Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
File:                     _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json)
Hash identifier:          zqcCvuED/ZIcYClKhdYDlWlAXy7StL/UK2kS+xi+f3o=
Subject key identifier:   DC:00:D5:84:AE:29:D5:3C:0F:8B:3B:70:47:8F:92:75:D7:B4:98:10
Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
Certificate issuer:       /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
Manifest number:          0607
Signing time:             Wed 29 Jul 2026 00:20:54 +0000
Manifest this update:     Wed 29 Jul 2026 00:20:53 +0000
Manifest next update:     Wed 05 Aug 2026 00:20:53 +0000
Files and hashes:         1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: HaX1MOLFEATMqvveRODYhDBlYtv+M6wXffA6GzM19Is=)
                          2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hn5wjT8ITTfEO0dB+XWYbfRy24k/V8B+n7+WTsoECyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl
                          rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
        Validity
            Not Before: Jul 29 00:20:53 2026 GMT
            Not After : Aug  5 00:20:53 2026 GMT
        Subject: CN=6a694765-babc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:dc:c1:e4:e1:be:45:96:02:df:13:6c:a9:
                    3f:f8:3b:51:6c:9b:a1:c0:05:53:27:34:53:c9:84:
                    bf:7f:92:8f:69:26:8c:01:8e:88:1a:bb:39:61:f6:
                    62:04:77:56:4f:c8:5c:e7:ec:76:61:33:6c:38:a2:
                    06:be:db:ea:ad:4f:98:24:9c:ad:ed:8a:52:5d:02:
                    e4:d3:b6:78:d5:40:e4:ec:bf:47:bc:86:2f:d3:21:
                    57:7e:c7:05:ab:f6:0d:5f:41:48:73:18:79:fc:24:
                    4f:bd:54:fa:62:a8:49:96:b8:8c:d2:97:b6:eb:bc:
                    af:94:62:c7:b8:bd:c8:41:dd:40:da:90:66:e1:b7:
                    5f:67:2c:6f:4e:7b:65:be:83:9c:84:02:27:80:95:
                    81:57:64:3a:68:a5:b0:06:e1:af:c7:4d:06:33:5e:
                    9c:64:96:ac:32:be:48:c8:2f:7d:f7:1f:2b:ef:3a:
                    04:d9:44:53:a0:c1:53:44:0d:51:b5:f7:e3:42:4a:
                    ac:07:3a:da:8c:85:d4:d7:8d:19:a3:2d:57:f8:65:
                    4d:a0:02:8e:82:d4:c8:4e:7b:f4:d7:19:98:f0:a6:
                    ed:8b:a4:0a:91:cc:47:63:8b:dc:aa:f4:c6:ae:12:
                    70:4c:04:0d:ec:06:ed:2d:4f:16:06:f2:69:34:92:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:00:D5:84:AE:29:D5:3C:0F:8B:3B:70:47:8F:92:75:D7:B4:98:10
            X509v3 Authority Key Identifier:
                keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:a0:ad:f6:29:c8:5a:2f:c8:ff:7c:ec:63:ca:1f:cc:1a:
         bd:45:f8:46:66:14:33:3a:05:79:93:53:04:34:9d:26:4d:0e:
         52:de:f4:7c:64:51:36:d9:c1:67:54:c2:05:3b:bd:c2:b0:32:
         32:1f:cc:93:06:a8:5c:61:c5:1e:69:54:a9:c6:ed:44:14:a3:
         0b:6e:38:de:1b:88:80:5b:14:3e:af:aa:55:99:d5:75:ee:2f:
         21:0c:6e:a5:09:d0:02:9c:29:27:c7:4a:2b:c1:f5:3a:ff:89:
         41:65:a1:79:fb:e2:cb:47:7c:d3:07:0a:eb:10:a0:bb:2c:86:
         ea:96:a1:1c:1d:a2:4d:6a:18:13:1d:f0:ed:ed:fb:d6:b5:25:
         a2:56:c2:20:75:ab:93:cf:02:36:57:18:44:33:f7:97:df:7d:
         b0:24:7a:cc:61:1d:1c:28:be:6f:3a:74:04:80:a6:2f:36:6a:
         e9:de:15:b3:46:55:6e:b4:00:f2:75:15:e3:ec:ed:13:c0:40:
         7c:76:a1:0a:d4:b9:a8:93:ad:36:ea:fa:c4:be:ea:25:7c:26:
         41:31:d4:87:57:dc:85:6a:48:09:83:26:5d:99:ed:7b:ad:58:
         d1:28:d4:68:f6:5f:3c:3f:d0:c5:64:49:56:7d:84:e4:a7:11:
         87:1a:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:56 2026 by rpki-client