Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
File:                     tWQnMiZdQL91ypSp7IEZIRwbmzI.mft (raw, json)
Hash identifier:          +LZN6Gqdk8yp/VOGG7UerFqqqvRC2Ma+wvFMgad23E0=
Subject key identifier:   5C:D1:19:31:D4:86:88:B7:CC:9D:1C:F3:8E:EF:C2:71:2E:0D:BC:77
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Certificate issuer:       /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial:       2D23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
Manifest number:          2C6C
Signing time:             Tue 04 Aug 2026 15:34:33 +0000
Manifest this update:     Tue 04 Aug 2026 15:34:32 +0000
Manifest next update:     Tue 11 Aug 2026 15:34:32 +0000
Files and hashes:         1: tWQnMiZdQL91ypSp7IEZIRwbmzI.crl (hash: xoVsPn6C0ZwFNXbpXD1JlbmQyIsCIjZdmVxqNxNiCFA=)
                          2: 13461F60ABDC11EDAE837666C4F9AE02.roa (hash: ERyde/Gka5P6zXPyNt2BzYHHMs7m9I9h8bcGjPetJdo=)
                          3: E0CC928CABDE11ED954F5C84C4F9AE02.roa (hash: T2ATFndqif2rigzuI4qov++r1+kCWVIg5fV7GxHkRzQ=)
                          4: 8F199E5086EE11F19E006003A7EE528E.roa (hash: ZuAnAgHg5vFTNcsKh5KM85ZI9A4NW/8yy8AIKsgNOsk=)
                          5: zdpO0gyaOty9ncRPEfhtGvEBspY.asa (hash: irL2kj+5b38uZFTIC6OWAZtHNzaWLv9bPTPvqTlgBWs=)
                          6: 37BAE214429111F18FB6D217B2833773.roa (hash: 8DTZONsJGjymgnSZfnxpolvPLsYSk+tNdQgH6HrBSGI=)
                          7: 4462F034F0EC11EB9D0B176AC4F9AE02.roa (hash: A0kKCJ9LwtDmC1YEa/g9xgt0EE37Ohto39y+EtO3rt0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
                          rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 15:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11555 (0x2d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
        Validity
            Not Before: Aug  4 15:34:32 2026 GMT
            Not After : Aug 11 15:34:32 2026 GMT
        Subject: CN=6a720688-08f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:ac:0a:a0:62:08:41:1d:e2:f3:49:7b:ff:
                    37:9e:30:7f:61:fb:a8:b2:9e:be:88:7a:f6:32:04:
                    35:35:3f:ba:76:51:d1:f0:5b:17:65:3d:20:e0:1d:
                    8c:2e:09:d7:9b:71:ad:05:2f:e8:72:8a:7b:83:4a:
                    d8:e3:14:e5:77:93:68:a6:c6:c2:98:6a:2d:d9:e9:
                    13:de:25:cc:35:83:60:23:56:8e:6e:00:b9:37:dd:
                    9f:e2:71:3f:5a:58:4d:28:0d:ec:87:6f:93:fb:17:
                    65:18:4d:74:08:5a:b6:22:41:25:b3:18:85:37:7b:
                    d5:4a:a7:24:6a:1e:f6:2f:c4:b7:ea:b8:fd:70:77:
                    c3:9d:cd:d3:b2:bd:db:ed:fb:d0:d9:b3:96:b3:63:
                    1f:eb:6b:4a:a9:db:ea:52:b2:0c:1a:71:0e:e3:8b:
                    a9:67:9d:61:cd:12:34:3c:82:d9:e6:c2:6e:4d:34:
                    cc:40:9c:8e:79:fa:d3:f0:6c:42:88:96:5a:bd:34:
                    7a:ad:0a:e7:fc:54:13:93:26:8c:86:b4:54:1b:5c:
                    df:0a:27:47:4c:ab:1a:43:d1:39:10:84:54:b7:6a:
                    e6:81:d3:19:bb:af:82:ff:cd:bd:89:be:1f:5f:f9:
                    b5:67:4a:61:22:70:e5:60:10:c0:15:03:8e:71:17:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D1:19:31:D4:86:88:B7:CC:9D:1C:F3:8E:EF:C2:71:2E:0D:BC:77
            X509v3 Authority Key Identifier:
                keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:54:80:09:3e:58:de:86:48:4a:1f:5f:33:6a:45:a0:b5:
         c8:5f:53:92:6e:fe:0f:4d:ef:50:4a:79:9c:bb:96:10:23:50:
         66:85:7d:ad:68:67:e9:fb:26:55:13:54:65:ed:90:51:aa:0d:
         4a:d7:93:81:b7:25:d5:1f:b1:0c:7d:73:af:2d:32:bf:a6:91:
         d5:ed:52:2b:8a:06:be:66:dd:a2:8d:9f:87:e6:e5:4d:81:f9:
         3d:99:2c:4e:b6:be:e8:d8:a6:db:ec:b8:fe:0e:6d:c3:b0:ec:
         3d:b0:fe:73:6d:fd:8d:a6:16:82:f9:71:4b:83:d1:ff:59:34:
         23:8e:54:da:0b:73:56:db:ff:38:e5:fd:ea:26:8f:d0:80:b5:
         74:ea:a0:16:55:8b:63:0b:0e:91:b3:03:21:e8:ff:81:c3:73:
         c3:04:05:f7:3d:40:af:6a:84:8e:ee:7f:f2:8b:ea:d8:32:de:
         51:6a:fb:8d:a8:22:ff:a6:b6:cb:3f:09:2e:76:29:e4:17:33:
         0d:b2:06:ec:15:a6:5e:e7:34:0e:ba:d1:7e:6c:fc:5f:89:85:
         07:86:6b:2c:5c:db:18:ce:f2:b2:82:c9:0b:b3:60:8b:54:79:
         b1:d6:83:57:65:77:a8:d4:cc:27:92:29:87:59:e5:44:04:79:
         13:97:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:12:27 2026 by rpki-client