Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File:                     T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier:          aq9XJMrP42/Wf0Ryqob6EiQhfT1dJJvSjoOLsjP69kY=
Subject key identifier:   C0:58:BF:5C:62:FA:98:55:96:8C:B4:A2:90:C9:B8:27:53:9E:61:27
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer:       /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial:       0D67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number:          0D5D
Signing time:             Tue 28 Jul 2026 18:09:37 +0000
Manifest this update:     Tue 28 Jul 2026 18:09:37 +0000
Manifest next update:     Tue 04 Aug 2026 18:09:37 +0000
Files and hashes:         1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: Oo+6MmRD5Y87CVGmdwenvXBuAg/nCZ38N6U05WFDUdw=)
                          2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: WNUk8jDYPlrb/rdVyo4XTCfnmiGld7eyz2MY75cZ7HI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
                          rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3431 (0xd67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
        Validity
            Not Before: Jul 28 18:09:37 2026 GMT
            Not After : Aug  4 18:09:37 2026 GMT
        Subject: CN=6a68f061-e05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0a:51:9d:d4:47:3d:dd:66:dc:ac:85:03:91:
                    4f:21:b8:6d:ce:49:9f:e4:3b:a7:00:ba:5e:58:81:
                    94:d0:f8:4f:81:57:f6:97:93:b7:c5:a3:e7:90:32:
                    40:d3:58:b3:db:d2:a3:91:5e:37:70:41:c0:0f:90:
                    43:12:45:cb:c9:02:e5:e6:f5:e9:fd:3b:cb:86:ec:
                    0e:a4:fc:09:bf:1e:ee:78:5e:85:76:18:18:2e:3b:
                    82:06:4e:ba:15:2d:52:96:23:70:77:d4:09:62:98:
                    58:b4:c7:2f:fc:35:02:7e:e4:f6:8d:76:20:79:9c:
                    02:ec:e3:fa:cc:3b:b6:53:8a:78:86:f6:b1:88:95:
                    49:ac:65:8b:62:e6:d6:b8:4a:99:e0:ec:b3:d8:62:
                    ee:0f:63:7d:cf:dc:61:72:ba:c4:8b:ca:21:2d:fb:
                    d0:c6:7e:9e:79:06:cb:20:33:d3:1e:4e:31:8f:7f:
                    f2:21:ee:70:95:ff:f8:0a:20:e5:f2:8c:6b:35:5d:
                    78:fc:69:52:c1:4a:3f:2c:63:43:d7:3d:46:b1:98:
                    db:86:e1:73:ba:b9:df:81:da:a1:22:df:ba:f4:55:
                    7c:0f:b1:0e:21:e0:9d:97:a5:93:83:93:fd:f8:5b:
                    ba:70:1a:37:b6:bc:9b:bc:e4:41:fb:cd:54:a2:03:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:BF:5C:62:FA:98:55:96:8C:B4:A2:90:C9:B8:27:53:9E:61:27
            X509v3 Authority Key Identifier:
                keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:b7:67:8d:65:dd:d2:d9:a6:bc:48:ba:0e:95:57:d0:65:
         02:51:5d:89:d9:bf:b8:e1:dc:55:7c:de:83:74:03:2e:3a:1c:
         ce:e7:f4:16:fb:34:7c:61:4a:c0:46:3b:49:c2:73:23:d2:91:
         2e:d6:b6:f7:92:f6:4b:6d:51:ee:c6:2e:10:ec:01:0f:ba:a0:
         92:4c:1d:2a:a8:0c:27:1f:a2:e9:bb:55:1f:d6:62:9a:db:4b:
         2d:07:51:ca:d3:b8:10:6c:2b:21:40:2d:09:49:ee:ec:4a:24:
         3f:7a:d3:ae:be:92:aa:d4:e4:cf:34:3e:ed:70:3a:bc:0e:98:
         bf:e5:f2:61:e3:c5:ee:44:42:cc:1e:09:65:f4:0f:f2:e4:c8:
         f2:95:d0:31:cf:42:94:cd:05:70:37:35:bc:2c:c7:94:9b:f3:
         0c:13:6d:4e:f6:a1:c2:7e:93:b0:15:68:da:20:9a:19:20:bf:
         f0:a7:98:ef:d7:b1:bb:7b:4f:96:8e:29:55:54:99:0d:db:c7:
         42:87:9c:c9:89:09:14:57:45:52:04:b5:6e:ff:65:fa:a4:b4:
         4b:a0:8e:20:42:94:fb:50:60:f9:ca:25:30:b2:19:12:d8:15:
         6f:56:6d:8b:47:8c:da:da:23:45:6c:01:76:8d:db:a6:48:fd:
         fb:ab:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:59 2026 by rpki-client