Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
File:                     Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json)
Hash identifier:          Bts2FKJwpkZKsxIlIZVJa+RwxiVuNBgErO68RoAOVEk=
Subject key identifier:   76:5A:F0:22:C4:4E:E3:A5:34:1D:38:FD:82:FD:7C:D0:74:EC:60:58
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       2474
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
Manifest number:          242C
Signing time:             Thu 06 Aug 2026 15:46:26 +0000
Manifest this update:     Thu 06 Aug 2026 15:46:26 +0000
Manifest next update:     Thu 13 Aug 2026 15:46:26 +0000
Files and hashes:         1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: Tz7+M7KHuXjqRKpHMorFTMEoc7KLdSU1YMAXXhB8+ms=)
                          2: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: Vbmmu23AlBObytRTwt9j6G8iDN7Sx1IFw16gH03FE0E=)
                          3: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: JCPrD1uQLa6mO5UGYsREbdubhZ0qd7uDKpV9IJX0e5I=)
                          4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=)
                          5: 4800F752477911F19E56FD3F95833773.roa (hash: nKprgXFIoFtiYaag6EoueAF9e18RWxQbnixS8TTrznA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 15:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9332 (0x2474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Aug  6 15:46:26 2026 GMT
            Not After : Aug 13 15:46:26 2026 GMT
        Subject: CN=6a74ac52-eb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:47:9c:6a:a6:2a:c7:f4:2d:1a:6c:a9:d0:
                    b2:26:7f:88:bc:3f:d4:c9:5d:7f:c2:8e:31:c3:1d:
                    35:b2:29:6d:b4:9d:e0:0b:c9:a1:2f:b9:9f:c2:54:
                    59:8a:85:47:6a:85:3f:cd:56:a8:a0:10:6c:74:26:
                    7d:1f:30:15:fc:2d:f6:10:e6:01:0b:db:42:1b:44:
                    3f:d9:21:e2:09:1f:3f:54:d1:1b:96:de:ce:03:61:
                    0e:7c:a0:9d:18:cc:6f:e2:f2:09:2c:5e:61:37:fa:
                    02:d0:8b:1b:40:1b:e3:87:8e:7c:c8:e6:ac:d0:c6:
                    7a:cf:f8:3d:34:82:de:8a:cb:53:38:68:79:ee:32:
                    c4:8f:51:fc:32:1d:8c:fb:e4:d1:c4:c3:f6:c2:0c:
                    8a:b6:41:25:55:ce:e6:b7:5e:ec:5b:c6:b8:21:ae:
                    02:14:a9:d7:f1:b0:e2:cb:bb:f0:d3:e9:f3:a0:dc:
                    44:af:ea:96:cd:9a:85:c0:ac:87:e0:c9:20:12:8c:
                    b5:b4:3b:8d:48:82:01:44:42:0f:ec:c5:ef:07:04:
                    cf:04:18:f7:c3:e0:7f:71:41:b8:6b:47:87:a5:db:
                    78:0c:6d:84:a4:43:5a:fe:07:d6:f1:64:1c:88:9f:
                    ea:2b:25:00:34:6c:7f:8a:b4:59:b3:be:96:60:30:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:F0:22:C4:4E:E3:A5:34:1D:38:FD:82:FD:7C:D0:74:EC:60:58
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:08:35:f0:3d:9e:84:a9:54:e7:af:e3:9b:27:56:8e:5e:0e:
         9d:7d:f0:e7:a5:46:48:17:28:ce:f3:fa:87:b1:e8:9d:8f:92:
         8e:7e:48:9f:42:a7:94:a7:32:95:a8:81:5c:92:4f:8a:b6:1b:
         d2:34:ed:14:a6:8e:f4:1d:ed:68:95:2c:33:51:16:92:7a:3c:
         8b:5b:bc:a5:3b:84:e1:ea:7a:93:a1:cd:71:6c:af:21:2c:42:
         9e:ef:ed:30:d8:f1:93:77:db:0c:49:a3:ff:6f:bc:bc:85:03:
         74:62:03:1f:53:b1:ed:bd:dc:b7:7b:8c:de:c0:ff:e3:7b:dd:
         70:76:b2:97:87:5e:f8:da:43:e5:ea:87:01:d2:16:01:8d:fd:
         6e:e5:09:b8:e6:3a:9e:fe:82:17:d6:26:3e:ed:c2:81:0a:22:
         34:8b:6e:f1:47:24:77:fb:eb:e0:a4:5e:8d:bf:98:96:dc:e7:
         8b:37:b2:7f:4a:92:1d:c4:5b:5f:98:8c:47:0b:c3:5e:c0:ed:
         d6:da:e8:0d:0b:da:94:dc:22:04:92:42:79:5d:0c:57:93:7e:
         2a:1b:21:b2:2b:13:5d:83:f1:f5:c3:29:b6:83:db:00:07:34:
         46:5a:18:53:72:33:64:50:6d:89:30:5c:bb:b6:d0:2f:ba:cc:
         69:45:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 11:41:33 2026 by rpki-client