Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
File:                     IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json)
Hash identifier:          fV9dmpn9MtyoZyo+DO9igDyaHruOgiuY7dfhaKPl8hU=
Subject key identifier:   BF:DB:C5:25:53:6E:9E:FC:25:B0:39:98:7B:F0:D2:93:27:05:5C:EC
Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9
Certificate issuer:       /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9
Certificate serial:       0C15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
Manifest number:          0C0B
Signing time:             Tue 28 Jul 2026 19:03:55 +0000
Manifest this update:     Tue 28 Jul 2026 19:03:54 +0000
Manifest next update:     Tue 04 Aug 2026 19:03:54 +0000
Files and hashes:         1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: 4zfJt3tjWvUnXOsoNXX+c053TiVrcVZ4XtgKil1rOuw=)
                          2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: g0hHwavKHkMKzW+fUc9yoxIkfZMTCDATCQiZVk5QwDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl
                          rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3093 (0xc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9
        Validity
            Not Before: Jul 28 19:03:54 2026 GMT
            Not After : Aug  4 19:03:54 2026 GMT
        Subject: CN=6a68fd1b-dd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:32:47:1c:bc:c4:81:ae:7c:6f:8b:e7:ca:
                    e0:a5:4c:08:5b:98:6e:58:ec:b7:72:c2:77:a2:9d:
                    b4:1c:70:c1:45:57:6c:08:bf:0d:b6:8c:bb:b9:ec:
                    2b:93:76:02:32:44:bb:75:36:b2:a3:65:09:4a:e9:
                    82:63:de:b2:2e:ae:94:86:35:5a:0e:ae:9c:a8:18:
                    8e:96:e7:b6:8d:58:1f:6d:10:3a:7c:e6:55:da:25:
                    5e:aa:44:18:dc:37:a2:73:37:df:2b:38:53:7d:60:
                    36:f2:a1:90:bb:9a:84:36:3b:89:db:90:4b:cf:10:
                    b2:47:d2:8e:d7:c0:09:ef:51:b4:2d:dd:e3:f4:b4:
                    be:03:23:7b:57:d7:ab:36:a4:90:36:b5:b4:08:99:
                    5c:ba:08:f7:cf:44:18:bc:4a:81:dd:47:7a:62:32:
                    89:bf:27:ff:87:e8:46:c7:70:ba:ff:b5:b8:90:03:
                    be:c7:65:31:89:37:9f:c9:7f:48:5a:0c:15:9a:f9:
                    97:d4:17:07:e6:71:4d:eb:9f:98:0a:db:a4:6b:aa:
                    f4:56:26:00:63:69:dc:50:d2:de:3b:35:d2:2d:a0:
                    14:01:71:e9:46:e3:8a:94:55:02:49:18:9c:31:f9:
                    97:e3:cd:ac:90:f9:fc:84:73:85:31:58:08:51:2e:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DB:C5:25:53:6E:9E:FC:25:B0:39:98:7B:F0:D2:93:27:05:5C:EC
            X509v3 Authority Key Identifier:
                keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:48:b3:a4:e8:22:1f:ce:50:87:72:2c:e4:41:f7:17:f7:c8:
         1d:b6:1a:fe:69:f0:5c:d4:ef:13:43:ff:5d:9b:85:09:34:b2:
         0c:e7:1f:4f:7b:ef:e2:c6:3a:07:cd:72:7a:cb:8a:ff:ea:e5:
         d8:07:d6:36:c5:6a:61:1c:62:05:bb:9d:6b:92:8c:d6:46:a7:
         1d:68:5d:95:47:b4:eb:23:a1:89:15:0f:97:3e:4f:ba:42:7d:
         db:da:3c:d3:1f:c6:ae:41:96:a1:61:e4:f0:51:8d:72:e8:ec:
         d6:b1:32:54:a5:a3:f8:a4:93:ad:db:a3:96:32:e6:e8:e1:dc:
         6a:7b:26:5e:a5:a1:c4:7b:ad:97:47:c9:04:1a:c9:15:f5:20:
         e6:52:84:79:d4:19:2e:ff:e6:a4:51:ee:bb:c5:95:a2:75:1f:
         d6:b8:04:67:7c:ac:c4:a2:e5:ac:4d:01:e4:3c:fc:98:f4:f5:
         fc:9c:8e:28:22:08:39:ce:21:ee:d7:d1:c6:76:cc:76:ea:59:
         89:7a:d3:c4:99:f0:53:e9:c4:3a:73:6c:09:a2:4d:88:e8:72:
         3c:24:73:02:f5:da:03:ee:30:4e:07:b1:96:fe:0b:09:bb:89:
         b4:e9:31:79:a0:f9:37:25:dc:bc:8f:18:49:c4:77:b7:9b:88:
         df:88:75:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3
NUM1MTg4QTkwHhcNMjYwNzI4MTkwMzU0WhcNMjYwODA0MTkwMzU0WjAYMRYwFAYD
VQQDEw02YTY4ZmQxYi1kZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwIQyRxy8xIGufG+L58rgpUwIW5huWOy3csJ3op20HHDBRVdsCL8Ntoy7uewr
k3YCMkS7dTayo2UJSumCY96yLq6UhjVaDq6cqBiOlue2jVgfbRA6fOZV2iVeqkQY
3DeiczffKzhTfWA28qGQu5qENjuJ25BLzxCyR9KO18AJ71G0Ld3j9LS+AyN7V9er
NqSQNrW0CJlcugj3z0QYvEqB3Ud6YjKJvyf/h+hGx3C6/7W4kAO+x2UxiTefyX9I
WgwVmvmX1BcH5nFN65+YCtuka6r0ViYAY2ncUNLeOzXSLaAUAXHpRuOKlFUCSRic
MfmX482skPn8hHOFMVgIUS6QNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/bxSVT
bp78JbA5mHvw0pMnBVzsMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC
MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP
dEdGVlpiQWhEVlIxeFJpS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX0izpOgiH85Qh3Is5EH3F/fIHbYa/mnwXNTvE0P/XZuFCTSyDOcfT3vv4sY6
B81yesuK/+rl2AfWNsVqYRxiBbuda5KM1kanHWhdlUe06yOhiRUPlz5PukJ929o8
0x/GrkGWoWHk8FGNcujs1rEyVKWj+KSTrdujljLm6OHcansmXqWhxHutl0fJBBrJ
FfUg5lKEedQZLv/mpFHuu8WVonUf1rgEZ3ysxKLlrE0B5Dz8mPT1/JyOKCIIOc4h
7tfRxnbMdupZiXrTxJnwU+nEOnNsCaJNiOhyPCRzAvXaA+4wTgexlv4LCbuJtOkx
eaD5NyXcvI8YScR3t5uI34h14A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:30 2026 by rpki-client