Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File:                     aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier:          SBG/i+KTwBmERVCbhTIY9RywjKAFiUcfdoLi1Tu2X/0=
Subject key identifier:   F7:F5:BE:7E:2A:64:DC:54:5B:99:95:62:30:6B:90:AF:8E:CE:6D:1C
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer:       /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial:       359F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number:          3579
Signing time:             Wed 12 Aug 2026 15:13:45 +0000
Manifest this update:     Wed 12 Aug 2026 15:13:44 +0000
Manifest next update:     Wed 19 Aug 2026 15:13:44 +0000
Files and hashes:         1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: Dels6qTrKXeReg9uaOubAWAdOWqS7b+4PANoiDBYKhI=)
                          2: Gbm9aJwn4Grd0bUlvCyB3YP5o-E.asa (hash: GfzS/0sFUcU3nk0Xd84HKIBNrFFblmJGFMfuUp5nQmE=)
                          3: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: FGtCl+rkKsPwQBZaBP2SI6ZyzxIcUGM879HPiMEoLJQ=)
                          4: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: RQy3CULDGNVnkWRkKUELBca0bv/+qjtto2dvJUv9MVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
                          rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 15:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13727 (0x359f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
        Validity
            Not Before: Aug 12 15:13:44 2026 GMT
            Not After : Aug 19 15:13:44 2026 GMT
        Subject: CN=6a7c8da9-aef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:16:8d:ff:fd:5f:28:7d:e4:b9:79:6e:03:
                    ad:3c:28:53:76:b5:60:87:a4:05:e2:53:23:6f:07:
                    57:3f:61:77:a7:33:21:76:c2:66:d0:7f:28:09:75:
                    21:19:92:3d:bb:59:2a:b5:e7:8c:19:2b:e4:30:26:
                    eb:0e:f0:49:d3:aa:dd:31:dc:37:3d:65:a8:06:5a:
                    bd:84:54:ba:83:94:e4:75:bd:b9:39:f3:a8:21:ce:
                    53:6e:52:e6:15:aa:d5:10:3d:dc:b9:17:3d:c5:11:
                    32:be:76:e6:9d:dd:79:74:2e:dc:f3:f1:37:2f:b3:
                    e5:3d:da:f7:38:87:57:20:f4:9a:f9:1a:1d:55:74:
                    cc:b0:d4:58:b0:86:23:c0:d9:d1:60:5c:3c:6e:1a:
                    2d:e0:d3:5c:75:7f:1b:fc:07:0e:ad:72:c9:44:0c:
                    84:f4:f5:1b:8b:04:07:fc:7c:b6:7a:c1:18:22:7a:
                    85:fe:1c:27:5d:62:de:cb:ea:f5:ed:40:ba:47:f7:
                    46:1e:01:2a:e6:1c:f4:8c:66:5d:6e:a9:63:98:5a:
                    04:ee:3d:19:20:f4:b5:f5:73:1b:49:ad:c7:30:08:
                    8f:57:c9:bf:c0:e6:f9:67:84:7c:bf:1e:6d:37:09:
                    2a:b8:80:3e:13:d2:51:f3:e9:eb:d7:49:4f:85:93:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F5:BE:7E:2A:64:DC:54:5B:99:95:62:30:6B:90:AF:8E:CE:6D:1C
            X509v3 Authority Key Identifier:
                keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e5:3e:54:9a:d3:84:92:27:90:12:75:8e:82:83:67:20:fa:
         6d:03:bc:e9:88:3a:1f:f3:4d:63:52:91:d8:6e:45:6b:fb:a2:
         f2:40:57:a2:1e:b1:38:18:d5:2e:2d:9c:6d:7b:33:58:01:fc:
         16:b4:7c:30:07:b9:a8:d7:eb:74:d1:e2:d7:fd:05:ca:0b:33:
         ad:f6:82:f6:f9:42:98:d2:5b:cf:c3:a5:82:72:31:43:47:3b:
         71:fb:5e:cc:bc:0e:72:b9:51:d6:d3:ff:0a:25:22:1c:df:ea:
         41:92:ce:ef:93:43:5d:83:b2:50:63:e3:21:66:c7:a3:11:3f:
         8a:d4:58:c5:9a:3d:0b:4a:c0:17:88:73:d6:bd:e7:16:7d:9b:
         25:56:11:6d:d9:a8:32:ab:8c:1f:4b:76:92:d7:62:11:4f:71:
         e8:ee:75:73:63:17:fb:f1:28:95:63:53:cb:16:01:ff:79:5f:
         27:67:9a:66:3a:02:17:9d:c1:73:86:cb:cb:c2:90:c5:20:29:
         e3:c4:b5:a0:e3:66:ee:d7:4f:90:cc:0a:e2:65:b1:c5:87:11:
         15:7c:b4:19:1c:99:6b:db:06:fd:f7:11:76:e2:79:08:fd:3c:
         c0:47:2e:ea:5c:dc:19:fb:a1:3a:ba:d0:db:3b:3d:88:3d:bb:
         dc:19:9e:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0
REMwRUJENUQwHhcNMjYwODEyMTUxMzQ0WhcNMjYwODE5MTUxMzQ0WjAYMRYwFAYD
VQQDEw02YTdjOGRhOS1hZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMsWjf/9Xyh95Ll5bgOtPChTdrVgh6QF4lMjbwdXP2F3pzMhdsJm0H8oCXUh
GZI9u1kqteeMGSvkMCbrDvBJ06rdMdw3PWWoBlq9hFS6g5Tkdb25OfOoIc5TblLm
FarVED3cuRc9xREyvnbmnd15dC7c8/E3L7PlPdr3OIdXIPSa+RodVXTMsNRYsIYj
wNnRYFw8bhot4NNcdX8b/AcOrXLJRAyE9PUbiwQH/Hy2esEYInqF/hwnXWLey+r1
7UC6R/dGHgEq5hz0jGZdbqljmFoE7j0ZIPS19XMbSa3HMAiPV8m/wOb5Z4R8vx5t
NwkquIA+E9JR8+nr10lPhZMhSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPf1vn4q
ZNxUW5mVYjBrkK+Ozm0cMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE
QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx
bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtOU+VJrThJInkBJ1joKDZyD6bQO86Yg6H/NNY1KR2G5Fa/ui8kBXoh6xOBjV
Li2cbXszWAH8FrR8MAe5qNfrdNHi1/0FygszrfaC9vlCmNJbz8OlgnIxQ0c7cfte
zLwOcrlR1tP/CiUiHN/qQZLO75NDXYOyUGPjIWbHoxE/itRYxZo9C0rAF4hz1r3n
Fn2bJVYRbdmoMquMH0t2ktdiEU9x6O51c2MX+/EolWNTyxYB/3lfJ2eaZjoCF53B
c4bLy8KQxSAp48S1oONm7tdPkMwK4mWxxYcRFXy0GRyZa9sG/fcRduJ5CP08wEcu
6lzcGfuhOrrQ2zs9iD273Bme8Q==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:54 2026 by rpki-client