Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File:                     xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier:          GEPg3GxgA7rL+eRAq/dLiaWotHBHXH/3dBHdQs91oBc=
Subject key identifier:   FC:3C:A0:6E:91:39:65:7A:66:0C:14:86:52:65:CC:7D:8F:4D:07:6A
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer:       /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial:       19E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number:          19D8
Signing time:             Thu 16 Jul 2026 16:25:35 +0000
Manifest this update:     Thu 16 Jul 2026 16:25:35 +0000
Manifest next update:     Thu 23 Jul 2026 16:25:35 +0000
Files and hashes:         1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: jaNuGmiJopBIqIhnhlEY9pevuEc+6w+/XTXdd1flMc0=)
                          2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: /wO07VK/99aXev5AumAxW3oQhnQNNhg5LiUR2P7i400=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
                          rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6629 (0x19e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
        Validity
            Not Before: Jul 16 16:25:35 2026 GMT
            Not After : Jul 23 16:25:35 2026 GMT
        Subject: CN=6a5905ff-1298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:91:d5:cf:3c:8e:0a:1b:ed:1f:da:9c:0b:
                    32:f2:da:b3:a2:bf:22:d5:c5:83:99:98:82:98:eb:
                    3a:cc:6e:c4:8e:29:ca:a8:56:9b:fa:00:fc:8e:97:
                    b1:64:7a:5a:3c:73:2b:6c:1e:3b:98:78:c5:ed:ec:
                    e6:a9:cc:4c:4d:cc:6c:be:37:98:48:e3:cf:38:30:
                    ea:99:c4:d3:78:f9:cb:72:15:93:90:d6:80:be:a8:
                    26:23:68:3b:a5:c8:eb:75:48:21:e4:d9:13:5c:58:
                    f0:46:ba:51:cd:d8:3b:92:3f:39:70:06:9a:59:c5:
                    a8:28:6e:ab:cd:db:e4:cb:14:8a:01:18:7f:ec:41:
                    a0:45:ca:2a:6f:e2:26:05:60:47:3b:eb:00:54:2d:
                    94:80:ba:c9:f8:26:50:4c:47:e4:4d:c4:e9:05:da:
                    d6:72:d7:c8:3e:cd:01:16:9e:28:c8:12:00:2b:63:
                    d5:5b:7d:f5:64:2e:72:8d:48:8f:1f:2b:f2:3a:9f:
                    eb:fc:f6:c8:2e:f2:e0:e6:f7:b6:1f:57:7d:b4:15:
                    92:89:2e:5f:66:c0:2f:bc:5d:d6:92:0d:6f:b7:2a:
                    e2:1f:88:22:24:88:77:8d:c3:cf:e3:a0:f7:f5:b1:
                    13:c6:76:22:cd:f1:e7:ec:16:5b:e7:32:d9:6d:39:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3C:A0:6E:91:39:65:7A:66:0C:14:86:52:65:CC:7D:8F:4D:07:6A
            X509v3 Authority Key Identifier:
                keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8d:13:f6:8e:39:b0:4f:31:d1:55:05:28:e0:6b:80:3d:8f:
         77:97:e0:d6:06:ed:f9:ce:3d:d0:1e:bb:36:97:ab:58:2b:1e:
         72:08:b0:88:70:73:8e:19:f2:6f:95:e5:c2:13:7b:2d:1b:c5:
         7d:43:6c:ee:26:d7:65:06:49:a0:12:4d:73:3c:e7:69:44:41:
         46:e1:d7:0b:d7:0c:b7:e8:3d:53:5a:f7:b6:bb:5e:f3:08:08:
         6d:4f:6a:9d:6f:01:af:b1:c2:77:e8:28:c3:3c:45:b1:35:80:
         43:2b:3f:3f:45:0c:a1:ab:b6:d7:e2:31:29:e1:dc:57:27:b6:
         38:c8:89:32:5c:56:9d:bb:04:9c:97:83:20:6a:74:7c:70:50:
         9b:2a:c5:8c:ba:7b:38:f2:85:b2:b4:c7:11:40:e4:22:cb:15:
         f0:96:1f:a3:f4:d3:84:19:b8:8a:ab:9d:6c:5a:74:22:04:6f:
         03:b7:7d:9e:25:a3:69:d2:62:b6:90:56:b0:c6:d4:db:7e:8d:
         b0:66:18:53:c3:5a:4f:5c:25:73:67:29:26:de:2e:ea:dc:ce:
         0a:f6:a8:f6:15:9f:86:1d:8b:79:4f:71:08:12:d5:a6:19:6e:
         a7:18:11:14:5e:a8:35:ee:cb:b4:c7:49:f7:40:7a:a9:78:c7:
         c1:30:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:12:56 2026 by rpki-client