Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
File:                     rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json)
Hash identifier:          8lzqdzGu7m1ElDXKIYFhH6agvd39L/7A4XoqEKgnqK4=
Subject key identifier:   BA:EF:A2:59:09:62:FF:47:E3:D0:D6:6C:B2:F7:54:97:A4:4B:BA:C8
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Certificate issuer:       /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial:       0739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
Manifest number:          072C
Signing time:             Sun 26 Jul 2026 22:43:18 +0000
Manifest this update:     Sun 26 Jul 2026 22:43:17 +0000
Manifest next update:     Sun 02 Aug 2026 22:43:17 +0000
Files and hashes:         1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: 4HalZklBC4uO9N5AH+RK7Ic/6F/ReIHwlTcKsbQw8WY=)
                          2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: yhbJFifkA6qTdyLv2HsT8tIMPtF/KKmNSVFn1brjPAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
                          rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Validity
            Not Before: Jul 26 22:43:17 2026 GMT
            Not After : Aug  2 22:43:17 2026 GMT
        Subject: CN=6a668d86-f05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:85:8f:25:9a:77:7d:90:ad:31:bd:1b:c0:
                    a0:91:8d:2d:95:e2:4c:42:6c:fe:2e:5f:3d:be:2f:
                    85:5a:24:12:8f:d8:b4:4e:aa:1e:90:78:ac:81:4b:
                    ba:b4:c2:35:0a:a1:e2:0b:ed:1b:81:bd:51:08:06:
                    f5:de:c0:d1:f9:15:29:bf:71:52:2f:b2:04:96:36:
                    ac:89:67:75:f2:1e:ef:66:a8:6d:ce:56:e4:14:b3:
                    4e:db:e5:88:77:62:ca:b5:34:11:05:70:21:9c:e5:
                    fa:da:fb:29:35:ba:c5:66:95:cf:28:be:e3:fd:d4:
                    b8:a5:0d:d8:f2:f6:ac:e3:52:31:03:ae:63:3c:25:
                    fc:57:85:e4:b0:58:c6:ed:81:59:5e:5b:79:82:d9:
                    fd:c5:0a:e2:69:c0:8c:5d:1b:b3:a4:20:e9:b3:0c:
                    bf:56:4e:99:f0:01:f4:e9:9f:38:c5:63:65:0d:84:
                    97:35:b8:cf:8f:57:fb:ed:a6:ea:52:70:d0:49:02:
                    72:f2:0e:8a:47:c1:04:a7:22:2c:36:ce:76:a9:d3:
                    68:46:1f:3a:0e:ad:94:f8:20:25:99:d5:dc:fa:69:
                    5d:b6:1f:88:e1:c7:13:40:67:bc:ce:4f:3e:5a:ec:
                    6f:8d:84:c8:63:66:c2:cd:94:85:a9:1d:73:93:e7:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:A2:59:09:62:FF:47:E3:D0:D6:6C:B2:F7:54:97:A4:4B:BA:C8
            X509v3 Authority Key Identifier:
                keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:97:d0:58:f1:bd:95:13:c4:cb:34:15:2a:28:a0:65:fc:
         0c:1d:94:ab:ab:be:54:a0:45:fc:cd:9c:c0:dc:1c:e8:0f:d9:
         5c:96:cb:78:66:b6:12:58:c2:82:3c:cb:a7:50:a4:00:79:b9:
         64:f4:a0:b0:84:62:0b:2a:5f:62:b9:a9:c4:d2:83:66:07:c3:
         8a:2d:a1:24:f7:49:58:e7:97:cc:3b:00:81:1c:1a:1b:a3:6c:
         f7:b7:e1:1d:28:3f:b7:46:e4:4b:ad:64:8b:8c:8b:d4:53:f8:
         9c:b0:8e:17:ff:80:36:74:3c:5c:df:87:04:42:f5:3a:0b:68:
         7a:dc:ca:97:08:04:c4:d8:33:e4:8c:7e:86:b5:62:79:87:ef:
         61:36:a2:d6:18:12:14:c5:f3:5c:92:8a:64:ef:66:63:de:9f:
         c5:1d:6d:f6:de:fe:58:e5:be:be:13:f3:c1:8e:84:3e:0d:0e:
         f8:77:1a:9e:f2:04:20:19:1d:eb:1b:d6:0c:5a:e1:f0:8d:30:
         cc:65:48:3a:0a:14:8c:f9:20:ab:49:66:1c:3a:bf:ac:6e:05:
         bd:f4:06:2d:1b:aa:f3:14:91:f5:d8:bb:ab:99:5e:1d:d4:d4:
         e2:d4:e0:21:44:fe:93:c6:59:04:36:a8:9e:ed:c0:14:4f:ee:
         e4:ff:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:54 2026 by rpki-client