Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
File:                     IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json)
Hash identifier:          89hDyHN2ib6cI0nibXMlOIZ2Mam7kOHGbIyWGLXWAH4=
Subject key identifier:   EA:36:D8:FE:68:1C:C7:59:60:25:8B:81:DC:F9:FA:0A:C3:E7:2E:A7
Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F
Certificate issuer:       /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
Manifest number:          0263
Signing time:             Mon 27 Jul 2026 03:36:00 +0000
Manifest this update:     Mon 27 Jul 2026 03:35:59 +0000
Manifest next update:     Mon 03 Aug 2026 03:35:59 +0000
Files and hashes:         1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: JIwd75eeSz+2KFej+oVe/ZQ2L4obSrHmx8K3ojCKSZY=)
                          2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: VW+45wcSvSFoip2OKN04CIY/5Rv2n17vde5Y8vwKCik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl
                          rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F
        Validity
            Not Before: Jul 27 03:35:59 2026 GMT
            Not After : Aug  3 03:35:59 2026 GMT
        Subject: CN=6a66d220-39d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:0c:93:6d:67:67:10:12:15:b8:44:77:f9:
                    34:8c:ff:ff:38:6a:2e:14:59:4e:59:d0:38:67:3b:
                    ff:14:7d:97:6d:c0:7c:fe:2c:af:7a:d1:38:e2:95:
                    25:8f:79:db:49:46:ae:32:86:f1:9a:cc:49:bd:8e:
                    3b:af:38:8d:e4:28:d8:17:64:43:9a:b4:31:c1:c6:
                    4d:b9:45:02:0d:9b:53:86:b4:7a:e3:ed:08:46:70:
                    9e:ef:26:5b:35:ca:19:9b:a7:31:75:66:39:10:7d:
                    6b:19:bc:fd:d8:40:84:8a:12:99:29:a6:f3:95:f8:
                    3b:85:0f:44:f6:e5:23:93:a6:33:0e:90:50:98:56:
                    de:b5:66:63:0c:10:27:0f:8a:e7:b6:38:95:01:fa:
                    2c:2c:46:30:dc:12:4a:69:fa:9b:0b:1d:62:3b:8a:
                    89:12:6a:6d:d5:1d:5a:51:34:af:d8:3d:59:58:12:
                    47:15:1d:af:bd:7b:25:98:4e:07:f9:f9:ee:cd:a9:
                    22:69:7d:7f:e8:50:3c:24:49:5b:50:6f:28:68:40:
                    4e:f2:c1:6a:b1:f4:ac:f7:fb:27:05:cf:5a:16:29:
                    f6:cf:6d:ff:5c:04:b2:30:c6:ac:c1:9c:bb:0d:f2:
                    a9:9f:98:9b:f1:9a:fd:68:1e:1b:80:2c:5e:81:4c:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:36:D8:FE:68:1C:C7:59:60:25:8B:81:DC:F9:FA:0A:C3:E7:2E:A7
            X509v3 Authority Key Identifier:
                keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bd:6a:85:3d:24:c7:dd:ec:74:5d:05:ce:79:50:2d:7b:3b:
         28:f3:35:6f:23:fb:89:af:e4:7f:11:38:63:24:7c:4d:fc:19:
         9a:5b:e3:a9:b5:4c:85:1b:9b:be:0b:73:3c:47:47:2d:a3:72:
         a3:13:00:c5:a1:21:3d:f9:d5:04:b5:ab:2d:a6:3a:76:f8:d2:
         7a:45:bb:31:15:07:c0:2e:4a:31:e5:c6:d7:ea:fa:be:30:07:
         eb:55:40:b6:b5:8e:7d:65:a3:7d:60:38:2f:69:c1:3d:df:02:
         13:95:ef:a8:c7:f9:ad:69:9c:7c:39:a3:24:7e:5f:93:b5:fa:
         4b:8e:03:2e:34:51:4d:1d:23:f9:c8:96:45:38:20:f1:01:7d:
         97:d9:ec:90:b1:71:f6:b5:39:87:b8:b3:4a:68:12:ec:93:c7:
         66:b4:9b:b8:c2:6c:e5:a3:ea:2c:c7:1d:5f:20:15:c2:11:16:
         1a:59:20:41:cf:57:07:ff:12:e1:d8:9c:f2:b9:e4:81:ee:cd:
         6c:cc:8e:d1:9e:af:96:fa:e3:34:c1:8e:e2:84:b5:32:20:fe:
         d4:6a:f0:54:4d:a9:a9:fe:ce:6a:21:7b:22:93:22:78:b7:95:
         02:f0:4d:13:28:7e:99:86:2d:ad:47:12:19:d3:db:97:f1:9c:
         41:fd:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:59 2026 by rpki-client