Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File:                     84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier:          ze0nkjWGFYc2WGqObGaQ1bhgrgtk3vvjvO6tfpIkHrI=
Subject key identifier:   BE:93:C6:FB:CC:25:82:A8:38:6D:34:39:B2:BB:5F:7C:EB:26:81:09
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer:       /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial:       052E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number:          0527
Signing time:             Mon 27 Jul 2026 00:32:12 +0000
Manifest this update:     Mon 27 Jul 2026 00:32:12 +0000
Manifest next update:     Mon 03 Aug 2026 00:32:12 +0000
Files and hashes:         1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: ke9uQHxXBXmsYOojPsb+5IdsYtrEoPOdFzoU4aCEQIw=)
                          2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 4pb/gM8lDNYdlH1fovFGDxDjw7tPKno0MVw8fyTlO8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
                          rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Validity
            Not Before: Jul 27 00:32:12 2026 GMT
            Not After : Aug  3 00:32:12 2026 GMT
        Subject: CN=6a66a70c-491b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:09:34:c0:80:7c:c9:04:a8:1b:16:d7:0e:
                    3c:50:07:84:9c:6a:77:5f:ba:ce:96:69:02:41:88:
                    45:e2:cf:aa:af:ee:eb:b2:17:43:c4:1b:8c:86:23:
                    ae:dc:9d:fe:68:0a:d4:e7:70:61:b5:46:4a:29:18:
                    cd:d4:98:f0:fd:db:a2:6a:60:5b:33:d7:b4:3d:0f:
                    cc:83:07:06:6b:e0:01:6d:e2:6c:bb:88:b4:7d:f2:
                    96:84:df:a8:4b:db:4b:2c:79:10:2c:0f:1f:1b:43:
                    3e:0d:fc:64:13:8b:03:0a:ec:98:59:9c:ac:18:42:
                    63:33:59:53:bc:14:ee:f1:a0:5e:35:ba:e5:de:1d:
                    52:f3:26:3a:53:14:8a:3f:7e:21:51:fc:cc:30:32:
                    50:92:b2:0b:2a:8d:1c:5e:58:8a:1e:4c:00:d6:ec:
                    1b:fc:18:fe:88:4b:51:1b:f2:93:fe:36:dc:60:62:
                    37:fa:5e:32:77:8c:4a:d0:80:62:af:61:02:af:dc:
                    7e:bc:0c:19:36:d9:b9:a7:af:a0:60:cd:ea:f5:f1:
                    26:bd:52:27:62:d2:bd:83:ec:05:b8:e8:14:8a:64:
                    4a:21:f0:3d:4a:bd:82:bd:d6:c0:af:a8:d7:f2:01:
                    dc:c5:be:cf:67:7b:57:61:bb:47:45:bc:46:72:37:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:93:C6:FB:CC:25:82:A8:38:6D:34:39:B2:BB:5F:7C:EB:26:81:09
            X509v3 Authority Key Identifier:
                keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7b:f4:95:64:ef:1e:01:fc:32:0b:c9:61:69:b2:5d:0b:60:
         3d:e3:c9:b8:d3:ef:29:33:24:b7:22:c0:ba:23:94:e9:74:03:
         6c:8a:c1:8c:27:41:9c:ec:ed:f2:6b:7c:07:71:02:8a:75:8b:
         a2:8e:e3:f3:c6:d8:c8:3e:4e:a7:a6:af:1a:d2:39:90:44:15:
         28:8b:f1:66:d9:fb:39:a2:a7:14:10:b6:5b:cc:90:4b:ac:2b:
         b0:1f:b5:e8:5d:88:ef:1f:37:e6:f1:54:cf:d8:bb:ad:52:9c:
         c0:08:2b:37:b5:e0:86:03:e5:aa:e3:49:e6:61:30:1d:b9:69:
         71:fb:a2:d5:51:d8:28:e7:67:6d:0f:a2:74:61:12:07:bb:c4:
         6d:a6:07:8f:45:78:be:2a:fa:c4:bd:15:32:a5:56:5a:de:c6:
         3a:61:5e:2c:95:4e:2c:d4:b7:48:ef:51:bb:c3:9d:d4:95:76:
         82:72:d7:3a:61:52:1b:28:c5:21:e3:39:cc:57:37:4d:49:48:
         18:e1:65:e3:eb:c3:86:f6:1b:74:64:f2:28:c3:87:00:df:e8:
         76:64:d2:99:91:e3:35:5c:64:42:d2:ce:22:44:3c:77:61:7d:
         84:a4:d6:d3:7c:89:9e:9a:4e:98:42:f8:7e:f5:03:54:a8:ea:
         06:30:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:50 2026 by rpki-client