Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File:                     kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier:          q0eA+9J0qJobQTBjAlW+kTaYx9bFzJyAXBHSX2X1Tx0=
Subject key identifier:   BB:D2:42:8A:41:60:37:55:AE:A4:52:F1:26:CC:F4:D0:E4:FB:B7:51
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer:       /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number:          0160
Signing time:             Mon 27 Jul 2026 06:50:55 +0000
Manifest this update:     Mon 27 Jul 2026 06:50:55 +0000
Manifest next update:     Mon 03 Aug 2026 06:50:55 +0000
Files and hashes:         1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: HS3OPbbX1iO6hUJjdG6jvoqPV+Gza4Zj5hE5QSfgiMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
        Validity
            Not Before: Jul 27 06:50:55 2026 GMT
            Not After : Aug  3 06:50:55 2026 GMT
        Subject: CN=6a66ffcf-ca3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:7e:79:a4:fb:28:64:42:e7:97:ca:8f:e5:
                    83:66:6a:59:41:11:10:92:7d:74:ad:5b:40:05:fd:
                    c5:50:38:46:fe:83:5d:e6:98:fa:e2:2c:9e:e9:81:
                    67:83:33:4f:48:33:59:74:ae:23:0d:9b:e6:43:62:
                    5d:ca:8b:d9:6a:ba:2e:42:9d:c7:b1:e5:64:81:66:
                    de:9f:e3:8d:95:13:7b:dd:b1:00:68:60:5a:2b:dc:
                    2f:20:d1:ec:cc:d2:cf:84:c3:46:34:ed:c6:18:72:
                    64:67:6a:45:72:61:cb:09:ac:6b:f6:bd:15:7a:ce:
                    a6:a8:93:49:82:cb:5e:af:56:8c:d0:30:08:60:d2:
                    ad:71:a6:44:ff:d7:6c:60:ac:ca:33:ce:09:ff:fc:
                    9e:71:ac:e3:e6:05:20:26:1e:85:8c:27:bf:77:be:
                    aa:9a:19:62:50:31:99:59:28:e7:c0:f4:74:23:d2:
                    be:68:0e:2c:c0:5d:e0:4f:1b:ab:a6:0c:4e:96:ab:
                    ca:af:30:ed:2f:8f:8e:86:50:9b:f5:e2:27:0a:9e:
                    67:07:d9:6f:05:8b:74:0d:2a:47:63:b3:48:cd:e3:
                    04:cb:73:93:6a:c9:93:49:c8:03:61:38:30:cc:9e:
                    0f:8c:e7:b6:0c:15:40:a7:d4:89:24:f3:6c:02:68:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D2:42:8A:41:60:37:55:AE:A4:52:F1:26:CC:F4:D0:E4:FB:B7:51
            X509v3 Authority Key Identifier:
                keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:73:0c:57:34:a7:e4:6c:a1:08:30:4b:f8:61:fe:1c:fe:f0:
         f4:b5:f5:ea:4e:87:34:54:50:ea:3c:7b:94:47:82:f6:29:aa:
         18:2d:8e:58:ba:d7:18:94:47:55:b2:2d:bd:c9:1a:7c:4b:2f:
         43:1f:a7:3c:3f:ec:2f:bf:07:8a:c2:d1:c1:9f:7b:d5:dc:e6:
         16:d4:0e:3c:1d:90:87:a2:78:28:98:bc:6b:cd:48:d3:cb:35:
         19:ba:43:e0:50:40:76:2b:ef:ac:93:33:22:ee:da:aa:91:e1:
         cf:fa:c2:81:ac:cf:b1:55:25:29:92:76:f4:5a:a9:b3:7f:66:
         77:5d:97:d6:cb:2d:0b:32:bf:05:2b:be:70:55:f6:fb:6b:de:
         73:b3:7c:c4:ba:74:73:d7:d9:08:d6:77:88:f0:6b:2a:59:be:
         9f:aa:df:6f:1a:a4:2d:9a:9a:3a:a0:2a:74:64:6a:20:ac:03:
         68:bd:a6:9a:29:ec:fa:74:b4:fd:dc:18:8b:38:f9:c7:a9:08:
         5a:10:ad:e6:57:e4:59:fb:f1:d9:ed:f0:86:89:49:bb:31:a5:
         48:eb:0a:1a:9e:0d:6b:f3:27:e2:ac:e0:23:2a:65:48:0c:14:
         70:41:0a:8b:a3:15:c1:f7:0d:d9:29:43:2b:32:c8:43:77:0d:
         87:b3:08:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU4MDYxMTAvBgNVBAUTKDkxNDZCNzgyRUI4MjQ2N0IxOUQ4QjQxRDFDQzQwRUJG
MDQ4OTkwNjYwHhcNMjYwNzI3MDY1MDU1WhcNMjYwODAzMDY1MDU1WjAYMRYwFAYD
VQQDEw02YTY2ZmZjZi1jYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1N+eaT7KGRC55fKj+WDZmpZQREQkn10rVtABf3FUDhG/oNd5pj64iye6YFn
gzNPSDNZdK4jDZvmQ2JdyovZarouQp3HseVkgWben+ONlRN73bEAaGBaK9wvINHs
zNLPhMNGNO3GGHJkZ2pFcmHLCaxr9r0Ves6mqJNJgster1aM0DAIYNKtcaZE/9ds
YKzKM84J//yecazj5gUgJh6FjCe/d76qmhliUDGZWSjnwPR0I9K+aA4swF3gTxur
pgxOlqvKrzDtL4+OhlCb9eInCp5nB9lvBYt0DSpHY7NIzeMEy3OTasmTScgDYTgw
zJ4PjOe2DBVAp9SJJPNsAmjNVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvSQopB
YDdVrqRS8SbM9NDk+7dRMB8GA1UdIwQYMBaAFJFGt4LrgkZ7Gdi0HRzEDr8EiZBm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9EMEM1RjRFMjZF
OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Juc1oyTFFkSE1RT3Z3U0pr
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTgwNi9EMEM1RjRFMjZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Ju
c1oyTFFkSE1RT3Z3U0prR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgXMMVzSn5GyhCDBL+GH+HP7w9LX16k6HNFRQ6jx7lEeC9imqGC2OWLrXGJRH
VbItvckafEsvQx+nPD/sL78HisLRwZ971dzmFtQOPB2Qh6J4KJi8a81I08s1GbpD
4FBAdivvrJMzIu7aqpHhz/rCgazPsVUlKZJ29Fqps39md12X1sstCzK/BSu+cFX2
+2vec7N8xLp0c9fZCNZ3iPBrKlm+n6rfbxqkLZqaOqAqdGRqIKwDaL2mmins+nS0
/dwYizj5x6kIWhCt5lfkWfvx2e3wholJuzGlSOsKGp4Na/Mn4qzgIyplSAwUcEEK
i6MVwfcN2SlDKzLIQ3cNh7MI+w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:46 2026 by rpki-client