Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File:                     RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier:          tgJxIl4r38mV/bn0E92Y9Yb1kgAeGJclT34t0Af2I3g=
Subject key identifier:   42:DD:6E:B2:7C:34:FC:01:86:17:6A:45:B3:7C:16:DC:2A:D0:20:B0
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer:       /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial:       138B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number:          136D
Signing time:             Tue 28 Jul 2026 17:04:35 +0000
Manifest this update:     Tue 28 Jul 2026 17:04:35 +0000
Manifest next update:     Tue 04 Aug 2026 17:04:35 +0000
Files and hashes:         1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: aQdqNBz8LsR5ys77fgQZnaYt+27ejlOxb/txgbBdS28=)
                          2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: EzDx+kZUXYs4cl7Q2Kezjy72skBAtO5dib4eJqomtiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
                          rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5003 (0x138b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
        Validity
            Not Before: Jul 28 17:04:35 2026 GMT
            Not After : Aug  4 17:04:35 2026 GMT
        Subject: CN=6a68e123-a719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:f6:9a:95:b2:e0:56:43:55:ea:81:9c:c6:
                    d8:87:84:40:59:e0:de:e4:e2:1b:8f:ad:14:69:9f:
                    0f:08:b8:c5:78:5a:0a:bf:1d:e8:34:cb:4e:30:03:
                    cb:30:d7:d9:4d:47:b8:1d:7f:b2:25:bb:f2:7a:0f:
                    13:c3:dc:48:d7:c4:16:de:69:51:d2:9c:f0:4e:26:
                    06:68:74:73:4f:ee:d7:5b:47:6a:46:ab:df:de:a4:
                    47:a1:5b:c7:d7:95:5f:e7:07:87:2d:36:4a:d7:84:
                    b5:71:ba:0d:f1:35:b8:f7:0e:6d:b5:c9:a3:ba:f7:
                    97:2d:7f:b9:fe:7e:32:90:13:48:2d:83:fb:ee:ee:
                    78:b6:8f:41:2b:2c:e1:80:42:3a:37:2a:15:a8:0c:
                    88:a8:e5:2d:32:e2:e9:8a:2a:48:0c:24:80:46:94:
                    e2:90:53:de:93:95:04:e5:fd:50:f1:c3:4d:24:2a:
                    64:72:9b:b2:10:3e:00:b2:25:e0:b7:28:28:56:c8:
                    dc:4a:71:63:54:ba:a1:82:12:31:43:03:28:4e:2f:
                    45:de:d8:19:5b:2c:96:f2:29:44:a1:36:39:d1:26:
                    74:c3:76:55:7b:73:0c:70:92:40:7a:d4:4f:36:30:
                    1b:72:09:4e:c0:da:8c:95:86:ac:66:72:ed:2c:a3:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DD:6E:B2:7C:34:FC:01:86:17:6A:45:B3:7C:16:DC:2A:D0:20:B0
            X509v3 Authority Key Identifier:
                keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:8b:5a:2f:3f:b0:36:d1:30:b7:c7:2e:78:ed:6e:54:a8:
         99:0a:07:af:e3:bc:c2:ac:00:91:75:bc:55:27:36:7c:f0:7b:
         3a:ba:53:30:79:bf:5f:73:f9:c0:e5:d6:51:01:39:7f:d8:6c:
         75:4d:7e:27:21:0b:27:6f:28:01:86:13:e4:4d:59:5d:c6:cd:
         b5:b4:0d:6e:5c:62:d0:40:10:ed:0a:14:01:8e:de:25:6b:8a:
         c5:27:b5:52:a3:65:a3:31:7c:9b:74:70:63:bf:09:03:90:b8:
         2e:4c:f8:28:1b:76:61:5d:f1:70:e1:16:cd:87:33:01:36:ce:
         fa:ed:bd:60:1c:3d:a5:82:ac:02:d3:8c:09:ec:df:80:e4:8c:
         38:2a:cb:90:b6:5e:45:49:72:62:c6:be:9f:03:70:d0:cd:ae:
         d0:c4:e4:1e:94:87:c4:69:b2:0e:b9:71:28:84:a4:b0:9e:2c:
         32:1f:2e:59:07:73:b1:bd:ce:62:63:0a:d4:1f:bf:19:07:e0:
         ff:7d:00:d5:38:3b:03:b7:e6:e4:56:d6:a9:6f:a8:44:90:d1:
         b4:56:52:65:83:1a:48:f7:f6:f8:58:f1:9e:d2:d3:6d:c2:ae:
         23:cb:5c:c5:44:e2:98:2f:f6:ea:98:cd:4c:d6:25:59:43:37:
         7b:b7:1a:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1
MDVCMEM3QjMwHhcNMjYwNzI4MTcwNDM1WhcNMjYwODA0MTcwNDM1WjAYMRYwFAYD
VQQDEw02YTY4ZTEyMy1hNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGf2mpWy4FZDVeqBnMbYh4RAWeDe5OIbj60UaZ8PCLjFeFoKvx3oNMtOMAPL
MNfZTUe4HX+yJbvyeg8Tw9xI18QW3mlR0pzwTiYGaHRzT+7XW0dqRqvf3qRHoVvH
15Vf5weHLTZK14S1cboN8TW49w5ttcmjuveXLX+5/n4ykBNILYP77u54to9BKyzh
gEI6NyoVqAyIqOUtMuLpiipIDCSARpTikFPek5UE5f1Q8cNNJCpkcpuyED4AsiXg
tygoVsjcSnFjVLqhghIxQwMoTi9F3tgZWyyW8ilEoTY50SZ0w3ZVe3MMcJJAetRP
NjAbcglOwNqMlYasZnLtLKMBuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELdbrJ8
NPwBhhdqRbN8Ftwq0CCwMB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4
NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzVGRS9BMDdGQTFDRUM4NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZn
UnZkRUlSMFkwQ1pRV3d4N00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApyiLWi8/sDbRMLfHLnjtblSomQoHr+O8wqwAkXW8VSc2fPB7OrpTMHm/X3P5
wOXWUQE5f9hsdU1+JyELJ28oAYYT5E1ZXcbNtbQNblxi0EAQ7QoUAY7eJWuKxSe1
UqNlozF8m3RwY78JA5C4Lkz4KBt2YV3xcOEWzYczATbO+u29YBw9pYKsAtOMCezf
gOSMOCrLkLZeRUlyYsa+nwNw0M2u0MTkHpSHxGmyDrlxKISksJ4sMh8uWQdzsb3O
YmMK1B+/GQfg/30A1Tg7A7fm5FbWqW+oRJDRtFZSZYMaSPf2+FjxntLTbcKuI8tc
xUTimC/26pjNTNYlWUM3e7caCA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:35 2026 by rpki-client