Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File:                     ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier:          jEyBuzAU+mURecJ5fXPTPsGfk3WIjsuv9gwNTMLdXgA=
Subject key identifier:   B1:6C:63:EA:FE:B6:8B:6C:08:BB:CD:DE:A7:5D:87:D9:2C:00:CF:BD
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer:       /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial:       0A76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number:          0A6A
Signing time:             Fri 14 Aug 2026 19:41:55 +0000
Manifest this update:     Fri 14 Aug 2026 19:41:55 +0000
Manifest next update:     Fri 21 Aug 2026 19:41:55 +0000
Files and hashes:         1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: 0ZvDkABmhm9NcOn7TfwJ73FGIwdG/38nG0evdWFHox0=)
                          2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
                          rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 19:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678 (0xa76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
        Validity
            Not Before: Aug 14 19:41:55 2026 GMT
            Not After : Aug 21 19:41:55 2026 GMT
        Subject: CN=6a7f6f83-2af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:68:03:8f:b0:1e:72:ee:25:22:41:64:3b:d9:
                    68:fd:3d:f7:0e:fb:9b:83:e5:60:84:aa:55:65:53:
                    1e:71:db:7f:4b:a1:99:ba:83:6f:93:b3:a3:e2:bf:
                    3d:f4:bd:4f:32:c2:ff:ab:00:36:6f:d5:64:59:e8:
                    5e:b1:b1:a2:f6:da:c4:1c:15:95:fe:89:55:2c:eb:
                    54:b1:2c:bc:7d:b1:3d:37:0c:8a:c1:ce:fb:f4:5b:
                    6e:12:8b:78:b4:e2:b8:25:e9:b9:95:85:ae:8b:42:
                    3c:de:e4:0a:a5:fc:7e:ae:48:41:5b:66:8a:57:9c:
                    e5:dd:b7:0a:8e:35:ea:cb:e9:10:35:82:79:8f:58:
                    f1:90:4d:97:8c:6b:16:38:65:0b:cf:d0:31:a5:cc:
                    60:90:21:6a:a4:ba:a6:98:c9:62:f7:42:9c:6d:b5:
                    ce:24:97:4c:5e:3f:37:ac:90:f1:38:62:d7:ae:5c:
                    bc:9b:ea:71:3c:d1:90:9b:fc:87:f2:0a:d1:07:a4:
                    6c:af:c8:3e:b3:9f:98:de:f8:f0:80:65:c3:31:73:
                    ef:e4:2e:f1:3c:0b:f4:7a:89:1f:dd:aa:17:3f:d0:
                    02:5e:b2:b7:28:24:1a:5d:3a:e1:81:68:4b:38:01:
                    ee:15:de:63:ba:60:39:47:d4:93:6d:f4:fb:8f:10:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6C:63:EA:FE:B6:8B:6C:08:BB:CD:DE:A7:5D:87:D9:2C:00:CF:BD
            X509v3 Authority Key Identifier:
                keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:60:43:30:b9:ef:1e:da:fc:29:e6:f3:0a:7c:ec:27:4c:
         cf:60:ac:39:75:f7:9d:87:5a:4a:d5:3e:09:cd:12:e4:fa:c9:
         28:f6:ff:e1:94:86:d1:bb:5e:c1:a1:15:7f:65:f2:c7:ef:b5:
         c0:00:f6:42:ad:41:6c:5a:6c:b0:cb:44:dd:89:d4:f1:80:b8:
         5d:9e:16:2a:a5:ad:f0:4c:a0:e6:9d:43:60:75:0f:1e:3d:4f:
         42:2d:e8:56:c5:41:5b:52:47:39:07:d7:37:ba:cf:b5:3c:2a:
         0b:ee:f9:48:62:71:bb:04:4f:8f:c8:06:58:8b:f4:3f:e5:80:
         b7:aa:d8:06:02:8c:b7:f0:97:d7:f6:13:c4:41:95:2c:3b:4b:
         19:46:59:6c:44:57:f5:2a:59:b7:a9:2b:6b:51:19:da:df:7a:
         80:2d:4d:a2:cf:5d:88:ed:4f:8b:08:a1:d4:24:df:41:07:ff:
         45:a1:67:b4:f8:1c:63:7c:c3:da:d4:8e:55:d0:d7:69:4d:a3:
         e7:97:01:00:19:64:3d:58:a1:80:ff:cc:d4:89:40:7b:67:68:
         b7:65:d6:70:05:f0:48:10:06:30:1b:53:d3:a9:4f:85:64:e1:
         1b:b0:9d:5a:32:06:9a:73:02:80:30:97:c4:dc:10:71:a8:27:
         55:ad:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:00 2026 by rpki-client