Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
File:                     p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json)
Hash identifier:          DEjKaKx1y+8JVgxJRreNJSG0aI/PGPHtmc04Q+J1HxM=
Subject key identifier:   7B:0C:40:4E:48:3C:FD:9E:62:CA:17:79:AA:DD:77:40:F3:01:9B:C6
Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
Certificate issuer:       /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Certificate serial:       0F07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
Manifest number:          0EFC
Signing time:             Thu 16 Jul 2026 17:42:28 +0000
Manifest this update:     Thu 16 Jul 2026 17:42:27 +0000
Manifest next update:     Thu 23 Jul 2026 17:42:27 +0000
Files and hashes:         1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: 6Oscl8WFSI1zUj2f5iat3Ch/qufM/YdKCkwvMGLhEOY=)
                          2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: pAr8fA1QmuWGXPOAkIJK91YR32FAAgcJ10JhZIGFapc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
                          rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 17:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3847 (0xf07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
        Validity
            Not Before: Jul 16 17:42:27 2026 GMT
            Not After : Jul 23 17:42:27 2026 GMT
        Subject: CN=6a591804-04cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:2e:36:16:fa:83:04:4f:9a:b2:d3:97:bd:
                    66:66:5f:ec:b7:f2:44:4c:b8:95:c4:f5:62:c6:40:
                    cb:76:6a:8a:d4:16:98:c0:c1:b0:ba:b8:8d:53:80:
                    d3:8a:88:c2:60:4e:27:f8:07:04:71:da:94:3c:4a:
                    cb:dd:5d:5b:15:14:18:84:bd:1d:c5:f9:08:2e:34:
                    08:6b:f4:8d:72:1f:96:7f:c8:a0:ac:c9:6c:7d:c1:
                    86:98:b2:0c:fe:05:3c:de:cc:fe:b7:ed:fb:c1:08:
                    32:27:09:fa:17:8e:ce:31:ef:17:e6:f8:95:42:de:
                    77:7c:a5:f2:4e:d0:2e:bf:53:c0:00:57:3a:68:37:
                    eb:57:5b:27:b5:76:23:22:34:41:eb:97:79:c8:dd:
                    fe:87:80:7b:cf:cc:d4:8d:fd:50:f5:7a:f3:4f:35:
                    62:38:95:fc:9e:c9:a2:8c:cb:ba:ea:c3:8b:d6:52:
                    ba:16:21:7d:16:a5:0f:1d:27:f5:41:58:83:2c:3e:
                    b1:32:f1:67:3b:d7:12:39:0d:ce:7c:e9:a4:3b:28:
                    8b:13:0f:d8:c0:46:cc:34:28:9e:7e:a2:5f:9a:9d:
                    82:69:d5:33:eb:30:61:fc:08:57:d9:1f:9e:22:b4:
                    6d:d2:5c:1e:1c:30:bf:c8:d9:9b:29:16:ba:1c:41:
                    3d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0C:40:4E:48:3C:FD:9E:62:CA:17:79:AA:DD:77:40:F3:01:9B:C6
            X509v3 Authority Key Identifier:
                keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:61:85:2f:26:eb:4b:33:cf:03:76:bc:d1:ba:85:50:39:23:
         10:96:1a:0f:ad:71:01:e2:35:4d:0c:65:68:22:20:ac:9d:4c:
         0e:c6:10:43:2f:7e:57:42:e0:d0:84:40:8e:8a:16:e9:44:31:
         85:58:47:c5:13:5c:3e:b9:ee:e4:23:9e:1e:55:e0:17:d8:bf:
         ed:eb:9c:ba:9e:5f:61:62:75:5e:8a:f2:bc:6f:51:20:9c:89:
         3a:85:27:b1:06:9a:66:32:92:7e:71:81:7e:07:49:83:68:aa:
         9a:cc:77:b1:cb:07:ee:bf:b1:8a:78:21:de:02:3c:df:71:39:
         7c:c6:b0:2e:64:b9:09:56:29:d2:b8:67:2f:ee:d8:d5:d7:5b:
         07:9f:46:3a:6c:71:b2:38:26:98:c7:70:49:b4:bb:88:e6:42:
         96:0c:75:9b:6f:f1:84:8f:e0:af:53:56:05:bb:58:fd:8d:4a:
         15:71:eb:38:e0:3b:30:1d:92:17:e9:ae:d4:2e:c2:5b:2e:c5:
         30:14:fe:2d:5d:5b:c4:e5:b7:81:3f:4c:a6:88:13:01:d6:b4:
         f8:e4:eb:f9:6d:c8:c3:9d:46:d4:b4:68:62:fb:91:98:43:4f:
         75:d3:59:c7:72:94:63:93:01:f7:4c:57:7c:a6:66:69:3c:f5:
         1f:c8:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:31:20 2026 by rpki-client