Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          LmB5A/zivmadkVAYwKpkBBnSDYbeX4YDoPLEf8IN3hI=
Subject key identifier:   19:BE:04:94:87:8E:18:8E:6C:F5:A9:E4:A7:56:88:01:C6:13:90:CA
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          0207
Signing time:             Thu 27 Aug 2026 03:04:38 +0000
Manifest this update:     Thu 27 Aug 2026 03:04:37 +0000
Manifest next update:     Thu 03 Sep 2026 03:04:37 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: G2cabNHi5fc6atmbG1LTjbbV5KwBedmwqO/nnJFwI9k=)
                          2: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: rtxZNHAmUN+FuTjKHb7X3f4iRwjxEjW+Bf2CPl1P+z8=)
                          3: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: Gs+o75R0CrmcD+NQIkcYwtnmpB0ywQTdRm5wnPFVnIM=)
                          4: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: SfV5OG0U5jsZ6Mwuu8Y5IVx/FMdaDgzIJTsS5IAAOGI=)
                          5: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VDY+BPq5lSeRusGk8bxhC79JQgZcEdSIsVPdLXN6r9Y=)
                          6: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: N8v/F0kkHOcAXXcaXcs+RFT9ux96p8fZZgpGPcvAFVg=)
                          7: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: PKvSSpOGOUZkaKayjQ0ld+FA1UfUrUiyGl2E5RZXAzw=)
                          8: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ECHAhZZ0CVyTf5Z6KxlgeILhQqidZfMXf11w6LMS5Rw=)
                          9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: hmZ9rhVcrGO06WP8qu78jvi4b6IvbPBAGiBlO+wAulM=)
                          10: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: sb5ey6r6KthuUUgBgPz/nG3qYIAoINFMyiJ2oK7kvBU=)
                          11: ABCE17E0E15511F0A05B89F1756F56BC.roa (hash: QYg5E4x9LMPZOJAculgNlzjCkNXYjlhGRkbG+GBuYHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 03:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Aug 27 03:04:37 2026 GMT
            Not After : Sep  3 03:04:37 2026 GMT
        Subject: CN=6a8fa946-fe76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:68:84:07:a9:1c:92:64:a8:f1:fa:20:a4:
                    5b:4e:d2:5a:b4:91:e7:52:56:7b:37:5d:4e:d3:f3:
                    f7:4a:a1:75:f3:75:db:b6:22:5e:58:a3:2f:2f:18:
                    a6:62:3a:93:1b:8a:c3:4a:ae:40:c7:aa:63:3f:95:
                    8f:27:ae:28:69:af:9a:f2:5c:3f:b8:87:f3:0a:01:
                    8e:76:7d:9e:f3:33:af:9b:72:33:6f:bb:dc:12:2d:
                    1a:99:aa:fc:65:21:1b:5d:a2:98:5b:ec:d4:24:11:
                    5e:cc:19:f6:e9:ff:c2:98:59:6c:b2:22:78:cf:cb:
                    a4:ae:ff:9b:88:8a:e8:09:30:55:3d:70:36:fd:ff:
                    24:8f:4d:c9:bc:7a:16:80:9c:d5:f7:c8:ce:a5:5d:
                    ee:aa:45:3e:5b:3f:be:9f:74:ca:e8:b5:60:cd:bc:
                    de:0c:a3:8a:b1:e4:d6:5e:ef:9c:9b:9d:f3:1d:52:
                    8b:d1:14:c6:40:42:5c:5e:fd:28:82:f9:ac:ee:cd:
                    36:60:24:2d:cb:3e:95:b6:e5:85:00:52:92:6e:4a:
                    0c:e5:6a:9e:85:02:e1:c2:10:06:ca:3f:5f:35:81:
                    98:da:8c:76:d4:d2:3c:ad:a5:15:e9:56:22:ae:8f:
                    7b:b6:62:09:8c:65:6d:dd:7e:ec:85:62:17:be:ae:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BE:04:94:87:8E:18:8E:6C:F5:A9:E4:A7:56:88:01:C6:13:90:CA
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:15:a9:a4:c2:87:73:00:58:7c:93:e9:44:0b:f9:fa:0c:2a:
         90:0c:7c:94:4b:18:73:8a:d2:fc:8a:95:6a:00:63:c7:74:16:
         ef:5f:59:dd:18:a4:83:03:c2:e8:7c:7e:51:0b:df:6d:7d:6a:
         29:c8:63:41:09:fd:f6:db:66:40:ba:bd:4d:92:aa:ac:6c:3d:
         59:88:1a:37:8c:8a:ae:b3:c6:38:5a:94:9a:1d:db:d0:05:42:
         ec:91:97:2a:b7:7f:95:67:2a:f0:66:0f:63:3d:78:4f:1d:97:
         f1:04:76:05:42:3b:2c:57:28:ba:26:53:54:92:a5:87:02:6b:
         c1:e2:4f:81:ea:18:a3:42:92:de:53:6d:a9:93:82:98:16:9f:
         02:9a:e2:a7:f1:05:cb:e7:43:31:f1:85:6a:31:de:6c:72:61:
         88:bb:5e:9c:6a:0c:14:bf:dc:99:34:90:01:35:5c:f6:d5:47:
         6f:5f:be:b3:39:4c:04:83:5a:cb:10:6c:00:1f:9d:66:2e:43:
         a8:ce:74:79:89:1e:81:33:bc:dc:e0:0e:5f:a7:53:48:90:9e:
         45:c0:b6:3e:54:cf:7a:62:78:3d:6e:64:fa:95:90:8d:c6:fe:
         34:65:f7:ea:e9:d1:bf:4f:64:d5:57:ab:ca:23:d2:ee:ec:2a:
         ab:12:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:06 2026 by rpki-client