Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
File:                     mvY3DDqaguLsqIJzqLjnngKCVPk.mft (raw, json)
Hash identifier:          pdJN8pZRgzuv1vcUD72KLeHPLSbn8q6vKVXeAn6xaBM=
Subject key identifier:   B2:77:1E:64:35:C6:9F:0D:60:7C:00:DB:1E:E5:98:4E:B1:CC:FB:6F
Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
Certificate issuer:       /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
Manifest number:          28
Signing time:             Mon 27 Jul 2026 11:11:56 +0000
Manifest this update:     Mon 27 Jul 2026 11:11:55 +0000
Manifest next update:     Mon 03 Aug 2026 11:11:55 +0000
Files and hashes:         1: mvY3DDqaguLsqIJzqLjnngKCVPk.crl (hash: welkzCx39IWTXdpuv2DqA8G/RQJw5r1vtKqTWSOGed0=)
                          2: 0642A9644FB211F18BDA0000A1833773.roa (hash: ba3MiHCQ/9RzbEMhAGdSRjmEpdohirZy6IJ6tNd/uKM=)
                          3: D8D132C452E111F18BE0BBBEAE833773.roa (hash: SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=)
                          4: HOBn4xDPKZiL8Isjj99ROKIwrsQ.asa (hash: zAFqND4LetLfBzzSmwzchzjXRNY+jMjvxeB5FZiT9ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
                          rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
        Validity
            Not Before: Jul 27 11:11:55 2026 GMT
            Not After : Aug  3 11:11:55 2026 GMT
        Subject: CN=6a673cfc-49b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:9b:59:01:29:52:f6:96:40:a1:ee:aa:0b:
                    cb:f4:00:e1:7e:24:24:61:e1:a3:de:5b:27:15:de:
                    e9:d9:a8:c7:4e:a8:ce:f0:f0:39:0c:51:03:6d:b5:
                    e6:0d:1c:2d:78:2e:71:1e:55:c2:57:26:d7:4d:be:
                    6d:20:2e:29:1b:e3:58:f0:5f:c1:89:3b:35:d5:3b:
                    55:19:ca:82:33:4f:d1:4b:3e:ac:e5:e2:8e:8f:dd:
                    47:58:9b:c5:82:00:f7:fc:80:43:c3:f9:e8:31:e0:
                    53:76:20:d4:86:d1:cd:70:15:23:08:fd:6f:7e:73:
                    56:92:d9:f8:8b:ca:79:42:84:fb:b6:70:c5:66:86:
                    b3:7f:c5:3c:be:fc:42:7c:1b:c2:06:83:78:84:80:
                    b6:49:f8:66:9d:8f:0f:16:c6:91:44:c5:2f:de:83:
                    b9:50:7d:e8:54:f8:18:9c:a4:0a:b4:67:8c:bb:19:
                    cf:bc:97:aa:63:f5:0c:84:4c:82:79:6c:f8:f0:e0:
                    35:ad:8a:46:72:55:dd:df:f1:ec:d3:46:99:85:66:
                    b0:ce:b2:44:2e:1f:81:2f:f9:1b:e7:da:a0:5c:e6:
                    4f:94:8b:c7:7d:87:7d:de:8a:05:ad:d5:6f:cb:d6:
                    0d:5a:84:0e:36:ee:28:96:21:d9:47:8e:34:59:88:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:77:1E:64:35:C6:9F:0D:60:7C:00:DB:1E:E5:98:4E:B1:CC:FB:6F
            X509v3 Authority Key Identifier:
                keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:2a:94:61:96:1e:52:ea:bf:8a:68:c9:18:b9:7d:7d:c5:3b:
         de:9c:9f:37:a1:23:58:fc:eb:cc:22:66:d0:7f:63:72:28:4b:
         d8:ae:9b:68:52:cb:79:56:b1:cc:61:d6:ab:b0:49:fe:eb:2b:
         2c:a0:84:56:14:4b:8c:76:56:7c:a3:f7:80:b8:0f:74:7c:77:
         fe:18:09:74:e6:8f:8d:05:1d:0f:27:81:87:e2:1e:7e:e7:5f:
         31:92:f5:df:ef:30:c7:72:92:c0:8f:1b:d5:47:1b:09:d8:2e:
         3b:e5:3e:1a:9d:2f:2f:6f:e1:5d:53:19:3d:ed:af:17:5c:7e:
         0a:c7:08:24:24:97:aa:03:40:d6:e8:fe:d1:b3:fd:1c:6b:5a:
         d0:17:f0:f2:2e:8c:2c:15:22:09:5d:07:0d:21:01:f6:ed:d0:
         4b:2d:95:2d:ef:89:d3:99:d5:c9:7b:38:a7:3e:fa:c4:6f:de:
         45:05:ce:7b:dc:00:fd:7b:ce:cd:ab:58:50:66:18:7f:ff:c7:
         7e:1e:b0:55:ad:e5:bb:fc:08:08:17:78:c7:d3:33:ed:36:b4:
         b8:4f:92:c8:19:02:e3:cc:d7:0e:b4:4a:8a:8e:0f:3d:53:83:
         c5:95:ad:86:9d:35:30:58:2a:17:0c:82:c3:dc:d5:82:16:7b:
         aa:66:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:48 2026 by rpki-client