Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
File:                     MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json)
Hash identifier:          QjFdKyRT34TnL0kd3sNclWtTMfmN8N5mNUdPITRJhwA=
Subject key identifier:   66:DC:C6:96:03:DE:A3:4E:39:5D:F8:14:1B:EC:EA:CA:AE:EB:C0:D1
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Certificate issuer:       /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial:       0BB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
Manifest number:          0B95
Signing time:             Tue 18 Aug 2026 19:26:14 +0000
Manifest this update:     Tue 18 Aug 2026 19:26:14 +0000
Manifest next update:     Tue 25 Aug 2026 19:26:14 +0000
Files and hashes:         1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: yUp+jBqXvuD/ZEUi66ZylQcc2GnJyX9HOrgJNNs+gec=)
                          2: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: 26lgAN5q1jBbqIZ//Uh2LoUZjyzoYehnxO9iBj1I6uw=)
                          3: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: riMNb3NhwBf/w1oOR93/weOT1W1k0o3vTmjn2YYoeRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
                          rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999 (0xbb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
        Validity
            Not Before: Aug 18 19:26:14 2026 GMT
            Not After : Aug 25 19:26:14 2026 GMT
        Subject: CN=6a84b1d6-9524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:44:ea:c0:21:b0:a1:68:81:d1:63:bd:de:
                    7f:6d:75:99:78:9e:4c:0a:9d:17:be:b5:ca:7b:2f:
                    99:f3:30:73:b0:ed:7d:04:bf:4f:66:b7:4d:58:88:
                    9e:d6:4a:46:74:28:52:f1:cd:0f:a9:20:b8:9b:4b:
                    88:02:42:ab:ad:85:37:6c:13:c9:a9:c4:15:6c:e9:
                    ec:6d:7c:08:57:4b:f7:67:58:6f:00:50:6e:ba:ad:
                    f0:54:11:ab:2f:8d:44:52:67:a4:8d:1a:95:63:8d:
                    d4:7e:02:73:fa:b7:b2:f9:d7:bf:86:0e:98:9e:e2:
                    e0:99:8f:ea:8f:7c:2c:7c:69:9e:1b:8f:b9:61:94:
                    1d:b7:dc:85:e5:54:0e:d4:15:0c:4f:3c:18:1b:29:
                    f1:5d:62:98:1c:b9:be:c9:7c:97:23:b3:ae:1b:52:
                    1f:3a:fe:e2:84:78:6d:30:0e:bb:41:66:4a:34:db:
                    ba:6e:32:68:9d:69:bb:31:d2:4d:8d:b7:60:1d:25:
                    f9:90:34:96:4f:ba:5a:83:fd:34:08:b1:01:ee:17:
                    39:7f:01:9c:2c:33:eb:fc:0e:3e:b4:a4:11:c8:14:
                    4e:0c:41:f3:f1:c4:b3:3b:af:5b:6e:8b:2a:57:0e:
                    ca:ea:c3:a5:a2:1a:52:56:bc:47:cf:a4:ce:5f:1d:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:C6:96:03:DE:A3:4E:39:5D:F8:14:1B:EC:EA:CA:AE:EB:C0:D1
            X509v3 Authority Key Identifier:
                keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:83:f4:a8:77:c5:98:d3:c2:3a:41:72:8b:d3:07:c9:e2:ea:
         f1:3d:c8:42:96:b4:d4:59:81:87:fc:88:c6:c2:55:f4:33:5d:
         25:9d:1a:dc:45:25:94:7d:79:69:1f:2e:35:fc:e7:ad:47:dc:
         2f:f5:d4:6d:92:30:5b:8f:71:76:be:0c:11:cb:35:24:82:12:
         eb:fb:44:7e:ec:b7:ea:d5:10:d7:6f:cd:85:51:61:fd:a4:cf:
         b5:a4:1b:a5:28:84:e1:a5:03:78:45:e4:61:36:4d:41:e4:cc:
         4f:0e:12:95:c3:a0:91:4a:fc:cd:57:2b:7c:1b:b8:46:02:92:
         fc:39:32:6d:02:88:d4:b1:94:7a:dc:e9:e5:58:13:26:8f:b1:
         ee:a3:f7:0f:58:22:fb:ae:07:16:ab:f7:2b:17:3b:7d:c5:8f:
         ea:d2:48:50:1c:fe:d2:73:45:79:1e:1d:f9:96:1a:f9:87:44:
         67:f5:ca:72:cb:e7:94:eb:8e:35:c3:3f:f5:c9:3e:b9:c3:2b:
         9a:0c:ee:d4:9b:d6:57:23:67:de:1f:70:ec:4f:95:a6:f8:b7:
         3b:3a:3c:c9:1c:1e:cf:1c:c5:ab:86:89:b6:ee:c6:a0:1f:67:
         5a:8f:f3:d6:6d:3d:8a:56:63:08:82:8e:b3:84:d8:7a:e7:e6:
         07:71:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:42 2026 by rpki-client