Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
File:                     u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json)
Hash identifier:          MWQMUEmU/jGJHLkBLsZL9QF3D99tm6EN+QuRdCUJAKs=
Subject key identifier:   39:49:D6:54:A1:DB:1B:B6:5B:A3:7E:42:3C:BD:88:E6:50:EB:59:85
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Certificate issuer:       /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
Manifest number:          0222
Signing time:             Mon 27 Jul 2026 01:34:28 +0000
Manifest this update:     Mon 27 Jul 2026 01:34:27 +0000
Manifest next update:     Mon 03 Aug 2026 01:34:27 +0000
Files and hashes:         1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: hmatTSIeFSuZgth9WvuKiK6JxkFxsVxPznUGReZZOOQ=)
                          2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: k8e7fh/Sk4baSRucN3DJUvfanj8+Y0iTHkIRT27bbss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
                          rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
        Validity
            Not Before: Jul 27 01:34:27 2026 GMT
            Not After : Aug  3 01:34:27 2026 GMT
        Subject: CN=6a66b5a3-a0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:17:f7:74:8e:07:a8:ed:20:60:ea:1f:92:
                    b5:fa:e1:22:a4:db:6f:e6:6a:13:9a:66:11:88:7a:
                    bf:e1:b7:da:54:29:ab:c8:c3:29:9f:56:b3:45:5c:
                    90:17:c2:a1:07:58:ae:cc:41:31:70:28:3c:b5:78:
                    ea:ad:a3:6b:22:b0:8f:0d:09:7c:56:ac:c6:5f:34:
                    82:9a:57:ec:cb:d1:b5:fe:a4:d0:02:7f:74:38:90:
                    14:13:34:b0:1a:e2:86:e0:09:8c:b8:bc:c9:b7:00:
                    77:ae:71:91:0d:51:6d:c7:49:1e:e5:70:3d:75:1b:
                    77:49:ba:bc:69:74:1a:be:cc:85:71:83:0f:cd:6d:
                    03:37:e2:33:61:50:c8:c1:51:b6:7e:13:f4:3f:ab:
                    75:6b:50:52:ff:a3:fd:5b:e3:80:e4:41:2a:5c:dc:
                    90:24:56:d4:42:7d:49:ac:ce:37:94:72:08:ff:db:
                    38:b5:83:71:8e:b8:d2:a1:99:1d:c9:04:e9:7a:8c:
                    27:cb:e3:87:9f:4f:8e:dd:2a:f0:12:8e:51:ce:83:
                    54:62:cc:c7:fe:d2:22:2b:53:9a:e1:df:50:b7:6e:
                    45:61:af:7f:d1:30:92:4e:6b:bd:f9:de:6d:f2:57:
                    c2:c5:68:cf:9d:f6:ec:70:5d:75:8e:f6:e1:27:c3:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:D6:54:A1:DB:1B:B6:5B:A3:7E:42:3C:BD:88:E6:50:EB:59:85
            X509v3 Authority Key Identifier:
                keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:21:1d:64:a9:86:46:a8:09:03:b9:ea:cf:03:2f:f0:2a:2b:
         b3:be:03:7f:3e:60:eb:6c:ea:26:64:71:3a:a8:bd:0d:cc:61:
         6d:69:e5:61:c5:13:dc:7c:ab:75:92:0f:ff:ea:c4:fd:4d:a1:
         e3:a0:9a:8e:ec:9f:6f:aa:72:05:b7:d9:1e:4b:7c:3b:18:89:
         4c:43:fc:4b:a0:ca:d7:d4:69:b8:b2:5b:b4:84:64:83:24:36:
         d3:00:27:fa:1a:ea:e3:30:c0:1c:a6:bb:52:cf:a1:51:32:46:
         94:dd:88:c8:e1:58:a0:a1:53:39:95:26:42:be:54:65:1d:71:
         3b:fd:54:eb:14:bf:9e:52:5b:a9:78:a1:8a:32:39:dc:e5:61:
         ee:e3:0d:cd:7d:2e:4f:9f:d9:20:49:d5:1b:bb:0a:c2:0b:09:
         cf:75:99:51:c9:70:1d:12:7d:60:4b:cf:16:09:2f:25:25:34:
         53:11:f1:f3:9f:5b:6a:8d:0b:69:0d:91:4c:7f:12:4e:fe:af:
         1d:2b:f5:d5:a8:ad:95:3c:8a:48:e0:ab:a5:bd:86:99:16:f0:
         13:8d:5d:0f:4e:69:80:be:7b:30:e9:6c:b8:55:2e:96:d2:6d:
         1b:2b:d2:0d:4e:0c:e0:e5:e9:3c:00:d1:c7:15:9b:10:64:2c:
         6c:5e:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:23 2026 by rpki-client