Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
File:                     sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json)
Hash identifier:          MmCaPkv3U+GA2OHpIDK7obRKsiSpdF8lhl5sXvaGpPU=
Subject key identifier:   F9:9C:D5:32:5E:E4:BA:7C:6B:0F:55:C1:19:21:95:7E:CD:E8:7D:41
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Certificate issuer:       /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial:       02D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
Manifest number:          02C3
Signing time:             Mon 27 Jul 2026 02:35:51 +0000
Manifest this update:     Mon 27 Jul 2026 02:35:50 +0000
Manifest next update:     Mon 03 Aug 2026 02:35:50 +0000
Files and hashes:         1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: YRQ9zatztL0T41E25V5EU06THBfeMrWgq28Nj++A0GM=)
                          2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=)
                          3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
                          rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
        Validity
            Not Before: Jul 27 02:35:50 2026 GMT
            Not After : Aug  3 02:35:50 2026 GMT
        Subject: CN=6a66c407-3951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:28:41:20:61:31:a6:83:89:8b:9b:6e:77:
                    94:cc:7a:8b:75:cc:cf:5a:e3:a6:85:ac:47:b9:d6:
                    02:11:e8:5d:66:22:33:d1:0e:6f:37:c0:53:a2:2f:
                    5c:83:8e:71:df:96:e3:82:7e:01:83:d3:6e:df:50:
                    94:1c:6c:02:fc:f9:7f:b0:e8:ee:3f:24:50:df:03:
                    91:e2:33:b7:38:22:07:c7:97:c2:72:94:b5:6b:9c:
                    11:76:2e:2b:fe:26:ad:45:62:92:e9:8c:c2:e4:ea:
                    7d:76:f5:76:82:2f:21:12:c7:69:f7:c1:f0:ac:a6:
                    20:a9:28:9d:56:ce:43:bb:df:31:b3:7f:83:f9:b4:
                    65:28:61:ea:71:3e:af:bc:7b:31:9c:e5:3b:98:30:
                    d3:78:d0:bc:dd:0d:54:ac:99:7f:c1:a7:99:6b:96:
                    d9:2a:48:43:66:61:cb:2d:86:07:32:9c:3e:77:6a:
                    e0:95:35:70:e8:37:84:f2:de:ac:bb:4c:06:39:c3:
                    97:09:fb:a5:ee:57:41:3a:97:a8:ad:d7:9a:71:4a:
                    1e:2d:60:26:07:8c:d5:9c:f3:d3:cb:ce:03:8e:9f:
                    74:9b:b8:27:3e:67:33:a5:e0:72:64:ee:32:6f:59:
                    f9:71:90:22:08:57:e6:65:d4:d7:e9:f0:cc:7b:26:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9C:D5:32:5E:E4:BA:7C:6B:0F:55:C1:19:21:95:7E:CD:E8:7D:41
            X509v3 Authority Key Identifier:
                keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:03:1a:b8:a6:93:c6:00:68:73:f2:03:31:3c:57:cc:40:0a:
         03:72:19:b3:e1:8a:07:c7:e8:24:c9:f0:31:5a:e1:ce:26:b8:
         89:58:87:7e:71:e1:70:eb:32:bd:11:28:a8:7e:4f:40:7c:ee:
         c4:51:b5:56:c0:c1:e2:fe:d6:d1:b2:50:03:9d:6d:72:eb:01:
         13:5d:c1:a5:71:a9:4c:27:b1:12:5d:98:9f:e7:fb:f7:6c:55:
         04:60:66:10:41:00:d2:2f:e6:d7:4f:9a:ad:47:02:1b:59:3b:
         bf:a8:ea:2e:f0:4d:39:75:03:20:19:58:0a:cb:99:01:7e:8b:
         f1:da:33:7c:36:45:8e:96:9d:50:f4:de:f9:7e:d5:fc:e3:df:
         e2:95:92:6d:db:bc:88:4e:ec:3a:7f:69:92:af:00:81:24:c4:
         99:aa:c4:29:2d:ad:d1:cd:3c:0d:f9:cb:99:27:81:d3:53:e8:
         94:63:87:83:07:7f:ef:2f:71:9b:26:21:4e:6a:86:c9:35:a0:
         e6:14:db:bf:7e:ff:5e:98:90:4c:db:fb:e7:8d:9c:27:81:b2:
         82:06:8f:f4:86:7d:55:c5:ff:61:9a:dd:85:38:2c:75:89:e1:
         8e:e2:aa:d3:50:1d:0a:a4:2a:ae:f1:d9:a9:db:15:b8:4f:70:
         51:b9:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:43 2026 by rpki-client