Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
File:                     Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json)
Hash identifier:          ZD/WbvILDlhuh5GPz66vV1d001fANcf42g4e46UWLlQ=
Subject key identifier:   F8:A4:FF:3B:97:AA:0D:DA:C3:30:B1:57:EE:2C:AA:0D:F2:10:F1:56
Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
Certificate issuer:       /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Certificate serial:       02BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
Manifest number:          02B8
Signing time:             Sun 05 Jul 2026 01:53:36 +0000
Manifest this update:     Sun 05 Jul 2026 01:53:35 +0000
Manifest next update:     Sun 12 Jul 2026 01:53:35 +0000
Files and hashes:         1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: EVultRGSlvWV972hKq7mmLbJRyF5bnF+HelcpI7MLn4=)
                          2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: oSOPa5PXvIuggnUAWdjwD208QEjv6p1RYpA0Azk+9ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
                          rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 01:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
        Validity
            Not Before: Jul  5 01:53:35 2026 GMT
            Not After : Jul 12 01:53:35 2026 GMT
        Subject: CN=6a49b920-039c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:37:34:6b:66:ec:8a:28:8e:fb:76:7c:74:
                    6a:20:47:ef:ff:ca:39:0f:90:76:b8:91:1a:05:95:
                    3b:94:4d:dc:30:42:89:57:a0:9f:57:fa:e4:79:6a:
                    d8:69:a2:0f:2b:04:ca:61:67:d7:c8:81:b6:19:b6:
                    c0:c4:ca:fa:3c:3b:24:0b:ac:94:ab:84:a2:8d:af:
                    4d:e8:8c:f1:ef:a1:e7:85:7e:31:56:cf:99:5c:0b:
                    a9:ae:9d:a6:89:8b:67:32:9a:6b:9c:f8:e0:8f:08:
                    4b:14:f7:df:0f:16:64:6f:a3:44:cc:f6:69:77:9a:
                    a8:18:ba:c9:f4:08:ef:27:7c:78:c7:8c:84:22:10:
                    b3:3c:de:01:73:0f:87:d9:1c:4c:53:2d:da:4a:b1:
                    2d:27:74:01:33:91:95:78:6e:0b:72:10:41:13:fe:
                    65:90:d7:f2:64:8d:16:c7:b1:76:54:c5:15:2f:08:
                    51:61:7f:e6:4d:e4:23:98:90:c7:ae:21:57:09:4a:
                    c7:31:53:0f:e8:94:ac:1f:21:7c:f9:29:48:28:e7:
                    5b:79:05:f7:bb:9e:a6:f2:07:23:58:e5:36:b6:9a:
                    1e:bb:97:ad:bb:88:f7:d7:cc:e9:5c:a8:db:87:33:
                    ef:d6:7f:c4:52:1b:3a:28:e4:6d:ca:a1:bc:4a:d9:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A4:FF:3B:97:AA:0D:DA:C3:30:B1:57:EE:2C:AA:0D:F2:10:F1:56
            X509v3 Authority Key Identifier:
                keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:84:bc:ed:96:03:61:2e:94:18:e4:a8:d0:70:e7:8d:91:29:
         09:e4:1c:6e:24:0a:f1:08:71:2e:bb:16:c2:e9:cd:f9:90:12:
         de:67:aa:15:f7:07:3f:71:d3:94:be:24:11:34:94:53:bc:cc:
         06:f7:a9:26:86:60:b5:0a:d8:72:35:31:13:2c:74:7c:66:90:
         25:52:16:4a:f0:f6:4e:fa:97:88:0c:9e:50:37:af:1b:f7:ff:
         8b:44:96:e3:38:ae:6c:0f:0d:7f:1d:6d:e6:2c:e2:83:0b:ba:
         76:7d:a0:2e:53:c1:7d:d7:60:c9:66:35:8b:0e:cd:51:8e:14:
         98:b9:89:4f:e6:69:d7:0c:30:75:82:c5:85:50:91:1e:15:f6:
         67:7a:3b:e4:3e:d7:ba:d3:e8:84:6b:a6:ec:f8:fb:fc:57:11:
         7f:a1:f3:f9:40:60:9f:8b:6a:74:0f:3b:9d:ba:69:cc:f3:2f:
         8a:e3:55:8f:9e:0d:9e:bd:31:7c:df:d2:a4:e3:0e:26:eb:ee:
         0c:fc:32:25:20:32:08:ea:6c:b4:87:51:4f:be:7d:25:fe:4c:
         6b:ab:f3:c7:60:55:b8:9d:f9:c3:3f:49:56:ae:4f:76:7b:4c:
         d3:da:c5:eb:3d:21:c3:4b:af:66:0c:ca:cd:4b:d2:2c:ae:ab:
         91:77:cd:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0
NjI1QjlBODAwHhcNMjYwNzA1MDE1MzM1WhcNMjYwNzEyMDE1MzM1WjAYMRYwFAYD
VQQDEw02YTQ5YjkyMC0wMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuo3NGtm7Ioojvt2fHRqIEfv/8o5D5B2uJEaBZU7lE3cMEKJV6CfV/rkeWrY
aaIPKwTKYWfXyIG2GbbAxMr6PDskC6yUq4Sija9N6Izx76HnhX4xVs+ZXAuprp2m
iYtnMpprnPjgjwhLFPffDxZkb6NEzPZpd5qoGLrJ9AjvJ3x4x4yEIhCzPN4Bcw+H
2RxMUy3aSrEtJ3QBM5GVeG4LchBBE/5lkNfyZI0Wx7F2VMUVLwhRYX/mTeQjmJDH
riFXCUrHMVMP6JSsHyF8+SlIKOdbeQX3u56m8gcjWOU2tpoeu5etu4j318zpXKjb
hzPv1n/EUhs6KORtyqG8StkSQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPik/zuX
qg3awzCxV+4sqg3yEPFWMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz
OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt
b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm
MVJGMGprdVlQY3RHSmJtb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFoS87ZYDYS6UGOSo0HDnjZEpCeQcbiQK8QhxLrsWwunN+ZAS3meqFfcHP3HT
lL4kETSUU7zMBvepJoZgtQrYcjUxEyx0fGaQJVIWSvD2TvqXiAyeUDevG/f/i0SW
4ziubA8Nfx1t5izigwu6dn2gLlPBfddgyWY1iw7NUY4UmLmJT+Zp1wwwdYLFhVCR
HhX2Z3o75D7XutPohGum7Pj7/FcRf6Hz+UBgn4tqdA87nbppzPMviuNVj54Nnr0x
fN/SpOMOJuvuDPwyJSAyCOpstIdRT759Jf5Ma6vzx2BVuJ35wz9JVq5PdntM09rF
6z0hw0uvZgzKzUvSLK6rkXfNXQ==
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:07 2026 by rpki-client