Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File:                     THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier:          4C0A/FXg3pq6li24/eRTNsQ3zFBSCd/Eod7tm1P6mQU=
Subject key identifier:   A2:AE:1E:76:95:CE:DD:84:D5:43:74:85:35:FC:4D:62:C3:8B:0B:50
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer:       /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial:       09EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number:          09DC
Signing time:             Sat 04 Jul 2026 19:59:01 +0000
Manifest this update:     Sat 04 Jul 2026 19:59:00 +0000
Manifest next update:     Sat 11 Jul 2026 19:59:00 +0000
Files and hashes:         1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: GVc+YPZYwXm3JPZfOqvSC2UJ3D3rgFn4K/oLwQhTfPw=)
                          2: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=)
                          3: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
                          rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 19:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2539 (0x9eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
        Validity
            Not Before: Jul  4 19:59:00 2026 GMT
            Not After : Jul 11 19:59:00 2026 GMT
        Subject: CN=6a496605-23c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:a8:9b:2d:10:ae:43:99:33:aa:7f:5a:f5:
                    86:4a:95:d5:40:23:e4:66:67:ed:27:bf:9f:36:a5:
                    fe:44:61:25:b0:71:5e:e6:50:20:6c:8d:d7:e0:e7:
                    12:26:ed:15:62:b3:24:49:4e:0d:85:50:ed:a6:f7:
                    86:73:b4:56:97:c3:79:34:5b:af:34:8b:d1:6a:f5:
                    20:0b:cf:a4:be:39:a2:ad:17:ec:53:98:44:13:78:
                    0d:09:cd:fb:00:ea:ac:cb:c9:3a:a1:29:3e:7b:11:
                    71:53:06:94:13:d0:bc:7b:ab:ee:61:ef:a8:c5:b2:
                    c2:f1:3b:7a:09:14:a4:09:11:fd:30:c5:ac:52:85:
                    9c:d1:ad:c3:c8:7b:1e:8a:a7:89:3b:b0:64:64:17:
                    ff:f8:8c:3c:55:9e:9a:0a:60:3e:17:07:ce:e6:bd:
                    3e:b9:10:45:5e:3c:65:87:a6:fd:0b:22:31:91:1e:
                    a6:88:1f:70:01:56:96:65:56:37:01:70:a2:e0:c4:
                    64:cc:56:d7:97:46:12:2e:9a:01:7b:c6:c8:5d:53:
                    58:85:a4:a4:97:17:de:45:1b:e3:4f:7b:03:7e:02:
                    9d:a1:54:f2:99:06:5f:c2:38:83:bc:2d:e8:80:d1:
                    36:28:42:4f:57:84:29:77:62:32:dc:db:91:09:8b:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AE:1E:76:95:CE:DD:84:D5:43:74:85:35:FC:4D:62:C3:8B:0B:50
            X509v3 Authority Key Identifier:
                keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:a9:17:68:b4:c6:8e:53:ff:2c:bb:92:c7:7d:42:44:1a:
         3f:c4:80:bb:a3:18:33:d3:1a:ed:8a:3c:a1:58:e9:3c:3f:92:
         5d:61:e6:07:43:53:8a:f7:bb:10:41:88:16:d3:79:69:36:3b:
         6b:62:94:55:3b:e2:4a:c3:43:8b:39:99:c6:41:8a:ad:95:e9:
         c9:08:51:1c:17:19:e1:6c:04:20:a8:6a:11:a2:59:be:76:fc:
         0c:a6:68:a5:25:65:24:42:e3:12:aa:b8:1c:e5:46:ea:9f:82:
         c4:90:95:2b:5e:d9:e5:2d:98:6a:1d:96:5e:2f:ce:dd:b5:9d:
         b5:ec:6b:7f:cc:07:73:70:36:26:99:8f:3f:d7:a2:54:35:46:
         ed:a7:09:7e:15:e4:c3:20:c0:ca:28:5c:99:7b:25:35:08:75:
         b0:be:76:ff:c2:1c:9b:09:0c:ce:82:4b:af:e5:b4:c0:2c:f6:
         b6:f8:4d:de:88:90:28:43:4d:e5:d7:a3:85:01:bf:2d:81:16:
         35:45:17:4c:c2:58:18:b6:fa:35:b2:fc:d2:ec:45:80:2b:7a:
         3b:c1:c1:db:fc:d5:92:de:b4:96:32:d5:62:98:b5:7e:64:aa:
         71:b8:95:79:e4:a4:2d:07:58:52:b5:a5:f6:49:66:36:cf:d7:
         73:0d:f1:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw
NDBEMUI2QTIwHhcNMjYwNzA0MTk1OTAwWhcNMjYwNzExMTk1OTAwWjAYMRYwFAYD
VQQDEw02YTQ5NjYwNS0yM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uuomy0QrkOZM6p/WvWGSpXVQCPkZmftJ7+fNqX+RGElsHFe5lAgbI3X4OcS
Ju0VYrMkSU4NhVDtpveGc7RWl8N5NFuvNIvRavUgC8+kvjmirRfsU5hEE3gNCc37
AOqsy8k6oSk+exFxUwaUE9C8e6vuYe+oxbLC8Tt6CRSkCRH9MMWsUoWc0a3DyHse
iqeJO7BkZBf/+Iw8VZ6aCmA+FwfO5r0+uRBFXjxlh6b9CyIxkR6miB9wAVaWZVY3
AXCi4MRkzFbXl0YSLpoBe8bIXVNYhaSklxfeRRvjT3sDfgKdoVTymQZfwjiDvC3o
gNE2KEJPV4Qpd2Iy3NuRCYvGbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKuHnaV
zt2E1UN0hTX8TWLDiwtQMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2
M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj
S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAptqpF2i0xo5T/yy7ksd9QkQaP8SAu6MYM9Ma7Yo8oVjpPD+SXWHmB0NTive7
EEGIFtN5aTY7a2KUVTviSsNDizmZxkGKrZXpyQhRHBcZ4WwEIKhqEaJZvnb8DKZo
pSVlJELjEqq4HOVG6p+CxJCVK17Z5S2Yah2WXi/O3bWdtexrf8wHc3A2JpmPP9ei
VDVG7acJfhXkwyDAyihcmXslNQh1sL52/8IcmwkMzoJLr+W0wCz2tvhN3oiQKENN
5dejhQG/LYEWNUUXTMJYGLb6NbL80uxFgCt6O8HB2/zVkt60ljLVYpi1fmSqcbiV
eeSkLQdYUrWl9klmNs/Xcw3xuA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:54:45 2026 by rpki-client