Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
File:                     P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft (raw, json)
Hash identifier:          eSEDaYvPGOTNn3ca7ByymGmiDdBCqwyBbnnr6O8drs0=
Subject key identifier:   25:FA:12:61:8F:59:06:53:7C:2A:11:5B:37:B7:58:4C:72:93:74:C2
Authority key identifier: 3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80
Certificate issuer:       /CN=A916A2FB/serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
Manifest number:          D5
Signing time:             Mon 27 Jul 2026 08:49:09 +0000
Manifest this update:     Mon 27 Jul 2026 08:49:09 +0000
Manifest next update:     Mon 03 Aug 2026 08:49:09 +0000
Files and hashes:         1: P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl (hash: 7/YJPVjYhjOCQq8mJpO/41c5lT4NonaNDvwCoo/DLHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl
                          rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A2FB, serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
        Validity
            Not Before: Jul 27 08:49:09 2026 GMT
            Not After : Aug  3 08:49:09 2026 GMT
        Subject: CN=6a671b85-0a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:8f:ac:14:c5:ec:a2:16:e6:40:c8:89:f6:
                    97:5d:de:c4:39:c4:ed:7a:38:05:73:63:a7:d3:52:
                    0a:b4:2a:a9:54:4b:5b:4d:dd:78:48:97:4e:65:a9:
                    04:62:10:ca:cf:d5:ba:e2:e1:d4:2e:a1:31:5e:34:
                    89:ff:e8:50:38:61:73:77:96:a5:a6:55:d2:12:3f:
                    d2:31:be:6a:ce:c3:f6:13:3d:a1:ee:f3:39:fc:5b:
                    48:d9:c7:6f:12:4e:72:85:97:ca:45:d8:3f:5a:fc:
                    94:15:14:f5:9b:92:04:1e:ee:90:c4:a9:41:ed:d6:
                    bb:61:84:18:46:e5:45:f3:fd:d0:ab:22:63:5d:53:
                    95:25:6f:aa:51:43:5f:64:a5:1b:a1:9a:94:21:8b:
                    4b:2a:c3:03:ff:d2:bc:ce:fd:5a:31:ff:dd:e9:44:
                    00:54:d5:d6:3f:4b:97:bb:3a:48:11:27:0c:e3:70:
                    50:a1:e7:3f:54:c6:e8:35:5b:a2:aa:17:52:74:85:
                    92:5b:63:cb:86:9d:6d:54:4c:d9:02:ce:e7:c9:2e:
                    4a:cd:f2:5f:54:3c:07:6e:73:fa:b0:0d:e7:b5:82:
                    36:4e:1c:b3:b3:1a:5e:6e:63:f1:92:cd:70:55:f4:
                    a3:0a:30:3c:cd:3b:fc:10:92:de:a1:64:6c:6d:25:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FA:12:61:8F:59:06:53:7C:2A:11:5B:37:B7:58:4C:72:93:74:C2
            X509v3 Authority Key Identifier:
                keyid:3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2b:f5:bd:5a:a9:0b:5d:0d:24:23:d3:1d:c4:c1:29:08:3d:
         ed:57:e2:39:c8:25:50:00:36:7f:eb:8c:73:85:1c:b9:36:ef:
         fb:5e:eb:55:ce:a4:01:06:d3:bd:e1:d7:86:12:00:74:02:71:
         47:2d:85:30:97:5b:b9:79:12:d5:e1:d2:26:32:33:79:12:e7:
         ef:6d:43:71:62:eb:1f:75:71:be:b1:73:6c:b9:34:4a:b6:8d:
         55:f3:4e:27:47:f1:fd:fa:7d:19:28:0d:de:61:87:9b:e2:da:
         02:b3:57:e4:22:10:80:7b:cc:42:f5:27:16:3d:b4:53:9c:cd:
         03:02:7c:b9:93:d8:fc:60:cc:54:b3:87:15:a8:8f:7f:aa:0d:
         cf:63:a9:a2:84:ba:3b:38:e0:81:72:23:24:95:83:44:4d:a1:
         96:a1:82:4c:73:e8:e1:36:38:57:7b:d0:cb:b2:ea:54:2c:83:
         77:0d:3e:18:9d:81:f2:24:8c:d8:69:19:a7:cd:58:64:47:5f:
         96:fe:e5:c2:4e:6b:35:64:3e:d0:25:2c:95:2b:61:d3:35:f5:
         d1:e7:66:25:28:98:f8:3a:cb:ec:b7:b1:93:62:2f:46:c0:2c:
         1a:98:2a:53:43:5e:5c:b7:53:5e:fe:07:b2:40:a6:43:71:2b:
         30:92:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:50 2026 by rpki-client