Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File:                     u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier:          Hn61UvgeQ+P6C+yjAF///lFamQ8NZPiOuGKY567/iio=
Subject key identifier:   0E:7A:77:63:5E:F7:01:52:3E:EE:3E:76:1F:A9:D1:2C:EE:FA:5D:DB
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer:       /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial:       0CF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number:          0CE9
Signing time:             Tue 28 Jul 2026 18:33:21 +0000
Manifest this update:     Tue 28 Jul 2026 18:33:20 +0000
Manifest next update:     Tue 04 Aug 2026 18:33:20 +0000
Files and hashes:         1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: Ue8EWxGYcxtQ+9vQxJKe6uk4lahAJpjI+Bui/TWhVmY=)
                          2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: 1c7oqXTwOjBxpWnURCwd9ROwsARCXBKMI1YgV6KP1z4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3317 (0xcf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
        Validity
            Not Before: Jul 28 18:33:20 2026 GMT
            Not After : Aug  4 18:33:20 2026 GMT
        Subject: CN=6a68f5f1-edfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:df:53:3f:0d:89:b0:44:42:2b:08:ae:e8:
                    db:88:25:47:3d:1f:fb:80:96:89:fb:6d:95:e9:74:
                    03:cc:c5:77:c9:c9:00:04:91:3e:59:5f:b5:8c:8e:
                    56:a3:08:23:96:23:c2:8f:18:1a:9c:90:f2:50:24:
                    ef:e5:5c:91:43:e3:3e:f3:ef:36:8a:28:38:d5:da:
                    01:f4:19:0f:71:0f:57:40:96:bc:eb:fb:58:d2:8f:
                    0f:52:63:66:56:91:30:b4:e2:26:87:aa:ef:55:81:
                    c0:2e:04:54:ff:6e:a5:38:8e:2a:f2:f6:02:db:07:
                    05:ca:8e:f6:c9:f7:86:92:8f:97:91:72:67:04:2a:
                    f8:d3:13:12:21:bd:12:0a:eb:29:57:7f:66:66:24:
                    96:a3:7e:6b:31:a0:71:b7:5b:b9:fd:c5:67:89:0a:
                    c1:e9:fa:99:e7:13:41:84:42:90:97:1a:c3:83:bb:
                    b4:51:c2:fd:6a:66:02:2e:96:6a:97:f6:19:df:02:
                    f9:a6:2a:56:64:5d:59:94:01:d6:59:85:33:96:12:
                    ff:d6:ad:1b:d2:04:12:6e:3a:31:9c:86:26:e4:be:
                    3c:f6:b4:f9:42:d9:a8:cc:46:b1:4c:76:39:b0:5d:
                    56:2b:b6:bd:dd:ac:4d:79:13:48:18:4b:1a:f5:ae:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7A:77:63:5E:F7:01:52:3E:EE:3E:76:1F:A9:D1:2C:EE:FA:5D:DB
            X509v3 Authority Key Identifier:
                keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f3:21:56:de:65:ea:d9:ad:3c:ff:34:d6:e0:95:d6:f4:8a:
         b0:f4:46:50:50:ba:93:1b:ea:eb:1e:1d:25:49:5e:da:7a:79:
         96:45:01:22:25:3c:28:08:5e:ea:f6:e6:a3:3b:dc:03:2e:31:
         cf:37:af:7f:76:72:40:52:d6:17:42:db:f7:b6:32:c1:31:1b:
         f0:fb:ea:16:4c:27:e7:ab:bb:b0:69:10:64:df:dd:3e:c4:b9:
         af:39:ed:83:14:fb:58:6a:d0:89:99:eb:91:de:c1:60:20:8a:
         3e:98:08:a2:3b:5f:6a:29:65:27:e5:89:6f:b5:40:2e:32:a6:
         33:89:ae:cc:77:39:41:42:cc:34:a4:f3:c7:9b:a1:ad:30:48:
         e5:c2:fa:c4:16:e7:d4:7f:2c:2f:0d:79:ce:f4:5d:ba:8f:c7:
         9b:0b:39:76:82:40:4b:85:13:26:ac:19:0b:3a:23:a2:f0:54:
         1b:3d:62:42:66:e3:c6:f2:e7:9a:87:ac:e7:d1:88:f7:d1:f8:
         e3:0d:eb:de:a3:45:3e:5d:22:56:42:9e:7f:6a:82:11:51:da:
         eb:98:c9:ab:f9:df:16:6f:e3:d6:0b:c6:93:cb:25:7f:27:4f:
         60:8f:e4:3e:35:60:6b:4d:0d:e4:d0:56:78:0e:e5:8b:b4:80:
         0a:42:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:01 2026 by rpki-client