Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
File:                     Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json)
Hash identifier:          kqN0gaRpBf4j8OYw+1dsNf1iVfkV/Wu0RLv2EahMnmw=
Subject key identifier:   AB:5F:22:D4:E7:9B:AF:CA:92:5E:77:E7:C5:A1:9B:6D:4E:E0:E6:3F
Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
Certificate issuer:       /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Certificate serial:       0909
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
Manifest number:          15F9
Signing time:             Sun 26 Jul 2026 18:39:03 +0000
Manifest this update:     Sun 26 Jul 2026 18:39:03 +0000
Manifest next update:     Sun 02 Aug 2026 18:39:03 +0000
Files and hashes:         1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: LKS7ymk2vg6RaPx6Awfywu8/eUjlPOB91sNVhk0TMks=)
                          2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: uRyY95McYIcKyBbdYHA3Uc6sW+tgHG7zbgSz0a8bwDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 18:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
        Validity
            Not Before: Jul 26 18:39:03 2026 GMT
            Not After : Aug  2 18:39:03 2026 GMT
        Subject: CN=6a665447-6879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:fe:02:60:1b:af:9b:c0:39:24:a1:93:68:
                    ef:bb:9a:dd:f6:21:fa:89:7f:0b:36:bd:52:43:a4:
                    50:ed:cd:ee:68:f7:67:b5:96:e7:54:d4:44:6d:95:
                    17:5f:1e:6a:11:76:39:df:c2:af:50:ca:c5:c6:18:
                    21:4b:25:8f:64:41:7e:4d:fb:d0:51:59:16:c9:e3:
                    61:23:3c:04:4d:60:ce:fa:e1:be:da:13:bc:1b:87:
                    a6:3c:50:df:c7:4b:4e:4f:2b:8e:1f:6a:eb:3b:b2:
                    be:76:fb:5a:5b:c0:31:f4:74:2a:76:df:db:34:88:
                    3d:71:ac:5d:bb:a3:7c:79:d2:0d:55:e4:97:25:3a:
                    e7:98:9c:8e:6e:63:5c:c1:12:84:9f:03:9c:23:d0:
                    03:e0:0e:c4:75:6e:74:df:8d:96:34:a6:5f:c7:a3:
                    01:3c:1e:12:06:4d:a1:24:15:f7:86:ff:7b:16:cf:
                    c7:4f:35:a3:02:7b:d3:f5:f7:4d:30:50:3f:17:5a:
                    7e:e5:fb:ee:aa:65:28:96:b4:dc:a6:50:7e:7d:0b:
                    23:52:cd:f8:f7:67:7a:7c:be:55:8f:04:1f:64:27:
                    7c:ea:27:f7:88:25:dc:3a:5a:ed:1f:84:85:46:58:
                    30:7e:21:4c:c9:94:39:02:48:56:d8:8e:68:fc:07:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5F:22:D4:E7:9B:AF:CA:92:5E:77:E7:C5:A1:9B:6D:4E:E0:E6:3F
            X509v3 Authority Key Identifier:
                keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fd:d3:42:21:ad:9b:97:46:68:15:d8:f4:58:65:b9:e6:19:
         3b:d6:4e:4f:df:04:ac:8b:6d:8d:0f:54:08:e4:76:27:d8:d1:
         1b:df:78:c7:5c:a2:1a:49:e4:2c:85:15:90:91:74:f3:d3:53:
         f7:13:35:80:3a:35:f5:5e:11:ce:c4:76:1f:4c:a8:8a:66:2a:
         bf:1d:26:f2:4a:2f:bc:c2:63:d5:00:61:8a:4e:57:3e:54:75:
         61:f3:15:e6:38:2e:e8:5f:b5:23:1b:e8:aa:4f:00:70:3f:7f:
         10:7a:81:ee:36:d0:cb:e5:78:43:c9:d3:dd:4e:cf:62:81:39:
         98:81:c5:ce:ec:7f:60:78:bd:5b:b4:7f:ad:d7:bf:46:95:62:
         33:4b:22:49:bb:92:4c:cf:59:40:10:61:1a:01:3f:bf:61:b0:
         4b:d9:d9:57:6a:96:9f:5e:2f:69:8a:aa:12:e8:44:95:88:a8:
         17:b9:c4:6b:ca:03:83:0e:49:56:8e:ce:d9:1f:87:f5:52:b4:
         37:e5:78:96:09:64:cc:f2:b7:f2:f5:e6:33:aa:84:bd:4d:df:
         e9:2e:0f:6b:5c:a6:92:c8:f4:7a:9d:ad:3c:a0:92:22:33:ed:
         87:62:e6:55:11:e1:a1:f7:13:0b:1f:16:28:99:7d:f4:d9:2a:
         ac:b6:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:55 2026 by rpki-client