Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
File:                     AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json)
Hash identifier:          Yw1VOEKmSfnw7P3utAGrz/sYjMHHsKF/RwUJaquwAGI=
Subject key identifier:   4A:41:42:47:7A:A9:5D:82:5F:88:C4:46:B0:77:99:FE:69:59:87:7B
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Certificate issuer:       /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial:       02E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
Manifest number:          02DB
Signing time:             Tue 21 Jul 2026 02:16:32 +0000
Manifest this update:     Tue 21 Jul 2026 02:16:32 +0000
Manifest next update:     Tue 28 Jul 2026 02:16:32 +0000
Files and hashes:         1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: sQ9POBy1pYFnc/Iu5INM1CPDKZ4xKmxua+EWFS5RkjA=)
                          2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
                          rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
        Validity
            Not Before: Jul 21 02:16:32 2026 GMT
            Not After : Jul 28 02:16:32 2026 GMT
        Subject: CN=6a5ed680-fc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:38:d1:24:2c:7c:3a:f8:fe:fd:85:56:18:
                    7e:40:e5:d5:e8:58:19:0d:ee:28:f8:64:d3:b9:82:
                    75:31:ff:dd:f6:43:17:bc:3e:12:48:75:34:fd:d2:
                    0e:96:e4:f3:b7:2a:c4:f3:10:40:f9:7b:cf:a9:c8:
                    c8:89:70:75:17:07:88:e9:44:7d:94:c0:02:55:d7:
                    82:29:13:e2:1c:95:6d:62:87:de:17:6f:30:58:cd:
                    00:2f:a0:f4:4d:e8:d2:77:81:75:c1:d1:6d:5b:23:
                    ca:d9:d8:cb:3a:d9:05:1f:6e:9d:58:56:fa:c3:c8:
                    36:75:fd:12:57:8a:77:0e:7d:7b:65:9b:26:90:7d:
                    36:65:86:6b:b4:5a:c5:69:2c:2d:b1:a0:db:94:8e:
                    2f:c5:24:40:52:73:ee:1d:3d:cd:f7:9c:ad:fd:58:
                    89:cc:c5:df:73:17:8c:a9:4f:d3:35:80:4c:a9:b3:
                    e2:1e:42:b9:9c:46:ec:82:52:53:42:8e:b2:81:99:
                    d8:96:17:75:ff:82:e3:76:21:67:ab:d6:6d:b3:0c:
                    d9:70:e6:6c:a7:0c:15:ed:eb:f5:f7:f9:43:9e:70:
                    b1:3b:6e:eb:78:84:d5:84:e3:39:cc:33:dc:e3:db:
                    c2:85:50:df:c7:0e:8e:cb:5e:c0:b5:50:38:07:c4:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:41:42:47:7A:A9:5D:82:5F:88:C4:46:B0:77:99:FE:69:59:87:7B
            X509v3 Authority Key Identifier:
                keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:76:56:88:47:fc:83:38:49:52:e3:ee:52:54:4a:0d:c0:
         2b:d6:8e:19:8c:f4:d5:72:24:95:26:1e:22:4f:68:d7:79:fc:
         ad:1d:ba:b7:0f:49:2f:f5:a7:6e:e4:dd:30:cd:4b:ed:66:e6:
         21:a2:82:13:89:46:77:ed:8f:ab:2d:52:b2:50:84:e9:c9:f3:
         f5:cd:50:49:0c:a6:3b:96:e5:3f:cb:de:24:ee:74:c8:2b:2f:
         35:e8:4a:a2:c2:8a:da:30:fe:15:b7:bf:6d:e8:d4:3c:3d:8b:
         e9:1f:56:46:85:40:09:61:0f:af:81:97:75:f1:a2:88:ce:cf:
         df:76:01:ae:55:67:9c:1a:7f:0a:e0:19:ac:2c:89:52:a3:a0:
         3f:6f:ef:0a:43:68:93:1b:06:2f:fb:34:74:84:16:04:69:52:
         15:89:8c:93:4d:42:1f:47:25:be:0f:1b:f4:08:0c:c8:aa:1c:
         58:20:86:5c:5b:86:da:95:e1:2b:56:89:76:b3:49:ac:4b:4e:
         d8:de:b8:8c:2d:de:83:b7:b3:39:29:9c:d8:96:c2:a1:77:b9:
         e2:62:67:4a:aa:2a:38:55:d1:af:ef:7e:2f:b3:dc:f0:a8:e1:
         57:bc:4a:48:36:71:2c:73:37:1e:42:bb:2e:d9:83:88:0c:c2:
         a8:d7:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:30:35 2026 by rpki-client