Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File:                     Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier:          HDuTgzdMNlaAfFQCLLDEzuBPhrMzayv9HBKOjhFtVsw=
Subject key identifier:   66:A7:9E:52:85:E8:9D:F5:55:F5:24:FE:39:0F:B7:03:21:35:00:60
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer:       /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial:       0D63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number:          0D5A
Signing time:             Tue 28 Jul 2026 18:09:45 +0000
Manifest this update:     Tue 28 Jul 2026 18:09:44 +0000
Manifest next update:     Tue 04 Aug 2026 18:09:44 +0000
Files and hashes:         1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: E+4/0+mn+llEsXULclK6K530FwEQjjlpEmZYqnpfaN8=)
                          2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: ASXvIGV5XQpb47JnlEJHWDEczJ8u/zVk1fKYxytG1Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
                          rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3427 (0xd63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
        Validity
            Not Before: Jul 28 18:09:44 2026 GMT
            Not After : Aug  4 18:09:44 2026 GMT
        Subject: CN=6a68f069-2276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:04:60:43:51:b8:f0:39:33:65:27:32:e6:d6:
                    22:50:d3:09:c5:2c:c3:82:8f:79:00:4b:98:05:25:
                    1b:cf:95:b5:27:9e:c5:7e:34:76:a5:0f:36:2a:24:
                    b4:fc:83:9e:2d:81:ba:17:31:69:bc:ff:39:aa:19:
                    dc:15:47:da:d0:d1:83:ef:df:b9:32:d2:5a:6c:db:
                    5a:6f:e5:78:48:38:04:89:66:99:05:0a:51:4e:01:
                    3a:d1:55:c5:32:28:e6:ac:6a:c3:ab:f2:bd:30:0b:
                    87:91:b8:e5:a7:31:2b:a1:c5:db:8d:4a:c6:bf:1f:
                    59:1b:29:1b:09:9f:82:c3:78:ee:fc:35:8b:0c:ea:
                    eb:91:81:20:92:d0:e2:de:48:cd:36:fd:1c:f4:94:
                    38:d6:2d:a2:9e:e3:d7:83:17:eb:38:f9:66:2c:06:
                    3b:ef:5c:fd:a8:a7:74:21:3c:48:9f:c0:6b:76:a4:
                    74:b2:68:91:b9:da:87:75:41:c9:c7:7a:ea:89:ce:
                    0e:ca:7b:b1:f5:f6:22:57:45:ac:ab:a1:ee:66:2f:
                    1f:41:a6:37:3e:04:db:ed:47:db:62:42:b7:09:1b:
                    d8:b1:34:f7:b5:3e:e8:62:40:64:35:3a:7f:b6:37:
                    c4:2b:e5:02:97:9f:85:b1:f1:8d:21:48:ea:de:46:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:9E:52:85:E8:9D:F5:55:F5:24:FE:39:0F:B7:03:21:35:00:60
            X509v3 Authority Key Identifier:
                keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:66:39:8d:ab:e4:c8:bd:28:2d:49:f1:e5:1d:62:a2:26:58:
         a2:2b:da:16:cc:40:9a:fc:4d:58:01:d4:71:8e:ba:0a:19:37:
         8b:e8:7b:60:97:fb:f0:96:04:b1:14:39:43:5c:d7:dc:a9:e3:
         72:6f:26:11:a5:74:97:e4:e3:33:ae:97:be:a0:a3:a2:55:63:
         87:66:2c:c7:2f:ce:8e:75:7d:06:2d:85:ed:c5:5e:c0:ad:35:
         3b:2f:4e:d2:8c:32:ac:4d:3a:d3:0d:e0:10:c1:9c:04:a5:64:
         a3:0f:92:47:4b:bc:7b:32:b9:1d:e1:87:60:2f:da:ee:d0:d9:
         6f:58:d8:ee:08:fa:56:12:ae:c2:30:26:eb:2d:0d:e0:ac:6f:
         6b:0b:9d:1c:37:a7:b1:ef:52:ae:9f:7a:22:dc:54:69:79:fb:
         05:d3:04:33:75:0e:c9:0f:e9:28:aa:e3:f2:8a:c2:b4:9f:c5:
         93:48:ca:f6:bb:c8:c5:3b:49:06:b6:bf:02:61:66:2c:d5:42:
         9d:ec:fe:f6:e8:1b:b5:d9:4b:65:43:d3:04:8f:1f:3f:28:cd:
         d5:59:fd:16:f1:4b:be:ed:25:2f:b0:b3:e6:34:d4:c0:64:1a:
         b3:0c:cb:aa:19:7b:ac:8f:23:ab:a6:ea:c6:0d:61:bc:19:ca:
         e0:a4:51:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw
RkM3RTcyNDcwHhcNMjYwNzI4MTgwOTQ0WhcNMjYwODA0MTgwOTQ0WjAYMRYwFAYD
VQQDEw02YTY4ZjA2OS0yMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7gRgQ1G48DkzZScy5tYiUNMJxSzDgo95AEuYBSUbz5W1J57FfjR2pQ82KiS0
/IOeLYG6FzFpvP85qhncFUfa0NGD79+5MtJabNtab+V4SDgEiWaZBQpRTgE60VXF
MijmrGrDq/K9MAuHkbjlpzErocXbjUrGvx9ZGykbCZ+Cw3ju/DWLDOrrkYEgktDi
3kjNNv0c9JQ41i2inuPXgxfrOPlmLAY771z9qKd0ITxIn8BrdqR0smiRudqHdUHJ
x3rqic4Oynux9fYiV0Wsq6HuZi8fQaY3PgTb7UfbYkK3CRvYsTT3tT7oYkBkNTp/
tjfEK+UCl5+FsfGNIUjq3kZNWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGannlKF
6J31VfUk/jkPtwMhNQBgMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5
NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4
bkZBaGtvc0R2SVVQeC1ja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQGY5javkyL0oLUnx5R1ioiZYoivaFsxAmvxNWAHUcY66Chk3i+h7YJf78JYE
sRQ5Q1zX3Knjcm8mEaV0l+TjM66XvqCjolVjh2Ysxy/OjnV9Bi2F7cVewK01Oy9O
0owyrE060w3gEMGcBKVkow+SR0u8ezK5HeGHYC/a7tDZb1jY7gj6VhKuwjAm6y0N
4KxvawudHDense9Srp96ItxUaXn7BdMEM3UOyQ/pKKrj8orCtJ/Fk0jK9rvIxTtJ
Bra/AmFmLNVCnez+9ugbtdlLZUPTBI8fPyjN1Vn9FvFLvu0lL7Cz5jTUwGQaswzL
qhl7rI8jq6bqxg1hvBnK4KRRaA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:32 2026 by rpki-client