Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File:                     aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier:          2zYe3VVbJonme50XXy83VOdOsowjHNsQmv0g46LVaK4=
Subject key identifier:   69:6B:54:1A:B6:65:AC:0C:91:E2:B4:6C:C3:11:5B:EC:72:FD:F9:46
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer:       /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial:       0EE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number:          0EC4
Signing time:             Tue 28 Jul 2026 17:49:08 +0000
Manifest this update:     Tue 28 Jul 2026 17:49:08 +0000
Manifest next update:     Tue 04 Aug 2026 17:49:08 +0000
Files and hashes:         1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: sMtBPZEkS4WAhLhcoh9wWY5mdSgLSU6g6pUvL9c5+es=)
                          2: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: oPPYxBYmiiy4enhiiy5O2BkIuc1yyliJlPvf0DwR6C8=)
                          3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: 4waDGGKnkJeLLa4QkYuztqh/mv8xS12LSc+ievo5tLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
                          rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3808 (0xee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
        Validity
            Not Before: Jul 28 17:49:08 2026 GMT
            Not After : Aug  4 17:49:08 2026 GMT
        Subject: CN=6a68eb94-3ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:71:9e:ef:8f:e5:d0:a3:36:08:7b:97:d1:
                    0b:ca:5d:d6:e1:5d:c6:8d:07:f3:3b:f1:dc:c9:f0:
                    18:60:8a:b4:9c:8d:df:a6:47:76:aa:14:a3:60:5a:
                    65:e1:b9:c2:ed:1d:d0:c1:45:d1:12:6c:41:de:73:
                    6b:dd:47:25:c9:3a:ab:6b:08:9f:b8:80:2f:20:19:
                    8a:60:c3:c8:df:b9:a6:48:6d:73:7d:66:ff:1d:55:
                    68:18:f7:37:80:95:dc:fb:4d:7a:83:0b:23:70:e3:
                    3c:70:64:0c:0c:df:8f:89:0d:53:c6:a1:36:fd:fb:
                    2b:6e:4c:c7:9f:2c:82:6c:5a:78:a7:17:ab:1b:2d:
                    1b:17:c9:95:8c:08:f4:78:81:9d:3c:da:26:f1:f3:
                    16:7c:48:51:e5:c9:96:1c:36:d6:3a:1a:f9:c7:7e:
                    e9:82:26:c6:0b:48:77:b6:a5:ac:b7:89:1d:70:4c:
                    cf:e7:95:7d:12:db:5d:dd:f0:de:58:4d:38:47:e1:
                    36:cf:9d:42:f4:44:9c:0e:9b:2f:78:02:f0:85:0b:
                    77:33:21:4e:57:d1:89:ba:db:79:b7:c3:aa:4f:d4:
                    79:2d:29:13:61:b0:36:a6:8c:f4:da:3b:6b:bb:ba:
                    66:4d:9c:34:b5:45:df:a3:4a:0f:d0:d1:64:3a:0b:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6B:54:1A:B6:65:AC:0C:91:E2:B4:6C:C3:11:5B:EC:72:FD:F9:46
            X509v3 Authority Key Identifier:
                keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:d0:d7:3e:f8:37:e2:5f:f6:16:5e:47:2e:bb:a4:e5:d3:
         c2:08:cb:3c:f1:af:17:dd:31:d0:21:0e:8d:ac:dd:f4:e6:0d:
         98:29:65:d3:4a:9c:a3:41:fb:30:63:a6:7b:b7:b3:9b:40:2c:
         07:83:ec:8e:a3:ec:fe:ce:40:b8:16:b4:c4:65:09:17:ec:d6:
         bf:d4:33:96:0e:dc:d1:ff:a8:e4:7e:8c:41:c7:99:88:cb:31:
         b9:3f:88:fa:1c:22:15:3d:9e:59:06:4c:37:95:33:2e:99:d2:
         2b:1c:6e:f9:5f:ec:cc:88:c3:e9:6e:23:71:a3:19:de:99:b3:
         76:5a:5e:92:3e:61:ac:40:49:52:29:26:6a:e5:89:bb:a7:30:
         a1:ea:5d:45:ea:9a:84:9b:e2:d6:a7:0d:84:1f:d2:f5:05:93:
         f7:38:b4:82:73:69:c1:8d:0e:c9:db:ae:fc:a3:1e:b8:8c:2e:
         c1:ab:0d:10:26:4d:23:d1:99:98:06:36:2c:b5:ee:5a:b2:6f:
         79:d2:7d:7a:6a:15:c0:49:04:15:4f:6c:b0:63:26:74:a6:8a:
         61:65:74:1c:3d:ce:f2:cc:de:4f:6b:db:5a:ec:33:5b:b8:12:
         5f:0e:3d:a2:0d:a0:51:59:6f:c9:60:c3:64:46:90:de:a4:f0:
         e7:4c:74:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1
OUE0MzgyMzMwHhcNMjYwNzI4MTc0OTA4WhcNMjYwODA0MTc0OTA4WjAYMRYwFAYD
VQQDEw02YTY4ZWI5NC0zYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk7lxnu+P5dCjNgh7l9ELyl3W4V3GjQfzO/HcyfAYYIq0nI3fpkd2qhSjYFpl
4bnC7R3QwUXREmxB3nNr3UclyTqrawifuIAvIBmKYMPI37mmSG1zfWb/HVVoGPc3
gJXc+016gwsjcOM8cGQMDN+PiQ1TxqE2/fsrbkzHnyyCbFp4pxerGy0bF8mVjAj0
eIGdPNom8fMWfEhR5cmWHDbWOhr5x37pgibGC0h3tqWst4kdcEzP55V9Ettd3fDe
WE04R+E2z51C9EScDpsveALwhQt3MyFOV9GJutt5t8OqT9R5LSkTYbA2poz02jtr
u7pmTZw0tUXfo0oP0NFkOgtGnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlrVBq2
ZawMkeK0bMMRW+xy/flGMB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz
OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX
MFdBYjZEMkxsSzFacERnak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGJzQ1z74N+Jf9hZeRy67pOXTwgjLPPGvF90x0CEOjazd9OYNmCll00qco0H7
MGOme7ezm0AsB4PsjqPs/s5AuBa0xGUJF+zWv9Qzlg7c0f+o5H6MQceZiMsxuT+I
+hwiFT2eWQZMN5UzLpnSKxxu+V/szIjD6W4jcaMZ3pmzdlpekj5hrEBJUikmauWJ
u6cwoepdReqahJvi1qcNhB/S9QWT9zi0gnNpwY0Oyduu/KMeuIwuwasNECZNI9GZ
mAY2LLXuWrJvedJ9emoVwEkEFU9ssGMmdKaKYWV0HD3O8szeT2vbWuwzW7gSXw49
og2gUVlvyWDDZEaQ3qTw50x0iA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:47:52 2026 by rpki-client