Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
File:                     n5SsB4YdiAvjQDGyhnkD51wyPEg.mft (raw, json)
Hash identifier:          dcAdZmQqi4zUiQZWOw4e/YkSXJHLhUHap/kHESbwElM=
Subject key identifier:   86:16:96:21:DF:FB:5C:B3:03:09:FA:AE:10:B5:FE:45:CC:42:37:EB
Authority key identifier: 9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48
Certificate issuer:       /CN=A9193A9E/serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
Manifest number:          B3
Signing time:             Mon 27 Jul 2026 09:18:11 +0000
Manifest this update:     Mon 27 Jul 2026 09:18:11 +0000
Manifest next update:     Mon 03 Aug 2026 09:18:11 +0000
Files and hashes:         1: n5SsB4YdiAvjQDGyhnkD51wyPEg.crl (hash: r71PRmTQJaTjggrSxchVp3oTWoQ7ykf7gn9KttzIbsc=)
                          2: F5E70A7083CD11F09D837187C4F9AE02.roa (hash: D4kkZW06Np50ldy69d7TFuos+nWkMODAhBAO4YczMeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl
                          rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193A9E, serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
        Validity
            Not Before: Jul 27 09:18:11 2026 GMT
            Not After : Aug  3 09:18:11 2026 GMT
        Subject: CN=6a672253-4ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:7d:e6:30:fa:6c:47:c8:1c:4d:e7:52:74:
                    40:63:e6:05:7c:99:c6:2f:90:47:4a:b4:04:44:ec:
                    c9:b0:e1:75:0d:b8:54:f3:db:08:75:e2:b6:30:76:
                    ca:29:23:5a:63:74:4c:1c:2e:09:00:1f:79:bc:68:
                    4e:5d:0b:03:07:14:b3:c8:62:4d:19:47:23:c6:2d:
                    db:a4:53:34:c0:df:31:d2:52:cb:75:42:60:ea:ee:
                    9d:d9:43:b9:02:93:63:6b:6f:2d:6c:c1:50:a0:c7:
                    e4:34:09:69:39:cb:95:f0:3a:dd:c3:87:fa:8d:9a:
                    15:ea:f7:7d:00:99:bb:7e:aa:33:8f:1c:72:be:6e:
                    66:0e:75:c5:be:e2:e9:ff:87:c1:48:10:fd:78:a5:
                    44:52:02:4b:f4:c3:9b:e7:bc:5b:73:fb:89:6f:77:
                    b9:e8:2f:98:d8:dc:df:93:01:5e:05:c7:75:4e:5b:
                    ab:9a:2c:48:e6:b6:7b:11:cc:e0:2d:d2:13:b6:92:
                    27:84:5e:29:82:31:f3:bc:1f:4e:d4:7c:09:f8:98:
                    ad:27:9c:d4:36:76:f3:d3:d7:f6:a6:65:1e:9f:17:
                    67:7d:75:93:f6:a5:1e:07:9c:95:af:96:d5:97:2f:
                    0e:d5:d9:55:ee:8a:65:52:8e:a2:ba:f7:d7:e4:62:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:16:96:21:DF:FB:5C:B3:03:09:FA:AE:10:B5:FE:45:CC:42:37:EB
            X509v3 Authority Key Identifier:
                keyid:9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:8e:48:97:d8:bd:c4:54:18:5c:60:d2:8a:dc:57:56:ee:
         e8:25:e4:ca:78:8d:7e:67:c3:a5:dc:a7:1b:95:1d:99:78:57:
         3f:05:2d:3c:3d:55:b4:5f:76:5f:4b:f0:61:d8:d6:91:d2:65:
         05:4c:6a:e9:63:02:2c:60:e8:f9:03:0f:2c:84:2e:3a:19:a2:
         f5:8f:f5:35:a7:4d:b6:aa:8e:09:4b:23:8b:9f:fd:1a:cb:95:
         2b:04:03:b6:d6:08:2a:8c:74:a7:ed:75:37:71:55:0d:3a:bf:
         50:8b:30:27:0a:fe:e0:d5:61:1c:3a:7f:bf:26:3f:ed:7a:00:
         cc:92:24:e7:ca:f6:5c:1e:55:7f:e4:1c:e3:67:50:2e:20:50:
         46:c2:2a:eb:36:fb:e5:44:62:8b:21:14:f4:f6:9e:1b:04:a9:
         0b:db:f4:62:69:d9:ea:c3:05:ad:6f:22:df:cd:cd:7d:68:24:
         13:88:e1:f7:4a:88:03:32:11:3d:47:82:7c:92:d5:0e:25:57:
         fd:37:ec:77:9e:bc:4d:c5:96:d3:4a:26:61:64:7f:47:70:4e:
         67:05:11:6d:41:82:c7:08:df:54:af:2a:1c:91:2d:0e:24:be:
         9a:aa:0b:66:a9:82:bc:b5:1d:6d:95:d7:75:05:06:69:49:d4:
         9b:15:3b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:29 2026 by rpki-client