Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
File:                     IAmPtDvZCsAy3VDJ-ufauiCggp4.mft (raw, json)
Hash identifier:          +ovkGOuQHQk294vZC1Dxcw5CMHP7Leoe9ZIX/Cl8lE0=
Subject key identifier:   86:1E:6F:7B:D3:EA:C1:60:E3:26:56:E4:D7:59:5E:47:4A:A7:CC:71
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Certificate issuer:       /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial:       029E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
Manifest number:          0290
Signing time:             Mon 27 Jul 2026 03:09:02 +0000
Manifest this update:     Mon 27 Jul 2026 03:09:01 +0000
Manifest next update:     Mon 03 Aug 2026 03:09:01 +0000
Files and hashes:         1: IAmPtDvZCsAy3VDJ-ufauiCggp4.crl (hash: 0pNBF79NiPUtVOhK22e0wOZuSax4UcEO2qtzD9smRYo=)
                          2: DF49E576A61711ED887EC04CC4F9AE02.roa (hash: QBNiuWqsSFvTii1XjINxNAIsFqpiHDWIk0XlWF5qx7w=)
                          3: CC636E14FFE011EDA35F8946C4F9AE02.roa (hash: ldsVU3+f9Ys8c9jjGtZsorbtRuuuB7CFx692x5DpYKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
                          rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914334E, serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
        Validity
            Not Before: Jul 27 03:09:01 2026 GMT
            Not After : Aug  3 03:09:01 2026 GMT
        Subject: CN=6a66cbce-8b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:e8:d1:e0:69:2b:61:2f:b2:ec:5e:9e:92:
                    53:25:9f:b7:21:08:90:78:28:ce:20:5b:3b:39:4f:
                    5e:f8:03:5c:b8:36:9e:40:94:f5:f0:46:c3:b7:78:
                    ff:e5:8f:e1:99:9d:de:7e:fe:d4:67:4f:eb:a2:44:
                    18:1f:4d:b3:75:99:ca:4b:f6:cf:44:72:1a:2f:d1:
                    2d:8e:c6:4b:0b:32:b1:92:03:83:56:e2:ab:b3:13:
                    68:95:8d:c0:87:81:16:21:cf:83:e9:2b:6f:0a:98:
                    75:66:13:6c:52:0a:23:5b:14:d9:a1:b1:77:25:ea:
                    fc:4e:79:0c:ea:a0:4b:ca:43:5b:97:cc:c0:74:87:
                    ad:fa:c5:05:65:72:2a:bf:e3:7a:af:dd:a9:bf:0e:
                    ed:ce:fe:d7:03:ad:36:53:a2:23:67:23:76:a5:9d:
                    50:53:79:3c:29:f2:7a:dd:6a:33:4b:4c:fd:14:ec:
                    74:b9:55:61:e7:ac:ad:4f:30:77:34:f6:a3:84:17:
                    90:66:22:5e:e5:b1:bc:2a:5f:a1:91:87:83:d0:0e:
                    f2:67:b2:74:cc:05:86:66:a2:4c:ff:e8:db:42:c6:
                    2b:41:b3:79:fb:c2:a9:5a:6e:22:9f:e4:90:99:0e:
                    77:e3:67:a3:b1:9b:1f:84:65:db:08:1c:d0:a8:8c:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1E:6F:7B:D3:EA:C1:60:E3:26:56:E4:D7:59:5E:47:4A:A7:CC:71
            X509v3 Authority Key Identifier:
                keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:12:65:f1:ef:9f:d2:d7:e7:5e:58:f9:b3:90:c9:f9:6b:68:
         bd:70:7c:d1:6b:c1:06:9b:13:86:f1:75:f3:3c:1c:04:cb:a7:
         e7:75:62:57:e3:5b:ac:ad:48:52:27:f5:f8:bc:b1:2e:61:45:
         cb:ea:61:96:92:bd:d1:b9:1d:b6:70:fa:1f:04:58:7d:28:b0:
         73:64:eb:1e:8d:f0:e8:db:ee:91:51:19:c3:e5:27:5d:93:59:
         73:f1:e7:8a:a2:17:88:df:db:0d:c0:32:dc:94:50:ea:26:f6:
         82:96:f4:a3:7f:c8:87:d9:18:de:6a:55:1c:9e:4a:24:fc:45:
         1e:db:0f:33:86:81:55:8c:e8:22:0b:84:c7:d2:0a:2e:89:f3:
         c4:b4:3d:42:da:34:fa:5a:76:f9:1c:ba:ff:d0:32:25:30:56:
         3d:6b:5c:01:a2:b5:98:4e:aa:79:14:0e:be:0a:d8:15:16:ed:
         17:47:44:c8:f2:73:11:dd:99:df:8e:c6:cb:1d:c1:3c:ea:b1:
         5b:00:e0:f1:a2:0a:a5:d3:8f:9a:ab:fd:39:05:5d:42:8f:28:
         fa:58:95:8d:6f:58:03:32:c0:c7:45:00:ae:0a:b1:1e:df:d5:
         d4:06:db:c4:d0:07:23:a1:5e:84:dc:f9:68:57:07:c0:b8:84:
         bf:03:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:25:19 2026 by rpki-client