Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
File:                     MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json)
Hash identifier:          3zQoNASbatK6K1LiU/QKzLtPN8JzzpG9Ro47vUbs7TA=
Subject key identifier:   6A:04:2D:19:2A:9E:C5:8D:90:92:9C:F3:D1:40:E5:BF:0B:22:94:CF
Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
Certificate issuer:       /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
Manifest number:          0225
Signing time:             Wed 19 Aug 2026 03:22:58 +0000
Manifest this update:     Wed 19 Aug 2026 03:22:58 +0000
Manifest next update:     Wed 26 Aug 2026 03:22:58 +0000
Files and hashes:         1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: bGcijuzfx4WwewB92oXtf0pqCT+Oao9JEdbM9oNnt2o=)
                          2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: F1vpQpUV3bw/FrQH9h0dEOMw7zfdTnJwa9DPHf/lxCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
                          rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
        Validity
            Not Before: Aug 19 03:22:58 2026 GMT
            Not After : Aug 26 03:22:58 2026 GMT
        Subject: CN=6a852192-177c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cf:44:6c:8c:b8:ef:6b:5e:02:08:37:2c:93:
                    45:aa:4e:bb:8f:e1:3f:db:45:dd:82:8e:ee:a9:55:
                    84:2e:9c:73:69:2f:0e:a1:2c:f4:ba:a3:a0:fc:7c:
                    d1:bd:e1:b3:cb:2e:cb:b7:9d:80:bf:48:a6:9c:03:
                    90:7b:e6:ec:77:1d:4f:d8:18:04:84:03:ba:f3:45:
                    f4:6e:3d:4c:de:5b:1e:21:74:23:c5:53:1c:10:4d:
                    c2:74:c5:ba:e4:4f:96:65:8f:6c:ce:4a:bb:d9:36:
                    6a:16:92:4f:27:da:70:15:cd:47:9c:7a:c5:5a:09:
                    69:80:cf:0f:bd:2e:b8:ca:91:a2:75:6e:ac:80:7f:
                    c7:fe:8a:4d:5f:ad:d2:5a:11:4c:85:c1:92:a4:81:
                    25:f8:3a:94:ff:26:d8:f2:d0:92:8e:19:ae:ff:dd:
                    d4:9a:0b:69:d0:f8:a9:3e:bf:3b:ca:0b:b6:1c:c7:
                    b0:1e:36:db:13:36:bf:4e:f6:88:c8:03:87:61:c3:
                    9c:93:9d:f6:aa:44:7e:02:e2:8e:43:f8:05:ca:16:
                    c1:b1:3e:b4:38:0a:d8:f6:cf:3c:b1:17:9f:44:45:
                    cf:dc:76:a4:d3:2e:04:16:5f:70:d0:63:16:90:61:
                    a9:66:36:1a:c3:06:fa:dd:18:4c:84:68:56:27:32:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:04:2D:19:2A:9E:C5:8D:90:92:9C:F3:D1:40:E5:BF:0B:22:94:CF
            X509v3 Authority Key Identifier:
                keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:39:42:f3:ed:1d:e6:d3:ab:5b:6c:b4:da:db:02:76:86:12:
         66:f9:25:32:21:d8:47:44:d3:66:a3:ec:35:73:f3:d4:fd:39:
         6a:32:b0:a4:55:04:5f:ac:55:fb:cd:7a:92:ca:1b:ee:f8:fe:
         05:d9:b2:4c:f7:a9:7b:6d:68:ea:7d:01:b0:6b:a5:68:04:7b:
         2d:51:18:50:13:88:90:07:d2:37:25:34:7e:3b:39:ea:f5:7f:
         8f:9d:65:a2:d6:59:a6:bd:33:4f:7e:29:b1:ea:a1:9e:c4:8b:
         65:71:bf:01:16:de:ab:0c:42:dc:2a:34:2e:aa:3c:8c:45:47:
         8f:b5:bf:bf:00:b9:2b:01:d0:43:9d:76:af:f2:ec:de:6f:de:
         38:97:aa:ee:e0:43:25:81:aa:a1:26:15:c8:47:63:03:33:1b:
         3a:00:24:3d:f4:e4:76:cb:5a:4f:28:0b:26:da:92:e2:d7:b4:
         d7:a7:7d:c8:80:99:ec:82:76:03:87:36:fe:fd:70:2c:04:e0:
         aa:97:d6:86:6f:7a:8e:9d:b0:7f:43:ee:ec:70:d5:c2:58:c7:
         f5:2e:7e:f6:c1:79:ec:01:eb:69:9d:c3:99:f2:19:b1:73:3c:
         1d:33:33:3b:c5:e2:1c:1e:c7:ce:6e:7b:63:95:d4:b7:c4:b4:
         41:93:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:42:08 2026 by rpki-client