Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File:                     CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier:          pyjQQqep94FWcQRQ8zEKy88pHAd31+GOy8ktlQVKe5o=
Subject key identifier:   E3:64:1C:89:59:34:00:49:A3:13:6F:5B:CD:78:7A:76:19:8A:B5:0F
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer:       /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial:       060D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number:          05D8
Signing time:             Mon 27 Jul 2026 00:01:19 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:18 +0000
Manifest next update:     Mon 03 Aug 2026 00:01:18 +0000
Files and hashes:         1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: 1z1AnVRxUUGbyfJQeY4dbRcV8Z8/dT8os5OPfA7NJ+E=)
                          2: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=)
                          3: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=)
                          4: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: +IUDW8cw3RCxe8Sc2DGSXyBs2/FEVtOhLz/uMryDXvU=)
                          5: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=)
                          6: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=)
                          7: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
        Validity
            Not Before: Jul 27 00:01:18 2026 GMT
            Not After : Aug  3 00:01:18 2026 GMT
        Subject: CN=6a669fcf-d9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:a1:98:5f:06:12:f4:51:18:0c:5d:5b:4f:
                    a5:6f:62:69:ba:ec:0a:fc:16:9a:fd:14:23:60:e0:
                    5a:13:a4:b5:6f:fd:2e:c1:44:da:9b:9e:b3:a6:d6:
                    f2:45:44:5c:02:39:53:dc:5b:79:01:dd:c9:d5:49:
                    3a:32:83:47:8c:35:d9:5c:17:4b:f5:ab:8a:6b:f1:
                    63:04:fb:f5:36:d6:dc:90:f5:4b:44:0e:12:d0:ad:
                    d2:6b:da:e2:38:d4:ab:a8:b1:37:2d:96:5c:5d:36:
                    6b:a1:78:8d:60:01:a1:13:41:bd:e1:54:94:df:c6:
                    b4:94:fe:1e:6d:55:8d:64:d5:fc:27:3f:5f:08:d1:
                    af:dd:5f:d4:97:98:78:4d:37:8d:0a:2f:fd:f4:d6:
                    d8:47:4f:e4:19:00:65:95:80:c4:25:94:70:d1:f0:
                    9d:18:1b:88:83:f0:f1:fb:ce:5d:52:44:88:1f:69:
                    34:fb:0f:39:61:ce:c1:b9:13:54:31:4e:46:a7:42:
                    52:74:fa:2e:5d:8c:64:ac:92:aa:f8:c1:bd:b6:44:
                    9b:f9:b6:70:2e:f2:70:20:56:4c:bd:6d:01:5d:3e:
                    7f:27:06:5d:26:5a:00:8a:a7:ba:60:76:e4:47:85:
                    c7:82:06:5d:f1:df:8a:00:d4:de:f3:94:4e:8a:2f:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:64:1C:89:59:34:00:49:A3:13:6F:5B:CD:78:7A:76:19:8A:B5:0F
            X509v3 Authority Key Identifier:
                keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:18:84:73:26:f4:d4:24:17:65:9f:8b:95:21:a3:ed:33:d1:
         fb:51:ab:31:38:a3:91:98:03:ec:5f:c9:e4:32:d2:fe:8a:bb:
         26:37:e5:27:7c:8e:61:4d:4e:5e:f5:b8:94:c1:59:2d:c0:f7:
         f6:8b:f3:f9:9e:1c:5d:f1:03:90:8e:b0:12:f6:ce:fb:cf:00:
         8d:d8:f0:1e:57:db:5e:4c:19:dc:de:b0:ff:5d:2a:67:5f:57:
         26:75:b1:52:0e:34:8b:13:31:4a:60:00:e5:1e:b3:31:3a:d7:
         22:65:b4:cb:77:70:65:ab:c4:a6:24:cc:15:5a:58:46:6a:10:
         dd:b7:a6:45:49:f3:52:7b:cb:37:3a:47:cd:69:1e:72:8c:29:
         e4:5e:4c:f1:43:1b:8b:a9:ca:c4:b9:08:84:19:13:72:64:fe:
         33:29:c4:9e:33:ab:c5:89:1a:e7:7d:94:1c:70:5e:f7:c3:f1:
         6c:5a:7a:f5:cc:02:ba:94:89:94:8a:fc:82:50:fe:e0:25:e9:
         dd:92:11:96:2a:a6:e2:c2:f3:ff:4a:f4:31:4d:95:f1:a9:34:
         5b:70:36:70:f3:99:4a:46:0c:19:3f:40:5d:b8:91:28:c5:15:
         c7:a5:a1:ba:32:c7:67:98:e6:ea:d2:b5:ea:84:ba:ea:20:b6:
         fe:3a:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:04 2026 by rpki-client