Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
File:                     avg9FyUOFuw4duVnrj4dq4MlHAY.mft (raw, json)
Hash identifier:          Di15DnBNbrkyTjGIMoqp7CxatheV8gaKeoJti/Ip8fA=
Subject key identifier:   AB:C4:E7:6A:C6:06:29:FA:CB:16:77:8C:AE:0C:94:35:15:3D:2C:42
Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
Certificate issuer:       /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
Manifest number:          0110
Signing time:             Mon 27 Jul 2026 08:04:00 +0000
Manifest this update:     Mon 27 Jul 2026 08:03:59 +0000
Manifest next update:     Mon 03 Aug 2026 08:03:59 +0000
Files and hashes:         1: avg9FyUOFuw4duVnrj4dq4MlHAY.crl (hash: T+wQznNKotQxEExIGFF7jXbuai7CPx2pA3LPjSeeuPM=)
                          2: DC0082F6EE1F11EF9191EE31C4F9AE02.roa (hash: RfHLlcRz+bkkiNXL85ejvAqK1QMc4Bz6mAhB2a1qIb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl
                          rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B02, serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
        Validity
            Not Before: Jul 27 08:03:59 2026 GMT
            Not After : Aug  3 08:03:59 2026 GMT
        Subject: CN=6a6710f0-f751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:b9:4e:30:3f:22:62:07:ba:f4:f7:59:66:
                    b0:dd:85:55:45:c0:99:09:1d:e2:5a:18:33:be:fb:
                    0f:3e:cf:34:6e:19:f9:b9:7e:24:ef:fa:70:1c:a1:
                    95:f1:bd:5a:a5:13:a4:aa:77:2b:10:63:b2:e2:7c:
                    b7:ff:15:4b:38:2c:24:32:fb:94:80:16:42:b8:48:
                    d0:dc:72:cb:bd:86:b8:e8:27:fd:b2:61:b2:50:01:
                    58:be:5e:ff:d5:bf:44:f1:bc:9a:93:97:21:44:9e:
                    13:55:8e:67:86:47:79:7a:68:35:8d:f5:12:b0:96:
                    72:74:d8:cb:6b:27:77:96:8c:1f:d1:fe:9f:24:24:
                    53:7c:9c:47:7a:0a:1b:b7:3e:52:0e:17:e5:25:e7:
                    c3:98:eb:33:7e:8a:9c:da:3c:23:0d:04:ea:d0:39:
                    1e:b9:af:05:ff:61:8a:57:f5:91:7e:51:e7:5b:4b:
                    2e:39:59:51:d6:a3:8b:bf:27:f7:7e:3e:c5:30:b5:
                    48:fc:11:2d:8e:b6:cb:19:ae:32:6a:66:e2:ba:ba:
                    1e:07:c9:15:0d:92:66:ca:82:0b:e1:b7:69:1f:88:
                    3e:b8:5e:03:6f:d9:d3:0d:00:87:73:06:22:50:c8:
                    0f:83:e1:42:e4:65:2c:c1:90:0f:c5:0f:dc:3c:d4:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C4:E7:6A:C6:06:29:FA:CB:16:77:8C:AE:0C:94:35:15:3D:2C:42
            X509v3 Authority Key Identifier:
                keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:46:fb:05:54:c2:a3:fc:10:65:5a:41:16:2b:29:13:c4:
         45:55:6d:09:ec:6b:47:94:73:71:0a:cc:cd:a6:7b:27:eb:9f:
         ff:19:a1:5f:4e:fa:9a:25:c5:f2:d4:c2:f0:64:88:cf:08:6e:
         4e:29:c9:a4:3e:d6:30:87:fa:25:a1:df:70:92:f8:95:ee:42:
         0d:f2:25:20:64:47:15:bb:15:62:e5:d6:46:b8:da:52:b0:81:
         d1:d1:99:4f:de:7e:96:7b:3b:fb:a4:c6:44:bc:dc:9f:56:c2:
         0a:ff:63:88:7c:2d:3b:6b:47:1c:f8:19:f6:1b:c3:69:30:98:
         00:54:f9:67:c5:f8:1c:a3:47:14:63:9b:a0:e3:bd:25:91:9b:
         3b:f4:de:3d:ba:0d:ff:c7:1c:e5:f1:60:2c:2e:29:27:72:c6:
         27:88:3f:bf:cf:01:54:94:23:85:fe:cc:78:3f:4d:24:d9:84:
         73:f5:e1:5e:9a:e3:bd:13:da:d9:ff:68:a4:87:98:52:ef:0b:
         0b:13:27:09:51:07:32:1e:8d:d2:fb:73:21:b7:53:11:4f:17:
         90:03:65:a3:76:d4:1a:16:e0:c5:d6:4d:e6:c4:3b:89:ad:99:
         27:23:f0:ef:5d:8e:26:76:e8:75:15:e6:15:76:5c:ac:1f:f9:
         c1:11:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:02 2026 by rpki-client