Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
File:                     iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json)
Hash identifier:          Kf3DikLMDX1k5kCjb//0v1UB4kbGKyncez+GrUpVJyA=
Subject key identifier:   22:85:79:4E:24:7D:18:0C:A0:8E:BD:C4:EF:DD:98:C8:92:AC:5E:F1
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Certificate issuer:       /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
Manifest number:          0132
Signing time:             Fri 17 Jul 2026 06:45:26 +0000
Manifest this update:     Fri 17 Jul 2026 06:45:26 +0000
Manifest next update:     Fri 24 Jul 2026 06:45:26 +0000
Files and hashes:         1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: 2QkNBgc7Iyu7VPDguZqQokCE7xelFxwVxUg1tTH7ems=)
                          2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
                          rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
        Validity
            Not Before: Jul 17 06:45:26 2026 GMT
            Not After : Jul 24 06:45:26 2026 GMT
        Subject: CN=6a59cf86-f0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:7e:9f:71:e3:b0:50:b2:cb:a9:55:fd:df:
                    a8:d1:96:23:d7:02:44:e3:2b:82:57:f4:5e:b7:8d:
                    9e:74:c0:78:88:8e:75:d4:41:fc:fe:d6:a6:18:52:
                    dd:be:46:1d:07:34:90:6f:56:46:9d:b4:86:cb:f6:
                    39:5e:ab:48:c4:e5:04:44:52:1d:a3:b4:ad:7f:38:
                    32:47:6e:17:2f:bc:25:40:ba:ff:77:5c:ba:f3:29:
                    91:2f:c6:06:ad:f9:c9:1a:75:e4:ab:88:29:f9:cb:
                    7f:d0:28:1e:19:37:fc:4d:47:15:9a:56:91:a5:90:
                    65:7c:08:50:ff:e8:40:20:08:01:52:76:87:3c:c4:
                    f5:b8:e0:c4:49:35:54:e3:6b:85:0c:65:08:10:5c:
                    d5:c9:06:b1:92:f1:a3:af:df:1f:58:95:0d:e9:d5:
                    a8:fe:c6:a9:40:10:a6:1b:fb:ec:05:05:9d:75:d5:
                    3a:d7:3c:e2:5a:25:76:ff:cc:03:24:80:29:c9:13:
                    d1:17:26:d7:06:bd:18:94:96:8c:28:93:96:52:cd:
                    c4:6c:6d:50:11:74:b0:d8:31:a6:6c:e6:93:29:ab:
                    40:f1:f2:d4:a2:6e:72:e9:17:90:9f:2b:fa:e1:89:
                    35:fc:19:3b:00:1d:b1:d8:3a:84:d2:e0:89:f2:a3:
                    f3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:85:79:4E:24:7D:18:0C:A0:8E:BD:C4:EF:DD:98:C8:92:AC:5E:F1
            X509v3 Authority Key Identifier:
                keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:06:c2:97:be:f1:00:d3:76:87:b9:b2:11:56:26:eb:e5:
         c9:54:31:1c:47:23:29:fe:09:d6:3c:62:f0:4a:d4:29:27:87:
         ea:29:24:6f:c7:c3:14:00:59:40:b7:84:e3:f6:99:46:c0:5a:
         77:32:c1:a4:1c:6a:e8:50:1b:43:99:a8:1f:b7:9b:61:26:ea:
         c1:26:48:78:f5:01:47:a6:18:44:0d:2a:4b:8e:6e:a7:64:10:
         42:be:17:b2:c3:f9:b9:5b:4f:f2:d3:cf:2d:d4:88:5d:3f:49:
         47:2c:f1:95:a7:a0:94:ac:55:7f:62:58:59:d4:a7:3b:ba:df:
         09:95:e0:1e:e6:f6:f1:14:19:23:c6:99:3a:98:02:1b:c6:de:
         06:cb:98:bc:8f:29:71:25:da:b6:0d:28:ac:69:a2:2a:6a:e0:
         e8:e7:a8:f4:5d:24:76:63:52:2a:68:e0:5e:4a:56:ee:12:db:
         8c:72:74:2c:2b:54:cb:12:b8:96:5f:6a:64:86:76:c3:b4:fa:
         fc:1b:31:5c:5a:d5:b4:87:32:a0:54:11:9d:5b:0d:5c:65:26:
         4b:84:ad:86:b0:ea:51:3c:ff:ef:52:3f:b8:2e:ff:13:ea:ff:
         1b:1d:f6:b9:2a:8e:e7:c9:75:12:89:0f:ff:8b:8e:c4:9f:63:
         c0:ae:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:03 2026 by rpki-client