Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
File:                     K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json)
Hash identifier:          /5eZz445jDGcj88TuQpPeuXKQUcmSw54JyyTRvuxcEY=
Subject key identifier:   E7:E0:49:9E:73:86:2B:4C:63:19:70:BC:A9:58:13:E5:E3:08:04:43
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Certificate issuer:       /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
Manifest number:          0170
Signing time:             Mon 27 Jul 2026 06:36:20 +0000
Manifest this update:     Mon 27 Jul 2026 06:36:19 +0000
Manifest next update:     Mon 03 Aug 2026 06:36:19 +0000
Files and hashes:         1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: vvx0AvJtU/0+X6/HUQdlrIUG+eAQ1xWG2HEHXUNhzyk=)
                          2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: zrqCL04jUGgsbKaYOZp7KQyNgp8nrR3Fm1zIFrxXnuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
                          rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
        Validity
            Not Before: Jul 27 06:36:19 2026 GMT
            Not After : Aug  3 06:36:19 2026 GMT
        Subject: CN=6a66fc64-eb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:d7:78:fc:dc:f0:47:04:fa:95:9d:5f:6f:
                    31:09:5d:f7:0f:3b:ad:a6:cf:dd:32:83:e9:13:6b:
                    cc:cc:b6:1e:3b:d0:7a:5b:a9:85:1e:b1:a1:0d:26:
                    5d:67:a1:79:4b:08:96:da:1b:cf:4f:fc:36:f3:94:
                    db:0e:f1:77:a0:76:00:ad:d9:83:36:d1:75:af:d8:
                    13:29:1c:c4:27:d6:c4:e6:bc:3f:f5:69:fb:1f:b1:
                    49:bd:18:10:a0:92:32:5f:15:f1:e4:89:96:b8:2c:
                    ac:1c:84:6a:32:04:6e:32:e5:4c:bd:a8:41:d2:21:
                    3d:66:99:b5:5b:47:03:e6:b4:71:b3:0b:1d:7d:8d:
                    c5:13:ca:eb:42:35:72:41:68:cb:56:45:ae:c3:aa:
                    e7:e6:7c:cd:ed:94:21:92:2d:5d:04:0b:dc:73:7b:
                    ff:1b:33:cb:60:a7:fa:09:c2:9b:68:3f:6a:1c:31:
                    96:b7:5f:ac:2b:24:c9:f3:79:fe:9e:74:12:1d:c8:
                    28:7f:d1:be:f1:04:2e:43:3d:7d:77:1b:2c:4c:d8:
                    c2:62:a3:8c:54:a7:84:a2:86:21:ba:aa:eb:ed:ea:
                    55:97:3e:df:5b:02:cb:f9:da:ff:38:30:b7:0e:b8:
                    37:ef:84:5e:28:d6:0b:7f:66:db:56:05:9a:da:1c:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:49:9E:73:86:2B:4C:63:19:70:BC:A9:58:13:E5:E3:08:04:43
            X509v3 Authority Key Identifier:
                keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:d4:3c:91:90:de:dc:6b:f3:9a:80:3c:2a:ad:00:b2:19:
         18:84:e3:9c:e7:f1:a2:14:c7:32:9f:c6:0c:6c:7c:c5:f3:b5:
         33:91:5e:b5:64:51:cf:3d:1a:d5:31:91:f8:2f:ea:9d:b8:5c:
         21:ef:a6:00:e5:67:6c:ce:ab:88:34:c5:0a:56:eb:ee:90:da:
         5f:66:5d:ed:98:4f:8d:67:2e:9c:00:93:99:de:b4:65:d6:24:
         e1:7e:e3:ce:70:45:84:fd:6e:30:e1:c8:94:f2:a5:5b:0f:59:
         84:b9:1b:13:72:c3:2c:82:0d:2d:ff:5b:53:fe:40:12:14:90:
         90:de:5d:d5:98:d9:94:2a:78:12:6e:74:0f:94:e0:3f:f9:a0:
         5e:f1:90:07:2d:67:23:0a:c0:b6:63:09:e6:c9:96:08:9d:fb:
         3a:15:44:22:5f:af:d4:b7:02:f9:23:f9:88:14:bb:fe:ca:5d:
         d5:38:19:42:8c:ec:4e:a6:21:65:49:43:83:46:08:3f:70:8e:
         2d:97:0c:23:06:53:25:c4:9c:af:3d:46:a0:5c:49:4d:4c:ea:
         c6:1a:52:44:41:fc:42:5b:b5:a7:ca:3f:51:99:3a:64:bb:32:
         cf:31:b8:24:be:a9:f4:d3:92:58:1f:c8:d7:b8:cf:93:42:04:
         75:6b:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:43 2026 by rpki-client