Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
File:                     MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json)
Hash identifier:          hEZpN0pYMBHP/HSdjZulbl0PXCsQWyOl8HAzYxh4UGQ=
Subject key identifier:   FA:41:29:DA:B7:29:88:CC:D1:87:00:48:A4:E8:78:E0:84:9A:55:FB
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Certificate issuer:       /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial:       0499
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
Manifest number:          048C
Signing time:             Tue 07 Jul 2026 00:40:09 +0000
Manifest this update:     Tue 07 Jul 2026 00:40:08 +0000
Manifest next update:     Tue 14 Jul 2026 00:40:08 +0000
Files and hashes:         1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: OJqGkKjYlssYKVDZvKBSRsW6Thw8+C1AGOTp264DtGY=)
                          2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: T3ZNiVnesGJpryRivylJyU8MVl8VVN9RqH654rVhbKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
                          rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 00:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
        Validity
            Not Before: Jul  7 00:40:08 2026 GMT
            Not After : Jul 14 00:40:08 2026 GMT
        Subject: CN=6a4c4ae8-1594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:16:a9:56:4f:86:f4:0c:68:9b:72:9f:fe:e3:
                    dc:05:15:6b:3a:62:4a:3d:14:9c:8f:46:06:df:ca:
                    d5:83:99:31:a1:58:88:af:0f:6a:ef:bb:7a:b8:66:
                    6f:52:00:99:f7:0d:78:e3:92:9c:67:9f:f0:6f:36:
                    37:9c:a8:3a:17:ac:eb:52:55:2b:ba:88:ea:d5:d9:
                    8d:36:27:62:89:45:cf:a2:eb:94:76:6d:d5:3a:2f:
                    dc:ec:8e:5b:81:fa:f1:ad:1d:27:73:60:de:98:1e:
                    f5:20:1b:65:81:30:9f:94:7e:31:ac:b6:27:71:07:
                    84:0d:12:2a:b8:44:30:f1:2e:1f:b1:4f:7d:06:ed:
                    11:70:4f:8b:fe:90:a7:53:53:c7:9e:82:c5:87:f0:
                    20:dd:7d:28:d8:a6:c7:cc:a1:ba:66:13:e1:92:b9:
                    97:36:92:cf:53:ba:f5:8e:aa:29:7d:7f:fd:a8:c6:
                    a8:5c:f7:4f:22:de:8b:30:80:c4:c3:79:6c:5c:2b:
                    c8:4f:a6:24:2d:53:6c:97:31:aa:b8:48:a0:0d:fb:
                    64:32:a5:eb:85:75:99:5e:2b:54:99:c2:32:e0:d2:
                    ff:22:25:5c:09:e3:bf:38:ed:5c:a5:71:d1:8d:fe:
                    e5:5e:b9:ab:15:6b:6f:f2:b6:a3:12:f5:88:7c:2f:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:41:29:DA:B7:29:88:CC:D1:87:00:48:A4:E8:78:E0:84:9A:55:FB
            X509v3 Authority Key Identifier:
                keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:83:0c:ef:4a:ea:8f:f2:40:c7:33:ca:5f:c6:f9:01:ab:
         81:d8:7a:91:45:5f:ed:f1:f4:62:54:6c:24:d8:8b:69:81:13:
         10:61:8e:64:95:2b:63:14:5a:f1:56:41:a9:97:c8:23:57:a7:
         41:51:70:31:f7:7a:22:be:60:13:84:60:37:1d:48:35:7e:f1:
         03:ec:e4:30:f0:d0:fb:2f:3b:ad:db:c5:9d:03:db:94:f6:98:
         eb:8e:24:1b:3b:2b:60:da:59:09:14:37:e1:a3:ee:04:25:a2:
         3d:11:8c:91:b5:7e:e6:0b:01:19:ae:45:71:ae:f1:29:15:8e:
         4b:a7:a2:a9:63:dc:04:a0:96:66:13:78:a4:e6:f4:28:b4:b6:
         ef:0e:b9:07:91:5d:34:e8:45:52:63:27:39:f2:a8:ca:9d:a2:
         0a:d9:46:fc:3d:b6:95:5d:72:8a:a4:c3:dd:f6:40:f1:ef:24:
         a0:e1:18:25:59:17:e5:c7:9b:18:e0:13:28:5a:6c:f1:0a:d3:
         a2:9f:50:89:4c:1e:a8:8c:da:d3:90:53:53:e1:44:45:83:cb:
         d3:6d:9a:93:a5:a5:f4:73:ba:dc:46:f1:83:26:59:17:a9:a2:
         a5:f1:6a:97:2d:a2:27:10:91:a2:f6:de:6b:f3:b8:21:af:05:
         20:63:e9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:09 2026 by rpki-client