Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File:                     CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier:          zaoNH1DogPy4pQTC68SKsKtayTo+NHZqHKIChnIomJk=
Subject key identifier:   0D:35:07:27:30:AE:61:D8:28:D8:5B:FB:B6:94:08:C5:A9:5C:4C:C8
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer:       /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial:       0A46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number:          0A19
Signing time:             Tue 18 Aug 2026 20:11:38 +0000
Manifest this update:     Tue 18 Aug 2026 20:11:37 +0000
Manifest next update:     Tue 25 Aug 2026 20:11:37 +0000
Files and hashes:         1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: akoPybx+fAaQRNl/KtEv+Z/T/DSXDnH1toOV31utURc=)
                          2: 4EB8310C43EE11F19AC895DFAD833773.roa (hash: ywh+EspzzTB1z73ivawXczceUdTNF+vMHbVnAWHY+X4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
                          rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
        Validity
            Not Before: Aug 18 20:11:37 2026 GMT
            Not After : Aug 25 20:11:37 2026 GMT
        Subject: CN=6a84bc7a-8312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:79:bf:ab:95:01:0e:26:d2:74:8a:9c:3f:34:
                    ea:30:e4:1a:28:cc:00:6f:fe:60:ef:f2:f5:be:16:
                    ad:f7:42:92:7a:38:69:24:74:49:bd:a0:46:57:2b:
                    e7:78:11:aa:a2:e7:bf:e5:ed:c0:c6:f3:87:45:f9:
                    1b:80:c3:2c:c3:53:dd:44:c0:6b:5a:a1:1e:c7:30:
                    0c:ce:35:cb:da:88:39:17:c6:6a:03:31:3e:92:5c:
                    f1:30:ff:22:59:22:86:99:7d:32:e8:bf:57:81:53:
                    4f:4e:0c:6b:8c:37:cd:35:d6:fd:9d:dc:83:70:82:
                    97:82:86:91:0c:92:c6:29:f9:6c:de:be:35:6b:c7:
                    b9:0d:95:51:e7:03:ed:71:f8:8d:a2:8e:98:fd:e5:
                    01:ef:0e:32:47:63:7e:5b:9d:26:0c:97:9e:4c:5a:
                    53:47:78:5a:0b:d2:58:69:91:e1:e4:ea:d3:43:49:
                    97:a8:11:85:76:39:18:52:23:d6:17:6e:2c:2a:ce:
                    3a:48:d1:41:8e:48:96:06:cc:3d:ae:ab:57:39:57:
                    7c:b2:4e:f4:74:a9:43:d9:71:8d:7e:50:0a:81:6d:
                    21:f7:99:76:48:86:f2:22:96:e6:77:ed:62:b8:5f:
                    ff:06:40:5c:97:e9:08:9b:83:4d:19:3b:d8:c3:04:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:35:07:27:30:AE:61:D8:28:D8:5B:FB:B6:94:08:C5:A9:5C:4C:C8
            X509v3 Authority Key Identifier:
                keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:89:4a:ce:d7:15:c9:30:42:3a:26:ea:53:c6:05:ab:3a:ed:
         2b:de:5b:f3:c3:78:62:31:ea:df:71:49:32:26:95:2a:78:ef:
         e6:4b:3f:8b:25:3a:00:93:d8:84:32:2e:e8:f4:c9:b2:3b:ad:
         d5:98:c7:e5:67:54:4d:53:3d:01:d4:7c:dd:22:e5:ca:dc:4d:
         d6:97:a1:e5:af:b9:f7:dc:9c:57:77:5d:b7:6f:08:93:28:b9:
         b7:e1:57:2a:45:3a:1c:3a:7a:c5:f3:d6:81:3a:38:16:d1:5f:
         2f:5e:c2:89:3f:96:bf:64:6d:3c:ba:39:29:3e:d6:29:67:4e:
         73:93:45:7a:17:e3:c9:5e:b0:3b:24:bb:cd:ed:69:00:0a:c3:
         a6:58:26:7d:83:03:58:12:49:b8:d8:9a:0a:82:bc:05:f2:7b:
         d6:03:44:0f:cc:1f:9b:9d:e7:96:3d:a3:26:32:74:06:4e:42:
         98:0e:dc:95:4b:56:fa:27:f8:c8:b8:25:e1:f2:23:32:78:06:
         6a:03:b8:53:e0:69:ba:c9:ed:5b:2e:76:88:75:6b:d1:d0:bd:
         e7:50:b6:74:ce:c6:37:fe:ce:d3:c5:b6:17:a4:b3:d7:32:51:
         9a:f6:11:b5:18:70:45:4b:b5:1e:70:1c:b1:db:a6:d9:45:61:
         b3:a3:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:14 2026 by rpki-client