Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
File:                     RnF4Q-fTSLOez3uSSVUB_jVQujw.mft (raw, json)
Hash identifier:          mNG1bWvlDOm6oHfnQwuLpnu+uSJQWJASMGbgDWrWpa8=
Subject key identifier:   E6:35:B1:42:5D:0D:83:95:A1:C0:56:62:4E:A1:71:99:E8:07:7D:79
Authority key identifier: 46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
Certificate issuer:       /CN=A9134ACE/serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
Manifest number:          2A
Signing time:             Wed 19 Aug 2026 09:29:29 +0000
Manifest this update:     Wed 19 Aug 2026 09:29:29 +0000
Manifest next update:     Wed 26 Aug 2026 09:29:29 +0000
Files and hashes:         1: RnF4Q-fTSLOez3uSSVUB_jVQujw.crl (hash: 718xyEMw5UqgSnSgdsjp8sMEl+6Lg/9vjDYFepMXR5M=)
                          2: g8XYHoulscOdIzPLr2d3D2E_Iq4.asa (hash: xRoqthOZmfDfJDQzpKsFdbAkLfGrB9YrhCDM68yWLys=)
                          3: 270496C06EC111F198F60F1C67A30FBC.roa (hash: JtKOBE4F8rwYsWTEwFLdbKDrbkNvr+908F7G3Dfu+ec=)
                          4: 0B73271E6BAB11F1817F09047447A888.roa (hash: xzfJ1pesflkZcpLSv4PL+RRXAT+R09mM4Npl13DisnY=)
                          5: 83C1CE04704D11F1AE17E0CA6AA30FBC.roa (hash: +GmCDHEdNjQ06phpOZetCBBgH3kQBO7mbMb7ggzxIUU=)
                          6: 27B6241C6EC111F198F60F1C67A30FBC.roa (hash: 1vqnDMCOkfAA0RhjR6F0sutamrJDfPdesHktqXu9g8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
                          rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
        Validity
            Not Before: Aug 19 09:29:29 2026 GMT
            Not After : Aug 26 09:29:29 2026 GMT
        Subject: CN=6a857779-adbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:2a:17:4c:32:f8:90:90:1c:84:f0:ac:7f:
                    70:22:3d:5f:8e:6b:95:d6:cf:e9:61:d1:1b:63:56:
                    f7:a2:27:d1:a0:c0:ed:a0:8b:f6:42:34:94:f0:ea:
                    93:88:70:1a:27:c8:ac:e0:d5:fb:30:86:e8:14:27:
                    66:2c:97:0a:13:fa:dc:a8:54:4e:89:9b:48:31:aa:
                    e0:37:7a:14:1a:1d:30:e3:0d:a6:c1:3a:a7:84:83:
                    63:e7:03:96:33:d3:58:6b:81:51:0b:09:9a:06:9f:
                    ba:bf:b1:03:9b:4f:85:16:c3:e2:0b:83:f7:70:ee:
                    25:54:86:0a:4f:3f:1d:66:bb:81:09:66:e1:a4:39:
                    5e:07:cb:32:9b:90:33:60:3e:55:6f:60:82:a5:8d:
                    c7:0b:bd:5c:17:ac:e6:0f:f5:b1:97:ab:36:d2:af:
                    32:8a:0a:77:53:82:d4:dc:c5:8f:92:f1:e0:17:23:
                    32:0d:32:25:34:b3:40:3a:8e:3c:99:91:bd:5d:50:
                    40:7f:cf:88:dc:9d:25:a3:fc:d3:3b:be:78:9c:34:
                    fe:7a:ba:2b:5d:02:ee:20:9d:df:b5:7d:d8:83:e9:
                    70:4f:e1:af:15:4c:4b:2f:bb:7a:f4:11:48:de:96:
                    8c:35:9f:2e:72:86:d0:80:04:04:77:cd:0a:1a:2e:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:35:B1:42:5D:0D:83:95:A1:C0:56:62:4E:A1:71:99:E8:07:7D:79
            X509v3 Authority Key Identifier:
                keyid:46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0f:c0:e9:ea:da:0a:f1:ae:92:0d:15:c5:ef:b2:be:07:d7:
         56:32:76:95:8c:e6:f8:3d:8f:79:1e:87:27:f8:26:89:b7:1d:
         f9:64:62:d3:ed:dc:bd:81:62:2e:d5:a6:0e:58:6f:eb:9d:45:
         de:98:b5:87:98:68:e9:15:46:73:d2:49:57:91:dd:eb:a8:5d:
         1d:7b:7c:e6:56:f3:34:77:3f:7b:5d:95:c8:2f:29:80:66:5a:
         d3:87:76:e8:aa:cd:f7:d6:67:4a:49:6a:b3:84:8e:4b:8c:c4:
         28:d1:6e:2b:83:85:58:19:ef:33:16:f6:78:a4:8a:67:e0:be:
         a4:47:98:cc:e1:41:12:9a:f1:01:00:42:c2:04:4d:28:ad:09:
         ee:85:3f:fc:24:ff:67:e8:c8:1f:60:90:0e:8b:27:c2:4b:65:
         32:4c:c2:2d:d5:45:56:af:78:c6:21:ed:42:07:77:ad:83:47:
         8e:c0:aa:de:68:02:5f:95:0b:b2:da:a6:f4:90:2c:b0:b1:76:
         b9:b8:79:e1:d4:e4:e5:6c:95:0e:08:45:ec:06:c2:ab:63:e2:
         82:32:af:09:69:d7:44:46:8a:ce:8d:7f:e9:3d:07:99:a7:44:
         85:9a:32:47:2d:d0:f7:91:9d:1f:6c:92:80:d7:e4:df:44:02:
         ea:4f:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:00:59 2026 by rpki-client