Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft
File:                     sFj21VmeHSKajtv1m-VIIwPWoaM.mft (raw, json)
Hash identifier:          o1kTiDQJ3zXLq+1jaJOY9Q5iXe+m0QTZiR6c2QmCvrk=
Subject key identifier:   EC:59:56:19:DD:CB:EA:ED:74:07:FE:A4:08:59:1C:E8:B3:6B:E3:9E
Authority key identifier: B0:58:F6:D5:59:9E:1D:22:9A:8E:DB:F5:9B:E5:48:23:03:D6:A1:A3
Certificate issuer:       /CN=A9193227/serialNumber=B058F6D5599E1D229A8EDBF59BE5482303D6A1A3
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft
Manifest number:          3A
Signing time:             Tue 11 Aug 2026 07:59:48 +0000
Manifest this update:     Tue 11 Aug 2026 07:59:48 +0000
Manifest next update:     Tue 18 Aug 2026 07:59:48 +0000
Files and hashes:         1: sFj21VmeHSKajtv1m-VIIwPWoaM.crl (hash: WGlWBwXIySfapqg6gprQ/aZMc56YDJEQ6oY9C7qD78c=)
                          2: 569B3232420111F1AA14ACFFC2833773.roa (hash: enP2l9Yw9Erb0zLPmEIe/iV0hnyi1aOiDafc8Z1cM0E=)
                          3: VW7-0XAIsV3QOo7u4NtRpws4ZxU.asa (hash: 9YoZkdhqvPEYJHlBOeQTkUJxo38PDhKoiByGKvErBC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.crl
                          rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Aug 2026 07:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193227, serialNumber=B058F6D5599E1D229A8EDBF59BE5482303D6A1A3
        Validity
            Not Before: Aug 11 07:59:48 2026 GMT
            Not After : Aug 18 07:59:48 2026 GMT
        Subject: CN=6a7ad674-3022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:64:19:c6:83:cd:6b:4a:83:36:59:91:03:
                    ce:17:67:75:bd:0e:9b:e8:85:f6:1a:7a:c5:4a:c3:
                    49:b4:e3:ad:88:50:72:9b:7e:82:aa:6f:8c:ff:0d:
                    b3:24:41:df:c9:30:28:dc:4c:ec:6a:ff:4f:11:77:
                    c2:33:63:9d:91:27:5c:6e:85:14:23:bc:1a:56:4a:
                    4b:de:41:25:97:f8:cd:c0:e9:79:3a:54:33:41:a8:
                    80:f7:5c:3c:b3:3a:08:e7:b5:56:95:8b:78:59:6c:
                    46:6d:13:2c:15:66:77:59:28:f1:f4:21:c4:6c:ed:
                    2a:e6:da:ad:00:65:e9:6d:f3:59:05:fb:34:98:48:
                    13:09:ab:34:9c:2b:53:2c:38:55:85:64:11:0b:c9:
                    a2:12:71:2e:a4:bb:ff:2d:23:e7:7f:c6:01:30:c9:
                    4c:8b:a9:8f:0e:ce:97:bb:04:dd:95:e9:9d:49:d2:
                    fe:02:b2:de:7a:67:5b:de:10:2d:91:f8:90:93:79:
                    5a:cf:d5:41:64:c4:e8:51:7a:5b:a9:9a:33:16:e8:
                    74:1c:cf:94:87:b6:d4:0b:ea:2b:1e:c2:39:01:8c:
                    e5:ff:11:76:56:13:7a:37:7f:50:89:c7:f7:f0:07:
                    33:90:bf:9f:a9:d8:f3:51:83:c4:d1:cf:92:13:86:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:59:56:19:DD:CB:EA:ED:74:07:FE:A4:08:59:1C:E8:B3:6B:E3:9E
            X509v3 Authority Key Identifier:
                keyid:B0:58:F6:D5:59:9E:1D:22:9A:8E:DB:F5:9B:E5:48:23:03:D6:A1:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:42:80:ae:02:59:67:60:9f:03:09:72:27:65:f3:65:ba:9e:
         46:d7:7f:fd:f6:fd:8b:e5:3f:4a:54:f8:c0:a4:5f:18:cb:31:
         b4:3c:a9:bb:31:2e:f2:60:4e:b0:3d:f8:13:1a:97:bb:e9:07:
         b8:09:27:b6:66:59:a6:c0:01:3d:f0:5f:20:78:50:42:65:b5:
         7a:29:db:68:8a:98:08:32:58:a2:c9:df:64:3f:1d:ca:4d:85:
         22:88:25:f2:ba:16:7a:19:32:92:c0:e5:fe:3e:89:79:5d:d7:
         6b:a7:f4:48:a0:c2:8d:ce:f9:bd:bb:78:d3:16:9d:35:88:ba:
         13:d7:ab:60:7d:3a:55:27:af:8f:3b:59:e0:9d:d5:6b:9e:5e:
         bd:2c:3d:56:eb:a9:34:17:64:cd:d3:a3:79:29:5b:06:b9:b6:
         21:88:51:49:73:93:62:a4:bf:f6:7a:31:17:65:bd:1b:1f:df:
         7e:7e:81:5c:67:0d:5f:67:99:e3:72:4c:e0:cf:fd:20:bc:d2:
         3f:f4:fe:b8:f7:25:1b:b9:40:5f:b7:09:e8:6f:ef:bb:af:9b:
         59:ea:d6:75:e8:88:5f:b8:63:25:09:ea:a0:3a:83:fc:ca:7e:
         5d:c0:39:4f:2f:ba:92:eb:ee:eb:46:09:a8:1e:27:db:c1:f5:
         1c:56:68:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:45 2026 by rpki-client