Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
File:                     42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json)
Hash identifier:          Z9UJm9t6vSAfVx1p3+XA281OPc6PhbkCRxPcvsI3WgA=
Subject key identifier:   B9:DC:CD:94:F7:B7:AB:D0:B9:EC:08:6B:25:DC:B5:DF:3C:85:61:60
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Certificate issuer:       /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
Manifest number:          010F
Signing time:             Mon 03 Aug 2026 07:25:53 +0000
Manifest this update:     Mon 03 Aug 2026 07:25:52 +0000
Manifest next update:     Mon 10 Aug 2026 07:25:52 +0000
Files and hashes:         1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: 5ami8QsZb/x58fBoEZv9+Nvpm4sp7ExpJOa9bMwxAw8=)
                          2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: pelY/uHx6kDkE6LCBISkdm7PFKfU0bUQR1oP68K+NMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
                          rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 07:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
        Validity
            Not Before: Aug  3 07:25:52 2026 GMT
            Not After : Aug 10 07:25:52 2026 GMT
        Subject: CN=6a704281-efcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:78:7b:3b:e0:e6:5f:a3:2d:e1:f0:73:0f:
                    bc:6a:b8:fb:ff:7f:a8:cc:b7:65:94:6e:58:75:10:
                    a0:66:12:8d:e8:ce:6d:6f:92:60:a6:61:f1:3d:6f:
                    42:8c:2a:6b:a0:69:41:19:c4:f1:06:2e:e6:b5:c6:
                    1e:79:0d:c8:c2:ce:a5:be:a7:85:3b:80:ac:25:c6:
                    1b:05:67:32:84:d4:73:6f:4b:b1:42:01:0f:e6:cf:
                    5b:1e:f1:0d:7e:dd:50:a4:f8:ea:11:62:d9:ac:1e:
                    c0:35:58:ce:a5:da:c7:b6:3f:3b:21:ed:65:75:c2:
                    cd:93:84:1a:83:8e:40:43:95:ec:74:cf:ad:8c:ba:
                    44:56:ab:f9:7d:a5:d2:f8:a9:2f:9b:56:2b:90:14:
                    24:26:a0:a1:2f:77:59:a6:15:d2:21:5d:04:d1:03:
                    c9:5c:24:3d:5d:2e:53:0d:05:b2:84:35:25:67:f8:
                    70:ab:98:60:6f:ca:3a:9b:a6:d1:ee:4b:50:fa:92:
                    f2:46:fb:d4:a2:ec:a4:27:e3:67:e8:51:7c:78:f4:
                    7f:bf:6b:e2:81:17:7f:18:94:df:a6:88:00:88:b4:
                    5b:27:30:2e:e3:18:e5:1e:7d:2e:bb:cd:f1:70:14:
                    d6:6c:29:56:a6:69:a8:47:82:1b:12:e9:10:a2:91:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:CD:94:F7:B7:AB:D0:B9:EC:08:6B:25:DC:B5:DF:3C:85:61:60
            X509v3 Authority Key Identifier:
                keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:11:8a:d6:e3:86:5d:bb:9e:cb:06:65:ac:6f:cf:97:3e:08:
         7c:3e:05:8d:66:a3:35:aa:bb:63:08:05:30:06:2c:ac:de:69:
         7a:79:87:4b:dc:c4:45:82:63:89:f7:4f:dc:c1:bc:50:6e:e0:
         48:ed:22:d1:fa:9a:11:5d:b3:ea:ea:ab:16:79:ff:d7:21:c6:
         f3:6e:50:cf:e6:a8:27:79:1c:3a:ac:24:5a:59:83:05:14:ab:
         1d:02:13:b6:6a:e3:f0:bd:4b:3b:be:d7:a1:ce:e4:a5:cc:dd:
         f0:97:3a:c6:73:41:cd:fe:22:28:ce:d0:ce:08:d0:19:e3:8c:
         eb:a0:7a:71:f2:5b:44:9d:36:df:99:c7:31:5b:5a:db:c0:9f:
         9b:ad:a0:77:91:06:e4:33:96:cc:cc:35:12:57:02:d4:83:5b:
         50:97:5c:1b:f7:75:3c:fd:7d:68:23:36:9e:61:80:43:3b:57:
         7c:1f:b8:ed:6c:3e:10:94:69:25:4d:93:36:f4:89:4b:a3:c8:
         15:29:a2:ee:6a:f8:90:3d:97:e1:91:c0:ef:ac:6a:38:16:41:
         14:d4:fe:b1:a8:94:7f:9a:f1:96:6a:65:4b:2b:33:49:80:5f:
         02:1c:70:57:93:e2:1e:d0:76:bd:05:af:08:fb:8f:85:d1:e7:
         93:af:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 21:01:26 2026 by rpki-client