Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
File:                     Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json)
Hash identifier:          sZf44zqHVMVVnE2DBtFnorAxmXi+8njDJLstbqUTxKQ=
Subject key identifier:   15:1C:42:AD:39:B9:91:0C:4B:2B:B1:63:AC:44:47:54:DD:2A:A8:E9
Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
Certificate issuer:       /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
Manifest number:          02D5
Signing time:             Mon 27 Jul 2026 02:28:09 +0000
Manifest this update:     Mon 27 Jul 2026 02:28:08 +0000
Manifest next update:     Mon 03 Aug 2026 02:28:08 +0000
Files and hashes:         1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: BGIEdBigPmZBZozPukajqKavzIAEED2DVt5KI6Qnwdw=)
                          2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: EMxgdpPufi1Og/AIiKXBzoLrbmFj4laz/LZzew8P9yk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl
                          rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
        Validity
            Not Before: Jul 27 02:28:08 2026 GMT
            Not After : Aug  3 02:28:08 2026 GMT
        Subject: CN=6a66c238-cc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:39:8a:50:89:b9:58:9e:61:fd:ba:36:d7:
                    0c:9d:a0:dc:aa:1c:2c:36:05:08:0e:47:d0:8b:e3:
                    e5:d1:2d:ee:4d:82:2b:ec:74:6d:08:8e:cf:15:48:
                    01:61:89:cd:14:f2:be:ee:7d:da:76:bc:f9:55:39:
                    60:e1:4f:94:b0:10:90:19:bf:8a:a8:b3:f0:1d:00:
                    10:dd:fd:cd:bb:4b:f2:da:48:b0:be:0b:2c:f8:80:
                    4c:4c:95:d8:f6:81:68:e8:9f:d0:31:8d:03:0b:5c:
                    60:e7:c8:06:d8:aa:52:e4:e8:43:29:90:80:1f:70:
                    f8:31:15:81:70:9e:ac:d2:3d:71:fb:9a:31:22:8e:
                    f7:49:30:87:3e:3f:9a:42:4f:ec:ad:41:5b:fe:23:
                    31:f4:cf:b4:7e:f4:84:08:30:b9:d7:62:04:50:3a:
                    de:74:9e:c0:22:a0:ea:ff:f0:f5:d0:04:c3:7d:55:
                    e8:eb:2f:09:ee:46:eb:e6:90:8f:4a:2d:47:a1:b0:
                    12:4f:50:07:c2:73:4a:b0:16:e4:02:da:16:b0:29:
                    da:76:76:49:4b:3c:e0:0f:ea:e6:30:7d:ba:c8:06:
                    63:e3:9e:c4:f2:5e:d7:5c:bc:db:fc:53:bd:a6:25:
                    49:3f:83:11:55:61:8e:45:e9:3f:e9:7d:bc:da:36:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:42:AD:39:B9:91:0C:4B:2B:B1:63:AC:44:47:54:DD:2A:A8:E9
            X509v3 Authority Key Identifier:
                keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:36:f5:63:c0:db:28:39:03:38:d5:a6:16:14:55:5f:85:e4:
         a4:ce:71:b8:66:a0:d6:7f:8f:b9:d0:b6:35:49:e8:12:e4:40:
         c9:07:b1:96:c7:7f:8b:77:37:aa:51:4c:af:9d:73:3e:d5:d5:
         2a:f0:63:44:f9:52:92:97:1d:78:e1:04:48:5b:2a:0e:73:a7:
         c7:5f:f3:94:ff:8d:67:08:25:3e:b5:4b:f8:39:89:2e:89:d6:
         d9:e7:da:95:dd:41:2f:b3:a5:e9:e9:a2:b5:a1:ec:bc:90:6b:
         7d:7d:21:b2:39:a3:8e:af:30:d3:4e:8b:73:32:8e:db:6f:f8:
         33:7f:6b:55:db:3b:8b:9d:31:66:c9:70:33:0f:73:de:9c:e0:
         94:85:58:d3:5d:b2:91:14:e1:a5:29:70:c4:a5:f6:dd:da:27:
         0b:09:3b:22:64:76:ed:78:fa:cb:4e:c5:f9:c1:03:45:e4:b3:
         6d:36:d7:49:24:08:42:27:06:de:7b:d1:84:54:f9:be:b8:17:
         07:04:2d:07:49:98:8d:08:08:cb:e9:16:2a:1c:31:ac:5b:50:
         ce:33:f1:5d:be:13:ce:06:cc:7f:b4:96:d3:91:17:0b:31:6d:
         85:07:24:53:74:c9:1a:e8:b8:0d:84:0f:bd:27:a7:95:89:95:
         ce:68:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:53 2026 by rpki-client