Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File:                     NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier:          IY3SmvCjX/MzeE5Pz1J5LEnLZts2OyITOBDZABaX3qM=
Subject key identifier:   70:0D:7A:9E:87:D8:FB:CE:27:46:1B:2E:B2:A2:79:CC:25:08:CF:31
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer:       /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number:          3F
Signing time:             Fri 17 Jul 2026 07:36:37 +0000
Manifest this update:     Fri 17 Jul 2026 07:36:37 +0000
Manifest next update:     Fri 24 Jul 2026 07:36:37 +0000
Files and hashes:         1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: W2hAUugbQDf764CXhQDQiLu5clan/LK5dA6C4xYTu3I=)
                          2: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: 3jGpuDySJyyXbAx9OGVPaRjdZyMkm11KUe6Dtnn4fHo=)
                          3: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: 5HwzbEOKPdxTsCPtrzPWqSHsCnPYkwuW4SaoTNQwNwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
        Validity
            Not Before: Jul 17 07:36:37 2026 GMT
            Not After : Jul 24 07:36:37 2026 GMT
        Subject: CN=6a59db85-312f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:b0:a5:c0:8d:43:d6:2f:3e:3b:f4:92:1a:
                    6b:9e:62:dc:a1:48:6c:46:cf:93:1c:43:03:97:78:
                    a3:f0:ff:d3:72:c1:c7:49:f0:95:85:81:f3:c9:20:
                    00:67:0b:87:8b:a0:96:3d:ec:46:cc:8c:08:a3:c9:
                    7c:dd:8e:22:4f:6a:74:d0:43:f3:98:b2:e4:29:2c:
                    53:58:ae:b0:84:f7:56:27:82:79:1a:4c:4b:b6:20:
                    28:08:ed:b1:6a:b9:f4:b7:ee:23:df:94:5b:86:db:
                    b5:15:dd:5e:29:5b:47:53:b5:0c:4a:ed:69:b3:42:
                    0b:66:e1:18:73:b3:6c:98:27:60:e8:a1:ff:95:8f:
                    10:12:1d:52:d3:67:70:67:ac:62:b9:e1:49:f7:7c:
                    4f:1e:7a:a5:55:10:38:85:26:04:25:2f:da:37:59:
                    f8:24:40:e5:ce:28:1c:98:77:52:fb:e0:17:c4:11:
                    df:63:7e:54:5b:b4:2e:8b:02:b3:35:c2:95:ec:a7:
                    b4:0d:e5:71:c4:72:55:64:ce:47:37:bc:58:ad:c5:
                    35:17:b0:90:a5:0b:6a:9c:99:80:05:8d:93:fd:d6:
                    16:07:68:0f:ae:0f:41:b9:71:8a:40:d6:df:52:65:
                    d1:22:16:88:cd:e4:4f:90:4e:5a:e2:31:f7:d4:9e:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0D:7A:9E:87:D8:FB:CE:27:46:1B:2E:B2:A2:79:CC:25:08:CF:31
            X509v3 Authority Key Identifier:
                keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:a8:2b:70:97:ce:06:dd:55:6d:b1:2e:81:3e:e9:18:82:
         b4:f1:bd:15:bf:ad:fb:71:57:d8:fa:6d:6a:aa:b0:8f:cf:24:
         15:ee:74:1e:3c:41:bd:0f:11:01:73:45:8c:a2:9a:ac:8d:3f:
         f0:47:9c:19:c2:d2:9e:da:59:0d:0e:43:aa:1e:7a:36:82:0d:
         36:23:9f:1b:a2:3d:99:68:f2:7d:07:88:cd:0d:d5:bf:fd:2b:
         33:a0:7f:c6:67:15:c4:0b:c3:07:c5:57:0f:37:16:9e:02:35:
         56:ed:52:ff:e4:ee:5e:43:12:44:34:59:f2:3d:c6:b8:84:54:
         69:0d:fe:3e:be:08:70:52:86:6c:07:84:dc:07:dd:93:94:f4:
         35:bc:60:ab:3c:cc:17:c4:8d:ab:5f:ff:c4:cc:ca:a0:26:4e:
         c7:98:11:92:66:a9:60:67:24:48:4d:7a:f1:e5:f6:f1:58:cd:
         6a:b3:aa:ad:b0:ac:97:86:1f:2b:67:6c:65:5b:82:33:c7:84:
         60:de:33:b4:6a:b5:f9:e8:e7:fd:6a:0b:b6:4a:4c:69:5a:48:
         ea:ea:6e:34:fb:4f:2e:4e:14:58:22:21:7d:85:cd:ab:43:5a:
         53:12:7c:d0:c9:b5:ac:40:d1:d5:9d:5b:40:1a:c1:2c:c5:76:
         1f:72:87:38
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RDY2MzExMC8GA1UEBRMoMzY3M0I2OEM5NEZDMjFGRjNGQ0RFNkEzOTNFRUM2M0Ix
NkMwMTRGRTAeFw0yNjA3MTcwNzM2MzdaFw0yNjA3MjQwNzM2MzdaMBgxFjAUBgNV
BAMTDTZhNTlkYjg1LTMxMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyWLClwI1D1i8+O/SSGmueYtyhSGxGz5McQwOXeKPw/9NywcdJ8JWFgfPJIABn
C4eLoJY97EbMjAijyXzdjiJPanTQQ/OYsuQpLFNYrrCE91YngnkaTEu2ICgI7bFq
ufS37iPflFuG27UV3V4pW0dTtQxK7WmzQgtm4Rhzs2yYJ2Doof+VjxASHVLTZ3Bn
rGK54Un3fE8eeqVVEDiFJgQlL9o3WfgkQOXOKByYd1L74BfEEd9jflRbtC6LArM1
wpXsp7QN5XHEclVkzkc3vFitxTUXsJClC2qcmYAFjZP91hYHaA+uD0G5cYpA1t9S
ZdEiFojN5E+QTlriMffUnsErAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcA16nofY
+84nRhsusqJ5zCUIzzEwHwYDVR0jBBgwFoAUNnO2jJT8If8/zeajk+7GOxbAFP4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzL0NENDcwQ0FFMjRF
QjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4X3plYWprLTdHT3hiQUZQ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTm5PMmpKVDhJZjhfemVhamstN0dPeGJBRlA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE
NjYzL0NENDcwQ0FFMjRFQjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4
X3plYWprLTdHT3hiQUZQNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAC86grcJfOBt1VbbEugT7pGIK08b0Vv637cVfY+m1qqrCPzyQV7nQePEG9DxEB
c0WMopqsjT/wR5wZwtKe2lkNDkOqHno2gg02I58boj2ZaPJ9B4jNDdW//SszoH/G
ZxXEC8MHxVcPNxaeAjVW7VL/5O5eQxJENFnyPca4hFRpDf4+vghwUoZsB4TcB92T
lPQ1vGCrPMwXxI2rX//EzMqgJk7HmBGSZqlgZyRITXrx5fbxWM1qs6qtsKyXhh8r
Z2xlW4Izx4Rg3jO0arX56Of9agu2SkxpWkjq6m40+08uThRYIiF9hc2rQ1pTEnzQ
ybWsQNHVnVtAGsEsxXYfcoc4
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:15:05 2026 by rpki-client