Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
File:                     5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json)
Hash identifier:          2sIdEiddsPd829bPnxUJv46TH5F8uz9IuD8b6/uRKK8=
Subject key identifier:   29:0A:78:6F:4D:EE:92:1D:FB:CC:28:42:D8:6A:E0:D0:82:B9:5F:49
Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
Certificate issuer:       /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
Manifest number:          016B
Signing time:             Mon 27 Jul 2026 06:46:04 +0000
Manifest this update:     Mon 27 Jul 2026 06:46:04 +0000
Manifest next update:     Mon 03 Aug 2026 06:46:04 +0000
Files and hashes:         1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: OIezVK5SU6+qbIuSkq5HYKRwX2mDxO4JZaeRLJlpWQg=)
                          2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=)
                          3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
                          rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
        Validity
            Not Before: Jul 27 06:46:04 2026 GMT
            Not After : Aug  3 06:46:04 2026 GMT
        Subject: CN=6a66feac-e536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:03:f9:3a:7d:8b:69:e6:b2:52:85:cf:8e:12:
                    21:5c:c9:7f:0a:f7:5e:57:d9:98:13:f2:ed:f3:08:
                    55:9d:9e:e6:0a:9d:a1:ea:e3:e2:c7:a9:bb:b3:30:
                    38:ff:c9:ed:e5:30:76:1d:dc:3d:6f:ae:0e:16:c1:
                    70:31:bd:9c:cb:04:a9:86:91:f8:53:22:ce:c6:90:
                    9c:6d:27:32:ac:5c:d0:8b:af:5b:e8:b5:96:34:22:
                    33:ce:1b:47:3d:56:5d:22:f7:af:5c:db:77:51:58:
                    48:c0:d2:70:2d:87:e4:96:ff:b7:63:95:47:40:a6:
                    39:56:c5:d0:af:c5:cd:b7:16:a3:02:36:0d:df:29:
                    44:5a:4d:a2:15:43:75:5f:70:c8:69:9e:55:ab:ae:
                    f1:11:e7:70:40:8e:1d:db:fb:0f:59:35:98:c1:44:
                    9b:1f:69:db:8a:39:3d:02:ac:4d:ab:7a:35:6b:ca:
                    e4:06:9a:e5:71:23:e4:d9:3e:fb:db:0e:db:5d:76:
                    d1:dc:43:d2:b2:18:64:10:e6:55:87:fb:f8:00:2e:
                    e0:ea:ad:8f:5e:e1:a4:23:f1:e0:93:a3:6b:94:c0:
                    e8:68:1d:a4:c5:60:4f:f0:3d:c6:82:4e:62:fc:ea:
                    72:b9:84:82:ce:5a:90:c7:ad:a6:bb:28:c1:39:18:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0A:78:6F:4D:EE:92:1D:FB:CC:28:42:D8:6A:E0:D0:82:B9:5F:49
            X509v3 Authority Key Identifier:
                keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:1b:4b:19:d7:a1:d7:5c:ed:40:86:e4:56:14:55:72:2a:
         fc:50:49:fa:2e:aa:6d:b2:8a:2e:bf:28:a7:7d:c1:48:5c:16:
         94:99:10:e1:0f:97:ba:6d:c2:6c:07:8d:19:a5:59:61:54:4f:
         cc:e3:b5:8d:ba:2a:17:7c:b1:ea:57:cb:54:f2:60:3c:ff:65:
         84:91:9e:0b:cd:0e:4b:d1:43:02:60:e6:30:ab:73:86:c7:61:
         cd:17:21:ee:76:1f:4a:11:f5:bb:4c:e6:89:a5:9a:39:83:7a:
         1f:84:b7:7b:52:c6:ac:8a:79:68:b0:86:1f:c9:1a:22:42:29:
         cb:e6:90:0b:2a:63:40:ce:b1:74:24:b0:a9:89:13:05:65:d7:
         56:8c:59:ff:33:a9:99:d3:03:86:4a:1e:4c:f4:e4:50:16:a8:
         8e:c0:48:91:04:a3:9b:92:9c:36:02:ff:ed:33:7c:62:bb:dc:
         fe:90:38:bf:3a:e3:56:44:9b:a5:58:53:e0:8a:06:f7:f0:2e:
         ad:90:c9:86:6e:42:6b:7c:b4:ce:5a:e4:38:f0:88:f5:49:7f:
         2b:86:54:99:57:81:c3:1f:4e:e0:c4:8b:d0:37:2f:52:54:8e:
         50:22:cc:70:a6:c0:5c:52:ac:72:ad:81:f3:e3:e1:f3:94:ea:
         86:74:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:40 2026 by rpki-client