Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File:                     cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier:          jUBq+mKVmWcbsneqcawIAIvYrxnITrrdgs1ItDcUd7k=
Subject key identifier:   47:40:32:BF:F2:58:A5:9A:71:71:5A:0D:5F:34:49:FE:18:D4:8D:23
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer:       /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial:       02CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number:          02C7
Signing time:             Mon 27 Jul 2026 02:31:25 +0000
Manifest this update:     Mon 27 Jul 2026 02:31:25 +0000
Manifest next update:     Mon 03 Aug 2026 02:31:25 +0000
Files and hashes:         1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: 4AxBHyDyKDyjY2lvHGx/BKMJlHJbbkN3guInWvFtUDE=)
                          2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: NdDZZRgK9g6DqkIOgNxd6KDbkad4VeSpXexgW2KxCEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
                          rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
        Validity
            Not Before: Jul 27 02:31:25 2026 GMT
            Not After : Aug  3 02:31:25 2026 GMT
        Subject: CN=6a66c2fd-cef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:23:d9:6b:2a:b6:b4:d8:18:ff:01:44:76:
                    ba:2f:c6:f5:f5:9b:41:92:33:f9:2b:fc:8f:32:bb:
                    3a:8f:c3:04:58:a6:bc:cb:06:62:83:be:f1:5e:ae:
                    ca:0e:1a:b4:02:40:35:30:50:a6:93:ce:8b:18:48:
                    0a:b2:6a:c7:72:e4:0e:30:87:d1:70:a2:fb:9a:6d:
                    75:6c:ee:3d:c0:63:de:09:b3:7c:b7:21:c6:8e:9a:
                    8f:1d:78:46:ec:04:8e:19:7b:aa:1f:c8:b7:b0:54:
                    5a:7e:ad:ea:d1:e5:6a:5b:d1:91:6b:93:a1:a1:20:
                    dd:3e:7b:c9:29:3b:da:bc:aa:69:32:99:0c:19:63:
                    28:ea:86:95:3b:eb:b6:e1:0f:d0:01:22:de:aa:76:
                    ec:28:19:c2:ea:21:af:15:22:c3:49:7f:16:e4:5d:
                    da:d7:b6:93:8d:94:73:89:e2:ac:c0:79:40:88:8d:
                    17:cb:d0:58:65:ef:3b:20:21:16:f9:53:61:9f:60:
                    9f:29:31:e4:7e:32:37:0b:42:44:9e:9d:7d:70:d3:
                    35:d1:5d:b5:9f:19:56:87:cb:6b:88:11:3f:d5:d0:
                    e8:56:5c:1e:fa:25:29:c2:55:7f:d2:ab:a2:16:30:
                    bc:7e:a8:fe:b4:8e:61:69:7a:76:7c:27:fe:eb:6b:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:40:32:BF:F2:58:A5:9A:71:71:5A:0D:5F:34:49:FE:18:D4:8D:23
            X509v3 Authority Key Identifier:
                keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:14:14:f7:fe:1e:04:e9:d7:05:76:b6:d5:b9:71:e9:3d:53:
         14:49:1d:ef:1e:a6:2f:55:97:f3:be:64:d9:d1:bc:23:eb:06:
         03:99:d1:7b:a2:6c:8b:f8:73:e0:be:83:f9:87:65:87:e8:03:
         94:c6:7b:1c:64:4f:eb:c5:00:41:bf:a6:2a:31:9a:31:fd:05:
         63:43:99:7d:8a:6e:e3:1f:7c:b3:88:94:51:d4:81:53:21:4a:
         2c:41:17:99:a8:fc:15:a6:e0:66:0b:56:1e:f5:0e:dc:bb:dc:
         f6:5c:4c:1c:5c:7e:b5:81:23:39:68:c6:7b:9c:51:ba:5c:da:
         77:9c:ab:92:99:ad:78:78:dc:b6:6e:5e:5e:d1:b3:5a:28:82:
         5e:7b:29:84:ad:08:1e:55:b6:80:dc:18:13:58:aa:62:36:0d:
         42:b5:46:f8:b2:2c:4d:16:ee:67:b4:b2:a8:7e:3c:96:c0:ef:
         e1:a0:8e:41:50:bf:77:63:08:7d:e5:03:fa:bb:44:33:9a:07:
         e8:d0:77:a4:bc:67:c7:84:0e:ac:1f:32:66:2f:0f:60:9d:31:
         e1:56:62:e1:fc:61:22:e4:14:81:c1:8a:4b:b3:73:47:c8:20:
         0a:97:b0:82:db:56:93:1b:97:ca:35:44:c2:d2:b6:d2:6d:4b:
         a4:e9:6a:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YxMjQxMTAvBgNVBAUTKDcwMzZBMjAwNzdGRjg3RkVGQTM0MDBEN0Y5MDc2QjdF
MTk4MzhCMkUwHhcNMjYwNzI3MDIzMTI1WhcNMjYwODAzMDIzMTI1WjAYMRYwFAYD
VQQDEw02YTY2YzJmZC1jZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvP4j2WsqtrTYGP8BRHa6L8b19ZtBkjP5K/yPMrs6j8MEWKa8ywZig77xXq7K
Dhq0AkA1MFCmk86LGEgKsmrHcuQOMIfRcKL7mm11bO49wGPeCbN8tyHGjpqPHXhG
7ASOGXuqH8i3sFRafq3q0eVqW9GRa5OhoSDdPnvJKTvavKppMpkMGWMo6oaVO+u2
4Q/QASLeqnbsKBnC6iGvFSLDSX8W5F3a17aTjZRzieKswHlAiI0Xy9BYZe87ICEW
+VNhn2CfKTHkfjI3C0JEnp19cNM10V21nxlWh8triBE/1dDoVlwe+iUpwlV/0qui
FjC8fqj+tI5haXp2fCf+62s5WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdAMr/y
WKWacXFaDV80Sf4Y1I0jMB8GA1UdIwQYMBaAFHA2ogB3/4f++jQA1/kHa34Zg4su
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEyNC81NjU1REE3NjQ5
RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hfNzZOQURYLVFkcmZobURp
eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NEYWlBSGZfaF83Nk5BRFgtUWRyZmhtRGl5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjEyNC81NjU1REE3NjQ5RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hf
NzZOQURYLVFkcmZobURpeTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASRQU9/4eBOnXBXa21blx6T1TFEkd7x6mL1WX875k2dG8I+sGA5nRe6Jsi/hz
4L6D+Ydlh+gDlMZ7HGRP68UAQb+mKjGaMf0FY0OZfYpu4x98s4iUUdSBUyFKLEEX
maj8FabgZgtWHvUO3Lvc9lxMHFx+tYEjOWjGe5xRulzad5yrkpmteHjctm5eXtGz
WiiCXnsphK0IHlW2gNwYE1iqYjYNQrVG+LIsTRbuZ7SyqH48lsDv4aCOQVC/d2MI
feUD+rtEM5oH6NB3pLxnx4QOrB8yZi8PYJ0x4VZi4fxhIuQUgcGKS7NzR8ggCpew
gttWkxuXyjVEwtK20m1LpOlqgQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:08 2026 by rpki-client