Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
File:                     MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json)
Hash identifier:          jPqYZpY+uBgCIP1gBHNZqK4GyimaIaW0OgF2RLykWmM=
Subject key identifier:   5F:6C:04:E5:1A:CB:86:F7:2B:1E:95:F9:54:40:CF:CF:76:E8:68:DC
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Certificate issuer:       /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial:       04A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
Manifest number:          0498
Signing time:             Mon 27 Jul 2026 01:00:30 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:29 +0000
Manifest next update:     Mon 03 Aug 2026 01:00:29 +0000
Files and hashes:         1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: H0fqFP7nC/D6jDhpamSOCf5PwRX1/JS8reCy3y0XSQw=)
                          2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: 58r0vtdt/oV3rGoChr48NFwAppp4ue8CY8DLnIFlHCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
                          rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190 (0x4a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
        Validity
            Not Before: Jul 27 01:00:29 2026 GMT
            Not After : Aug  3 01:00:29 2026 GMT
        Subject: CN=6a66adad-6db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:2f:d6:6f:db:d2:87:a5:a2:eb:5a:df:f6:
                    f7:2e:d2:cd:cc:17:2a:13:1c:dd:a1:33:0c:45:f7:
                    9c:de:67:aa:09:d2:37:49:29:6c:5a:05:76:af:87:
                    db:15:51:65:67:dd:92:a7:32:77:a5:2e:35:5b:fe:
                    f9:df:95:23:c0:ac:5f:91:0c:4a:cb:94:a7:62:3e:
                    04:1f:0b:ca:4c:74:7a:7f:c4:6a:86:af:9f:7d:a3:
                    99:40:63:32:17:b6:71:64:8c:02:66:fa:95:e4:95:
                    24:8e:2b:13:f2:a2:de:b9:d4:f0:64:d1:5c:ac:4c:
                    21:cc:31:b3:12:8c:80:b0:d1:a8:3d:39:a2:1f:7b:
                    36:a6:2e:01:43:eb:f6:6e:5f:28:84:07:01:ec:e4:
                    04:b9:7e:4b:ba:ca:94:ce:1b:59:8a:6b:19:80:66:
                    bc:68:01:b5:7f:28:d7:30:1b:ea:71:32:e8:a0:e2:
                    96:20:41:14:7c:5d:fe:29:33:81:5b:81:e4:13:40:
                    8c:b1:13:50:7f:f9:e4:1d:17:5c:b1:2d:7e:b4:a8:
                    31:fd:ff:e2:44:58:b8:2e:71:fb:10:a7:f3:b4:ba:
                    e5:1d:ce:7c:9f:2a:5f:d7:48:87:41:17:9f:e6:5c:
                    cc:32:0d:b8:9c:85:8e:81:55:05:05:4a:45:ee:14:
                    ad:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6C:04:E5:1A:CB:86:F7:2B:1E:95:F9:54:40:CF:CF:76:E8:68:DC
            X509v3 Authority Key Identifier:
                keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ed:89:9e:ae:cb:9c:a8:32:df:84:cb:d7:27:c5:db:20:ef:
         ce:49:7f:2a:35:48:6a:10:1a:af:e4:13:ed:e2:d4:53:18:34:
         ca:39:f9:b7:96:f0:68:91:35:eb:14:8d:32:e9:54:ea:8a:e0:
         61:e5:ba:d2:d2:10:28:c8:d7:f9:1a:b7:ee:78:74:2d:7e:8e:
         5d:39:14:6d:2c:f9:c2:17:42:78:2d:83:a4:48:9b:06:5b:6e:
         d3:20:d7:c0:22:8a:c0:50:b9:89:fe:13:2d:d6:93:09:3c:6f:
         3e:99:45:d1:81:6a:93:0e:94:ca:ff:d8:51:c5:85:39:a2:25:
         11:74:00:94:90:01:3c:0b:fe:4e:16:67:a6:50:99:3f:eb:08:
         e7:bd:12:17:78:26:11:27:e4:f0:4c:b8:7b:ac:ad:9b:d3:9b:
         e0:e1:d9:aa:3e:6d:95:fb:df:7c:bb:33:c8:6a:3e:11:ae:31:
         09:ed:b7:dd:4c:45:94:53:e9:84:63:f6:d0:f3:d0:3c:f3:66:
         d6:fc:4b:7b:47:55:fe:dc:d7:84:fc:02:4c:61:14:2c:41:e2:
         c2:82:9e:10:00:ac:b9:a7:a0:a6:a0:7a:c2:27:1c:72:8e:7d:
         0a:1d:5d:72:e9:76:70:26:bd:70:62:39:01:8b:27:40:58:9f:
         8b:8e:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:39 2026 by rpki-client