Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
File:                     -ibzSoM5sd823JwRkSBXw6WD9nM.mft (raw, json)
Hash identifier:          z6A3ytbiWnbnDOL9RkyPoFiD7xkc19/zaFFuRuBv7Ik=
Subject key identifier:   35:0D:E9:62:2E:D2:1A:DA:0F:36:61:80:AC:65:86:7B:97:CD:7D:3C
Authority key identifier: FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73
Certificate issuer:       /CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673
Certificate serial:       042F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
Manifest number:          0429
Signing time:             Mon 10 Aug 2026 23:52:14 +0000
Manifest this update:     Mon 10 Aug 2026 23:52:13 +0000
Manifest next update:     Mon 17 Aug 2026 23:52:13 +0000
Files and hashes:         1: -ibzSoM5sd823JwRkSBXw6WD9nM.crl (hash: e+npbNE7/hZA1J/Sg5kunArmGn1LOZhuaPPi9OTHgEs=)
                          2: 1AF42E76BBAC11EC8A07FE72C4F9AE02.roa (hash: 67LlS2Q1Ll84dJ+nyUpzM3AprVCuS78sQpZWBwZl53s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl
                          rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Aug 2026 23:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914711C, serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673
        Validity
            Not Before: Aug 10 23:52:13 2026 GMT
            Not After : Aug 17 23:52:13 2026 GMT
        Subject: CN=6a7a642e-77a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:7e:e5:2f:f4:3f:e4:51:d2:13:a3:a6:27:
                    34:58:b9:13:a6:37:eb:6a:ce:a2:2e:a8:0c:97:20:
                    50:fb:bb:56:15:cc:c9:92:31:fb:12:1f:85:ab:3e:
                    28:49:1c:fa:d5:59:52:c2:93:59:2a:cb:f3:49:d2:
                    6f:23:4c:30:0f:66:39:68:b3:ab:79:7f:5d:0b:7a:
                    74:c1:ee:2a:92:05:5c:c9:af:e3:4b:dc:1b:b1:21:
                    89:51:90:7f:bd:1b:56:cf:f5:a7:a6:52:63:55:e1:
                    90:00:d5:a7:06:8d:3c:0f:55:46:9d:b5:49:a7:de:
                    3f:53:47:cf:4b:66:ec:0c:a8:23:0e:f7:a1:fc:a7:
                    fe:a8:0c:be:a4:7f:7e:6d:c4:67:d2:95:2e:cb:4b:
                    bb:93:02:20:aa:1a:bc:52:27:f3:4e:c5:c1:0c:d0:
                    fd:8d:c8:f1:ca:c0:b6:0a:a0:76:15:26:38:6e:51:
                    b8:fe:a1:45:d4:03:d6:2d:9a:7b:6f:42:8f:db:e0:
                    22:05:7b:9e:0e:16:2c:8e:bb:5f:52:0b:1b:87:c5:
                    32:eb:f7:ff:72:2c:22:ef:b1:88:56:35:1f:aa:bf:
                    d8:80:06:b9:11:00:59:6b:14:c7:61:6a:1c:6a:2e:
                    08:4b:91:22:1b:62:d5:51:c8:82:f1:44:b0:25:35:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0D:E9:62:2E:D2:1A:DA:0F:36:61:80:AC:65:86:7B:97:CD:7D:3C
            X509v3 Authority Key Identifier:
                keyid:FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:be:1e:ad:90:53:7a:7d:d3:48:35:c9:54:d1:05:dc:fc:58:
         65:ac:1a:8e:c5:b4:72:9c:0d:97:7e:9d:ee:6e:0b:dc:13:6e:
         0e:c6:b2:35:6e:e3:14:bb:1b:4c:c4:97:98:fb:60:06:57:84:
         16:86:4c:ed:3a:9e:09:11:5e:75:e7:57:16:ab:b3:0b:c1:5c:
         50:d8:c8:4a:59:d6:60:ad:e6:18:5a:33:8a:0a:b8:f7:69:ea:
         aa:36:4f:bd:da:ca:5b:ef:a2:32:3a:3f:d1:53:9c:59:01:78:
         8e:b0:58:34:30:1f:a0:14:7c:33:6d:6a:ef:66:d1:a8:e0:bf:
         22:9a:95:8c:66:1f:be:22:d4:3d:d3:38:29:f5:c4:19:89:e9:
         1b:79:4a:fe:49:5b:43:e6:b2:97:d7:6b:80:e4:5f:e3:36:ef:
         bb:e9:4a:60:93:f9:37:fa:da:66:e5:47:1d:ba:54:d1:bc:f2:
         8d:0b:d8:dc:a7:59:91:42:89:99:96:1c:ef:75:33:94:9d:e5:
         57:da:17:2e:a6:c8:fc:12:c6:a4:28:bf:81:44:8a:49:67:54:
         3c:9e:1e:c2:8b:00:92:06:26:a0:41:e5:65:48:96:b4:1a:9d:
         cb:94:3a:ac:43:c5:b6:11:03:fa:60:41:e3:68:79:6e:d2:8d:
         d8:af:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:10:49 2026 by rpki-client