Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
File:                     cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft (raw, json)
Hash identifier:          KfWN4XLmEC3F5qLNC0XuU0bskWEVDJPs0G0ctgPY/v0=
Subject key identifier:   F5:6A:F3:37:3F:7E:A2:28:86:F0:19:07:65:DC:44:B7:51:20:98:03
Authority key identifier: 70:F0:14:20:4B:55:62:3E:7C:B8:BF:D9:2C:2D:CA:D1:79:FA:BC:E5
Certificate issuer:       /CN=A9116679/serialNumber=70F014204B55623E7CB8BFD92C2DCAD179FABCE5
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
Manifest number:          02
Signing time:             Tue 18 Aug 2026 15:35:51 +0000
Manifest this update:     Tue 18 Aug 2026 15:35:50 +0000
Manifest next update:     Tue 25 Aug 2026 15:35:50 +0000
Files and hashes:         1: cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl (hash: CH/B5LbeM9bEbGkPurVwlEY78hE0HF9k2NAiaMdg7Yc=)
                          2: 799FBC2C9B1A11F1A788EDC06311F970.roa (hash: mqjazDyZwdEQTpa+3NzwCacJOd2OekyYO3k/BMrGqTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl
                          rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116679, serialNumber=70F014204B55623E7CB8BFD92C2DCAD179FABCE5
        Validity
            Not Before: Aug 18 15:35:50 2026 GMT
            Not After : Aug 25 15:35:50 2026 GMT
        Subject: CN=6a847bd7-21ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:88:84:98:85:9c:16:da:34:b0:78:f5:f8:
                    0a:0f:c7:c5:bf:c1:27:0d:2f:a4:a9:7e:b8:47:9c:
                    4b:02:cf:ba:29:f6:7c:a8:b5:60:6a:2d:d8:00:7c:
                    9a:0c:b5:58:f2:62:31:90:aa:df:f3:cb:53:d5:54:
                    e9:1f:96:a7:7f:52:11:dd:ae:59:a5:f7:67:cb:d1:
                    28:76:73:79:29:87:71:b6:7e:7b:ca:c2:64:de:49:
                    24:2a:a7:33:60:32:a1:c1:cb:a1:97:d0:87:1c:73:
                    6d:66:e5:3d:d2:7a:ac:ca:00:9e:61:61:12:ee:0a:
                    4f:30:88:2b:80:62:6d:42:4c:dd:eb:7c:55:1e:08:
                    2b:11:ac:6f:6b:88:2b:64:30:ee:4d:50:0a:36:1c:
                    d4:52:5e:79:b3:72:03:61:19:aa:45:bc:cc:fd:2d:
                    73:ba:7f:be:73:eb:42:ac:79:8c:0d:67:74:e2:2b:
                    91:de:d7:b2:15:40:c6:e8:af:e3:c2:41:6f:72:16:
                    55:a3:f4:37:5b:e9:71:24:7b:d1:1f:9e:9c:b0:00:
                    c1:31:18:e5:a5:b3:5c:e8:3b:30:02:d2:7c:e5:56:
                    18:5f:1f:4c:0c:3d:84:c8:d8:47:2b:f5:ef:6c:aa:
                    ec:09:10:66:c2:82:c3:b8:ec:31:52:cc:87:d5:ab:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:F3:37:3F:7E:A2:28:86:F0:19:07:65:DC:44:B7:51:20:98:03
            X509v3 Authority Key Identifier:
                keyid:70:F0:14:20:4B:55:62:3E:7C:B8:BF:D9:2C:2D:CA:D1:79:FA:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b7:7f:91:25:78:57:45:a7:48:ca:70:7c:9b:48:00:40:59:
         87:3b:33:5a:b5:01:2a:a2:98:72:73:cf:55:00:77:0a:7e:1f:
         3a:12:64:56:de:64:0c:90:3f:4c:8f:b0:85:e3:4e:0c:bf:bc:
         15:8d:92:ef:b7:f7:cf:8b:69:1a:71:c4:68:49:e2:e3:d7:91:
         eb:a4:cd:5a:06:9a:e1:d7:42:3e:9f:b2:02:c5:d9:1b:75:2a:
         24:f0:d5:ce:a7:ac:7e:0e:f7:c2:15:93:b4:70:27:c7:c3:b8:
         45:b6:5a:11:84:06:c9:cf:b6:77:77:89:34:f6:4a:82:f4:bc:
         a1:c8:4c:4e:6f:89:91:42:ec:3f:2c:39:20:a1:a2:af:9a:e9:
         23:bb:1a:5a:92:22:da:09:47:76:de:61:61:ad:44:e7:ac:99:
         90:3e:b7:48:03:95:e8:12:ad:58:c1:c5:14:b5:69:6e:82:4a:
         d1:35:a8:ac:d8:6b:72:86:f9:87:f7:fa:c4:1a:db:d9:e5:d6:
         f1:7c:ff:93:82:aa:8f:67:45:64:ff:3c:54:cd:01:d4:eb:82:
         ae:c3:18:7b:6e:56:58:b7:e7:6f:97:eb:06:49:70:72:6a:ce:
         84:7c:3e:93:cd:65:d1:4f:ed:6f:a5:ec:66:66:f6:ba:d2:2c:
         3b:63:12:17
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjY3OTExMC8GA1UEBRMoNzBGMDE0MjA0QjU1NjIzRTdDQjhCRkQ5MkMyRENBRDE3
OUZBQkNFNTAeFw0yNjA4MTgxNTM1NTBaFw0yNjA4MjUxNTM1NTBaMBgxFjAUBgNV
BAMTDTZhODQ3YmQ3LTIxY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUhIiEmIWcFto0sHj1+AoPx8W/wScNL6SpfrhHnEsCz7op9nyotWBqLdgAfJoM
tVjyYjGQqt/zy1PVVOkflqd/UhHdrlml92fL0Sh2c3kph3G2fnvKwmTeSSQqpzNg
MqHBy6GX0Iccc21m5T3SeqzKAJ5hYRLuCk8wiCuAYm1CTN3rfFUeCCsRrG9riCtk
MO5NUAo2HNRSXnmzcgNhGapFvMz9LXO6f75z60KseYwNZ3TiK5He17IVQMbor+PC
QW9yFlWj9Ddb6XEke9EfnpywAMExGOWls1zoOzAC0nzlVhhfH0wMPYTI2Ecr9e9s
quwJEGbCgsO47DFSzIfVqwVLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9WrzNz9+
oiiG8BkHZdxEt1EgmAMwHwYDVR0jBBgwFoAUcPAUIEtVYj58uL/ZLC3K0Xn6vOUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Njc5LzI2Q0E5NUE0OUIx
OTExRjFBRjAyMERCODYyMTFGOTcwL2NQQVVJRXRWWWo1OHVMX1pMQzNLMFhuNnZP
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY1BBVUlFdFZZajU4dUxfWkxDM0swWG42dk9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
Njc5LzI2Q0E5NUE0OUIxOTExRjFBRjAyMERCODYyMTFGOTcwL2NQQVVJRXRWWWo1
OHVMX1pMQzNLMFhuNnZPVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA3t3+RJXhXRadIynB8m0gAQFmHOzNatQEqophyc89VAHcKfh86EmRW3mQMkD9M
j7CF404Mv7wVjZLvt/fPi2kaccRoSeLj15HrpM1aBprh10I+n7ICxdkbdSok8NXO
p6x+DvfCFZO0cCfHw7hFtloRhAbJz7Z3d4k09kqC9LyhyExOb4mRQuw/LDkgoaKv
mukjuxpakiLaCUd23mFhrUTnrJmQPrdIA5XoEq1YwcUUtWlugkrRNais2GtyhvmH
9/rEGtvZ5dbxfP+TgqqPZ0Vk/zxUzQHU64Kuwxh7blZYt+dvl+sGSXByas6EfD6T
zWXRT+1vpexmZva60iw7YxIX
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:31 2026 by rpki-client