Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
File:                     IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json)
Hash identifier:          B4dR7bQkmW7Ke6QZ4qSt4xvjrzwrE6XUO0YZcnRoDE4=
Subject key identifier:   73:FB:2E:A2:EE:88:F0:58:3B:E0:20:86:D4:7A:24:93:46:09:FF:D7
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Certificate issuer:       /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial:       0C39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
Manifest number:          0C12
Signing time:             Tue 28 Jul 2026 19:39:23 +0000
Manifest this update:     Tue 28 Jul 2026 19:39:22 +0000
Manifest next update:     Tue 04 Aug 2026 19:39:22 +0000
Files and hashes:         1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: P9mJbwAxEkHKYizrWObxmHftcrIbFnQss5ELv+tANyY=)
                          2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: EolASXb1KltLVGZYGCtQ/6/WNNv9j4lXlevPtfmwzdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
                          rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
        Validity
            Not Before: Jul 28 19:39:22 2026 GMT
            Not After : Aug  4 19:39:22 2026 GMT
        Subject: CN=6a69056b-a790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:76:99:a9:94:f9:7d:79:f8:be:dd:b3:4e:e6:
                    e4:a5:74:08:ec:13:1d:e2:0d:80:e4:90:b6:47:86:
                    4b:a2:3d:bb:3a:d2:11:47:e2:84:e8:a8:bd:b5:ad:
                    78:a5:33:3d:0f:b8:e5:e7:ae:37:0c:6f:0d:26:fe:
                    3b:75:bc:45:54:6f:7c:a0:75:d1:22:ab:99:8b:70:
                    c0:9d:38:5c:ca:87:e0:89:1e:f1:60:02:b9:34:c6:
                    63:f8:83:7d:bd:02:9d:0b:08:14:a7:22:bd:98:2a:
                    9a:35:2a:1b:c3:7a:60:37:fb:0b:b4:31:1e:00:68:
                    16:db:bc:06:95:9f:11:48:bb:1a:71:06:3e:9f:ca:
                    12:03:09:7d:dc:60:0b:98:e0:fd:53:3a:3f:d3:ae:
                    c7:48:d5:fc:8f:51:40:62:cb:f3:86:80:f4:44:12:
                    cf:0f:54:0d:8e:7c:44:c9:c9:97:aa:53:22:e8:d9:
                    60:5c:1e:1a:d6:ec:f0:d9:93:f2:6b:08:67:e6:2d:
                    8b:86:81:eb:60:f3:d6:6f:5b:bc:3c:30:e9:c5:2e:
                    8e:db:2c:e2:2a:1d:aa:42:5d:ed:fe:1e:b7:29:29:
                    91:ae:2f:06:8a:25:a6:fa:1c:67:ad:86:46:e8:f0:
                    e6:6c:99:c5:eb:05:82:92:a6:6c:32:2e:b8:a8:37:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:2E:A2:EE:88:F0:58:3B:E0:20:86:D4:7A:24:93:46:09:FF:D7
            X509v3 Authority Key Identifier:
                keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:74:a2:b8:7c:fc:85:7a:87:ca:56:96:6b:9d:78:c9:f4:99:
         9a:e8:26:2e:e5:17:57:69:bf:65:64:fa:ae:93:4c:f4:8e:76:
         de:20:37:d9:a3:30:6d:97:c9:50:de:b2:9e:ea:12:32:87:23:
         54:86:d5:14:a1:58:f7:34:be:c4:7c:96:e5:e1:b6:c5:59:94:
         19:aa:a8:2a:51:a8:8b:5c:d3:94:26:95:ba:ee:9f:b5:fb:48:
         7c:ba:b5:9f:3d:6a:6b:c8:53:32:52:86:db:d8:6c:e2:77:ce:
         45:a5:c3:2d:9e:74:cd:0f:f6:24:39:d6:7f:22:97:e1:69:f4:
         d0:db:9c:ba:d5:40:30:9b:2d:8c:b8:7f:ef:8e:60:3d:d5:48:
         7d:6a:ca:61:91:90:ff:09:e2:b0:4e:49:ea:e0:73:a4:c3:32:
         4f:d3:22:47:78:2c:0a:a7:c8:05:1f:10:ae:5f:4b:0e:90:94:
         19:fd:4f:3b:a6:e7:d6:44:c2:1a:81:32:db:de:ab:3f:29:1d:
         5c:fe:8c:a2:fa:b4:27:16:3f:b2:f8:de:78:1b:a4:15:d6:a5:
         1a:93:a1:4a:be:32:fc:92:20:59:0b:ad:b1:45:3c:24:e1:e4:
         0b:ef:48:94:5e:2f:c2:da:7b:e7:e7:67:79:74:bf:81:d4:4e:
         1d:7d:65:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0
NzNBRDA0QzcwHhcNMjYwNzI4MTkzOTIyWhcNMjYwODA0MTkzOTIyWjAYMRYwFAYD
VQQDEw02YTY5MDU2Yi1hNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA93aZqZT5fXn4vt2zTubkpXQI7BMd4g2A5JC2R4ZLoj27OtIRR+KE6Ki9ta14
pTM9D7jl5643DG8NJv47dbxFVG98oHXRIquZi3DAnThcyofgiR7xYAK5NMZj+IN9
vQKdCwgUpyK9mCqaNSobw3pgN/sLtDEeAGgW27wGlZ8RSLsacQY+n8oSAwl93GAL
mOD9Uzo/067HSNX8j1FAYsvzhoD0RBLPD1QNjnxEycmXqlMi6NlgXB4a1uzw2ZPy
awhn5i2LhoHrYPPWb1u8PDDpxS6O2yziKh2qQl3t/h63KSmRri8GiiWm+hxnrYZG
6PDmbJnF6wWCkqZsMi64qDeowwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHP7LqLu
iPBYO+AghtR6JJNGCf/XMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB
QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo
alQ0TlNUUmR2MEpIT3RCTWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASXSiuHz8hXqHylaWa514yfSZmugmLuUXV2m/ZWT6rpNM9I523iA32aMwbZfJ
UN6ynuoSMocjVIbVFKFY9zS+xHyW5eG2xVmUGaqoKlGoi1zTlCaVuu6ftftIfLq1
nz1qa8hTMlKG29hs4nfORaXDLZ50zQ/2JDnWfyKX4Wn00NucutVAMJstjLh/745g
PdVIfWrKYZGQ/wnisE5J6uBzpMMyT9MiR3gsCqfIBR8Qrl9LDpCUGf1PO6bn1kTC
GoEy296rPykdXP6Movq0JxY/svjeeBukFdalGpOhSr4y/JIgWQutsUU8JOHkC+9I
lF4vwtp75+dneXS/gdROHX1lDA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:24 2026 by rpki-client