Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
File:                     D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json)
Hash identifier:          gcyDT0w8JyAuqorJwC9AxeV/guuor/yTEngAkkrtIMg=
Subject key identifier:   67:C8:34:9C:7B:B1:0D:A0:FE:E2:DC:44:D2:A2:04:FF:8F:B1:20:DC
Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14
Certificate issuer:       /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
Manifest number:          0144
Signing time:             Mon 27 Jul 2026 07:17:10 +0000
Manifest this update:     Mon 27 Jul 2026 07:17:09 +0000
Manifest next update:     Mon 03 Aug 2026 07:17:09 +0000
Files and hashes:         1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: iLPSFNH5ci9jUAZBLg9+V9vnSLOWl3PuvweyaTW+BL0=)
                          2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=)
                          3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl
                          rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14
        Validity
            Not Before: Jul 27 07:17:09 2026 GMT
            Not After : Aug  3 07:17:09 2026 GMT
        Subject: CN=6a6705f6-9374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:3a:ff:8d:10:cd:25:60:41:75:ac:aa:25:
                    3d:a6:4f:d6:d9:b6:d4:b0:d6:ad:1d:a7:37:3d:d3:
                    57:cb:5f:15:6d:c3:76:de:5b:50:56:60:c3:b3:8e:
                    ff:d4:c2:66:c2:a3:70:3d:77:f3:aa:b5:c1:75:e9:
                    fc:f3:06:e9:4b:24:ef:f0:45:bc:c1:34:87:c5:12:
                    86:19:bf:d3:c5:b5:16:73:1e:0d:b4:a6:05:4e:69:
                    8d:52:c6:6c:d5:86:72:c1:04:e3:63:10:98:cc:fa:
                    5b:a1:1d:ee:c7:f8:b3:29:b6:03:8c:0e:92:37:6e:
                    c2:80:c0:a7:0b:ff:17:7d:5b:42:74:6d:5e:c9:b5:
                    63:ea:2e:46:a8:ef:af:46:0e:bc:24:99:e0:36:85:
                    59:b7:0b:46:18:8f:a1:fd:b2:56:00:5e:78:ca:25:
                    e3:80:97:7a:85:99:69:b3:73:55:c2:23:64:f5:99:
                    e6:60:be:fc:a2:bc:6e:a4:1b:99:b2:dd:db:e1:c6:
                    b0:da:34:f6:49:d6:29:01:91:be:96:6f:69:79:c6:
                    a5:fd:f4:39:4d:90:98:a6:68:54:d6:5b:7d:83:24:
                    ca:db:b1:e3:be:0b:03:3d:9a:6f:9b:80:5b:08:e9:
                    a0:3b:90:dd:40:4f:68:f3:8a:87:d1:31:7a:ae:84:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C8:34:9C:7B:B1:0D:A0:FE:E2:DC:44:D2:A2:04:FF:8F:B1:20:DC
            X509v3 Authority Key Identifier:
                keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:35:e0:58:04:03:94:5e:e3:a8:69:e6:0a:55:a6:32:8b:b4:
         dd:9e:6d:30:e8:c5:ca:f4:8c:41:fb:5f:6d:9c:2d:1f:86:3b:
         5d:60:58:c0:15:a4:27:66:47:cc:d4:e6:d1:46:57:a0:1f:c3:
         65:a3:05:91:97:e0:93:9e:ff:1f:45:a4:d8:ec:fb:37:1a:aa:
         89:ae:bf:17:68:6b:b7:4a:0e:ec:2c:d2:d8:fb:71:30:7e:73:
         f5:0b:86:da:e5:7c:51:aa:4c:ba:db:d7:3d:b1:e8:9e:7c:e6:
         bf:9c:83:8f:96:c2:35:42:22:06:d4:cf:b2:17:25:0b:30:71:
         1f:3e:b2:d2:c5:96:6e:ce:02:f9:c1:d9:36:a4:68:39:a7:e0:
         28:cb:bd:5e:99:35:cf:40:2c:2f:fd:f4:7a:11:ba:03:ea:66:
         15:bd:36:b5:be:78:7f:e3:a6:46:b9:1d:6a:1e:c7:ab:47:81:
         79:5d:6c:97:08:aa:e4:17:df:d3:b4:fe:a4:7b:3f:0c:a6:95:
         ec:43:03:17:1a:de:49:30:10:68:e2:74:3b:7d:e2:d1:a8:cf:
         0b:b6:a9:47:d9:5b:e8:c4:84:77:4f:30:9c:04:55:ea:e8:6d:
         ed:20:12:04:40:74:8c:27:84:14:8d:c7:fa:a3:96:14:d7:9f:
         17:93:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:41 2026 by rpki-client