Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File:                     MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier:          YKLmZHp2xB6t6+coaLrj14YZMVo04OBIBlDAcKv4EVc=
Subject key identifier:   B4:17:43:6B:36:E5:7E:DD:EF:DC:89:E5:69:FD:CC:B9:E8:07:32:96
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer:       /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial:       0C27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number:          0C09
Signing time:             Tue 28 Jul 2026 19:06:02 +0000
Manifest this update:     Tue 28 Jul 2026 19:06:01 +0000
Manifest next update:     Tue 04 Aug 2026 19:06:01 +0000
Files and hashes:         1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: c71ULNdaqKQWvnG4EOamYYWNckgQ55k7h+Gc7+yl850=)
                          2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=)
                          3: 90FE23B83D5011F1860BF56AA6833773.roa (hash: XUvqr+C7+uQgBL9ktwJt5Z6F/YsCiQrJ061Wa1rTzxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
                          rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3111 (0xc27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
        Validity
            Not Before: Jul 28 19:06:01 2026 GMT
            Not After : Aug  4 19:06:01 2026 GMT
        Subject: CN=6a68fd9a-4d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:a5:1f:cc:ee:e0:89:12:50:20:75:ce:f7:
                    00:e6:c6:f8:ae:58:d4:27:15:a4:57:79:1c:9a:fb:
                    07:8a:dd:9b:49:e3:cb:c1:ac:fa:39:62:16:77:5d:
                    e9:ff:a2:f7:93:b2:2f:8c:84:b2:2c:c4:b1:2a:28:
                    01:2f:84:b9:8d:00:fb:3c:63:55:19:93:b8:7d:77:
                    bf:32:54:b2:23:89:d4:65:4e:6d:fc:d5:ae:5d:9c:
                    66:4b:75:71:ab:d1:ca:f3:8d:df:c3:09:bd:94:a4:
                    4f:31:e2:43:c9:71:67:00:c0:9d:f0:b4:0d:05:91:
                    a4:83:fa:d4:0f:6a:17:16:d3:ea:56:b1:d9:35:2e:
                    1b:1f:fc:64:7b:00:1e:8a:e4:c8:5d:6d:5f:5e:dd:
                    c8:30:15:a9:9a:63:c7:42:66:05:09:26:94:b5:b3:
                    2e:1b:84:27:e3:d1:55:9f:09:45:9f:02:a8:37:de:
                    6b:1c:8d:67:50:d1:1a:73:98:1e:9b:0d:72:74:09:
                    1f:c4:91:3b:78:f8:77:b9:10:f1:48:5b:57:b8:88:
                    8b:de:e9:c4:22:bc:76:52:53:9f:e6:d6:18:4c:0c:
                    ed:35:af:84:4c:a9:62:fb:c8:f3:09:b0:c1:44:d6:
                    34:ce:b6:1d:bf:4b:b8:d7:0f:be:f6:15:6f:60:6b:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:17:43:6B:36:E5:7E:DD:EF:DC:89:E5:69:FD:CC:B9:E8:07:32:96
            X509v3 Authority Key Identifier:
                keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:4a:f4:a7:c7:9c:08:51:e8:8c:4d:b9:d2:d6:9c:38:13:30:
         b0:13:f4:ca:28:91:6e:0a:46:d5:9a:8f:34:8f:30:32:26:78:
         9c:f6:37:0a:74:13:a2:7f:04:4b:0d:e0:b8:01:b7:5d:1c:ee:
         80:34:d6:2f:2a:71:1b:1b:8b:34:0e:ad:8d:4c:c8:32:5c:01:
         18:e6:92:82:e1:1b:14:8a:ed:68:63:ec:82:1b:91:2f:fe:1a:
         73:51:e2:06:77:88:96:a3:0f:60:f0:be:c2:8f:21:bf:88:a1:
         b9:10:f3:f1:07:df:02:f5:11:f3:52:03:68:1a:0d:1c:64:bc:
         e5:ab:07:37:b8:6c:18:37:65:ea:d4:e4:37:29:13:3f:84:56:
         dc:2c:37:f3:c2:8b:33:5a:fd:30:b9:b5:6c:6e:14:b8:17:7b:
         f1:c1:09:0d:77:db:86:ea:95:b7:29:af:0d:72:16:fc:94:fa:
         09:d1:90:fc:b9:4b:54:80:62:13:4e:2a:f0:8a:f5:a6:e4:1d:
         6f:7b:63:8c:63:27:54:7a:37:4e:74:d3:f0:2f:68:c1:97:93:
         1d:09:cc:7d:18:d7:28:6f:cf:f0:76:5c:45:4b:a7:09:36:d0:
         2b:53:ac:ad:36:3c:0e:4a:a8:cb:8a:a6:45:4d:1b:40:14:a8:
         34:8a:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:49:18 2026 by rpki-client