Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
File:                     a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json)
Hash identifier:          bd2vX9xZeNcUdV3r2V6A8OxjFdCmGInBjXoMSEakL6U=
Subject key identifier:   64:22:B0:AE:BD:BF:43:A3:BB:9A:49:E6:96:62:DE:8A:A6:5F:43:7C
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Certificate issuer:       /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
Manifest number:          027A
Signing time:             Tue 28 Jul 2026 11:29:49 +0000
Manifest this update:     Tue 28 Jul 2026 11:29:49 +0000
Manifest next update:     Tue 04 Aug 2026 11:29:49 +0000
Files and hashes:         1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: xOa7VT4xC39lc5WO+TDS5vDoSIM9Nq0TJAb+SM9jsQ4=)
                          2: A21C38148A7711F1AB794FA34311F970.roa (hash: MgmaY4WXVm0HStO9rP6clArnD5jB26XfguusZC63Eq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 11:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
        Validity
            Not Before: Jul 28 11:29:49 2026 GMT
            Not After : Aug  4 11:29:49 2026 GMT
        Subject: CN=6a6892ad-632f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:b7:09:6a:c2:18:e1:3b:1a:c8:96:94:58:
                    0a:44:d6:21:d2:9a:54:35:5f:a7:b1:59:11:0c:a3:
                    6b:00:c6:eb:6b:bf:c4:c9:d8:cb:c8:e2:81:b7:a6:
                    f1:b6:e5:27:60:42:91:29:54:47:cb:7b:33:a4:d2:
                    b8:bd:34:2d:a8:6f:84:c5:f1:5c:1d:71:a6:6e:ad:
                    0b:69:59:a0:61:8e:de:14:1b:c1:2c:15:b9:d1:f3:
                    55:f2:84:07:b9:76:58:5f:f8:13:37:e3:fe:c1:00:
                    59:fa:67:90:da:0a:b2:bc:9a:98:c5:92:fa:8b:0b:
                    d9:6a:6b:81:a7:95:c3:19:23:e1:1c:a5:20:83:e0:
                    54:07:b3:cb:e9:d2:35:e7:c5:44:bf:5e:1a:16:12:
                    4a:b4:d4:b7:2f:4d:fe:9e:be:f0:4d:67:4d:c3:e0:
                    7c:5a:ee:02:7c:b7:8c:61:a8:4e:8a:b4:a7:a0:87:
                    0e:d7:8e:93:44:c9:5f:50:29:c9:48:fb:3a:87:d1:
                    d4:cd:81:0f:98:90:44:ca:21:24:b0:0b:47:d5:f7:
                    b3:45:67:9b:ab:4d:42:91:f3:bf:82:76:fe:81:15:
                    c1:df:46:2e:c9:49:d6:11:39:6c:e9:f5:95:d1:85:
                    2d:7b:56:42:ab:00:16:d0:1d:26:96:90:92:53:f6:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:22:B0:AE:BD:BF:43:A3:BB:9A:49:E6:96:62:DE:8A:A6:5F:43:7C
            X509v3 Authority Key Identifier:
                keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:ae:6e:23:6c:b6:4c:6f:90:cf:1f:0e:cc:68:c7:f4:c4:
         de:14:08:0b:dd:c8:24:cd:53:05:fd:ca:de:b4:37:7a:30:d8:
         15:33:77:e8:fb:9e:b5:3f:e5:70:98:90:50:1f:d0:ef:2e:ac:
         8b:73:e4:1a:b2:16:bc:b7:08:2d:4f:23:ac:2e:d8:0a:a5:88:
         f8:7d:c5:fe:fc:a7:09:ee:9f:fa:41:28:73:3b:e5:46:82:d1:
         7e:25:21:e1:7a:d4:16:fe:f8:f0:d8:17:f6:24:54:36:a3:c2:
         13:06:89:d8:17:b7:59:5b:8c:96:88:14:e4:f8:36:c3:c7:43:
         53:e0:69:a8:f0:51:72:88:a3:63:97:58:e1:03:12:2a:30:0f:
         f5:5a:04:1d:1b:8c:d1:97:d2:4a:89:98:cb:33:fd:27:5b:92:
         57:e9:e2:b4:f3:e3:de:ad:ad:31:c6:7a:18:5b:d0:ba:9b:45:
         ad:c5:c0:03:61:25:35:61:86:88:0d:f3:30:60:b1:6a:72:3e:
         9e:97:14:53:59:fe:5f:88:36:b8:fe:cc:94:cb:23:d7:c3:d5:
         64:98:52:49:46:06:c2:79:cb:d4:14:37:78:98:98:72:b5:b9:
         b3:59:e9:53:1b:6e:f0:b7:69:08:4a:29:37:3c:33:db:ef:f8:
         05:2b:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:01:53 2026 by rpki-client