Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
File:                     RrMUYkbIqOvcBwyRKtn1czFjUfM.mft (raw, json)
Hash identifier:          wYOFStfpJ9GVqEgFhzqBwWVbbCL18wFte3/ID/v5bzM=
Subject key identifier:   C9:CB:04:64:8E:0C:48:56:7F:DB:EB:0A:75:8C:FC:BF:E2:56:97:38
Authority key identifier: 46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3
Certificate issuer:       /CN=A913B25C/serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
Manifest number:          38
Signing time:             Tue 07 Jul 2026 09:51:46 +0000
Manifest this update:     Tue 07 Jul 2026 09:51:46 +0000
Manifest next update:     Tue 14 Jul 2026 09:51:46 +0000
Files and hashes:         1: RrMUYkbIqOvcBwyRKtn1czFjUfM.crl (hash: MimyNuvgvV0a5/OKisXdCNKuyQMdUHjKkQABpce+L94=)
                          2: B7B0933824D711F1BC6B08E2AB833773.roa (hash: qfb5OhL2JYl88uq6Z6fcjDjGJqh3quT1pfhxv2w56CQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl
                          rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B25C, serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
        Validity
            Not Before: Jul  7 09:51:46 2026 GMT
            Not After : Jul 14 09:51:46 2026 GMT
        Subject: CN=6a4ccc32-82c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:8c:50:26:bb:ed:02:21:45:cb:3c:3e:19:
                    5d:8c:e9:5a:74:3e:90:4c:b1:f4:b2:70:7e:9d:56:
                    5d:51:5b:23:a7:84:a5:4d:b6:11:cb:87:c4:1c:1f:
                    2f:3a:27:26:a8:cc:64:c9:56:a7:d0:71:d3:8c:9c:
                    f3:b8:bd:05:4c:66:bd:a2:93:7b:5d:62:e4:23:19:
                    15:0d:89:4a:a3:64:e0:97:a6:5a:a6:52:6c:a8:e5:
                    a6:a4:a3:bd:64:bb:92:a3:c7:b0:23:98:99:e7:af:
                    1c:b7:3f:ee:04:c9:71:d2:72:60:00:d9:50:90:a0:
                    71:37:2d:ea:86:54:3e:cf:29:c6:4e:f3:37:bd:9c:
                    b0:1e:75:f3:7e:92:47:74:7b:8f:6f:d9:02:1b:65:
                    c1:7f:01:41:c9:a7:e3:bf:dc:5d:2d:35:35:57:4c:
                    18:65:e2:79:a9:4f:a9:79:00:3e:be:c2:f3:ae:a3:
                    89:6c:7a:3d:d7:42:67:3b:2c:ae:bc:f3:87:03:11:
                    1e:1e:2e:6b:9b:97:ab:a6:82:ab:3a:e1:12:fa:d7:
                    fa:cf:ca:d5:26:36:a8:f6:36:69:2f:c7:2b:c7:12:
                    d0:d0:32:fc:f7:38:b1:02:51:12:32:1c:f5:1b:8c:
                    5e:31:de:66:62:23:d4:3e:14:8f:62:eb:af:b3:3d:
                    07:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CB:04:64:8E:0C:48:56:7F:DB:EB:0A:75:8C:FC:BF:E2:56:97:38
            X509v3 Authority Key Identifier:
                keyid:46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b9:ee:47:3c:8f:39:62:ca:c4:3d:46:50:d4:fc:b3:ad:08:
         4f:53:87:8b:2c:34:1e:0d:1f:0c:56:4d:fa:6e:f5:e3:9c:a4:
         70:ba:fd:3b:1f:e8:b4:34:85:51:aa:d5:de:58:a5:35:37:0b:
         d5:73:63:bc:ba:76:d5:a3:36:44:ec:a3:57:35:de:51:2f:7e:
         9f:df:3e:58:5b:09:e5:75:db:49:b6:38:11:e1:75:05:62:27:
         6a:cf:58:0a:de:24:3d:42:ee:2b:b4:3e:30:f4:80:1c:b3:87:
         97:ff:53:87:eb:76:61:6f:b1:13:f4:13:f0:ab:65:f5:9c:de:
         4b:b0:f2:42:a2:34:d6:b5:92:51:19:14:74:c3:5a:35:5d:cf:
         f1:6b:c6:14:ca:55:e1:2b:41:7a:72:9c:d2:10:2d:be:82:6e:
         f4:c3:af:1b:9c:bf:41:9c:fd:1a:cd:da:b4:f9:6e:28:7b:25:
         39:8c:08:e3:30:f3:d4:44:0c:90:fb:25:31:c7:18:7c:c8:d8:
         da:06:3c:59:7a:9c:fd:0a:bc:82:bb:5b:9a:50:08:8c:e1:2d:
         8b:99:ae:80:f1:22:45:1a:d1:89:a6:fa:67:16:ab:32:fd:88:
         03:45:ae:cd:f3:ff:2d:5c:c3:05:c0:7c:30:47:e5:da:b7:5b:
         c1:11:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:03:29 2026 by rpki-client