F154E6F56BC.roa (hash: PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
                          rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
        Validity
            Not Before: Jul 27 10:17:28 2026 GMT
            Not After : Aug  3 10:17:28 2026 GMT
        Subject: CN=6a673038-ac47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:62:75:11:19:46:63:07:b3:80:28:a1:aa:
                    c4:6f:0f:76:85:d7:ef:fa:dc:40:45:c7:3f:30:49:
                    c8:8b:e3:d4:fb:83:29:30:a4:da:1f:d7:c1:2d:c7:
                    11:38:7f:e9:0b:18:24:de:ce:dc:d0:46:da:1c:8c:
                    b1:40:3e:5c:fa:d5:39:0a:71:4c:cd:2f:b8:84:23:
                    ab:20:63:81:d8:6f:b2:07:ec:6d:a9:b0:71:19:fd:
                    dc:8f:8e:bd:45:0c:ee:79:27:b2:8f:e7:e6:ee:f1:
                    0e:c9:a1:94:1b:a7:c2:02:f8:db:74:a6:cb:bc:e2:
                    2a:5d:68:9c:5b:00:69:d1:be:f8:ec:03:04:8c:05:
                    db:f8:68:ae:a6:1d:7a:ba:52:40:f6:e3:fc:0a:11:
                    d8:9d:d2:be:ca:15:db:ce:af:6a:ff:7f:d8:a2:6a:
                    48:53:24:dd:0b:27:81:03:a5:d0:c2:45:c9:ec:a0:
                    80:ba:5e:17:c9:6c:41:f2:41:ce:58:07:35:3b:63:
                    fc:5d:07:d5:35:f3:40:02:00:4f:c2:98:f0:ff:e5:
                    d3:41:95:82:ee:02:e6:3c:7c:5e:e1:3d:8c:e5:04:
                    54:bd:e5:92:8e:90:af:5a:2c:ac:6a:a9:62:f1:87:
                    af:ff:b7:c5:0d:c5:38:37:4a:a7:68:ab:78:cf:f2:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AA:62:C4:F5:0C:C2:73:45:14:EC:79:3D:D7:ED:50:8D:07:6E:4F
            X509v3 Authority Key Identifier:
                keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:40:ec:6b:ca:99:da:35:e7:e0:64:f5:39:c6:33:5d:93:
         8f:3e:47:82:05:75:14:33:ed:11:b8:5e:e3:43:9b:67:51:97:
         57:13:cb:b2:a5:5e:8b:ac:31:a3:7c:2f:41:d8:06:d6:aa:55:
         cd:5c:b3:bb:c9:08:25:b2:cc:b4:f0:24:db:cb:56:10:c7:ec:
         be:ee:aa:b2:36:e6:92:1d:55:89:b4:3b:65:4c:1c:9d:48:50:
         a0:fd:01:b3:32:53:21:b9:1b:5f:0e:e4:f1:45:0d:60:47:5e:
         12:06:07:20:30:2a:3e:83:9b:23:4c:f0:34:58:03:e2:07:62:
         bb:28:ef:e1:3a:12:d2:38:31:69:33:3d:af:be:4c:47:8d:7d:
         70:63:5a:0e:c6:ed:40:c3:70:b9:4e:a8:dc:29:38:24:d1:d2:
         bf:d2:f8:87:db:69:4e:00:6b:4d:c3:cd:2c:0b:37:00:5b:86:
         1c:15:75:c7:58:5c:ac:cb:28:db:f6:4d:ed:32:73:53:08:26:
         a3:f8:e4:e6:fd:cf:5f:2d:52:1a:d9:21:7a:b5:a7:ad:89:86:
         01:07:6c:b5:60:1b:60:25:3e:c1:77:c7:7a:53:37:89:51:34:
         45:55:9d:2b:5f:bd:4c:e4:36:bd:10:d4:db:fd:86:be:bb:db:
         6f:9f:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:42:56 2026 by rpki-client