Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
File:                     23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json)
Hash identifier:          dIwTpGUDLTv5YIAQvxDBlZHtZ7RWN1RoeoNYTxXEU4A=
Subject key identifier:   21:ED:69:1F:E9:E9:F4:BC:55:55:B1:7A:FB:EA:D5:30:F6:B6:39:B2
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Certificate issuer:       /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
Manifest number:          1007
Signing time:             Tue 18 Aug 2026 17:54:07 +0000
Manifest this update:     Tue 18 Aug 2026 17:54:06 +0000
Manifest next update:     Tue 25 Aug 2026 17:54:06 +0000
Files and hashes:         1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: zWoPnVHdSdbFqvPNqzXoHhT+Pb1Bn29pf8DgGTtnO9Q=)
                          2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: 8kaLAfVElFdAC99fHwGaunXXva1K/sV7AglDy8IxEuc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
                          rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
        Validity
            Not Before: Aug 18 17:54:06 2026 GMT
            Not After : Aug 25 17:54:06 2026 GMT
        Subject: CN=6a849c3f-dc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:05:d5:0c:0a:91:1c:bb:d7:fb:d6:70:6d:
                    54:01:e9:17:c6:e9:44:de:8a:07:c6:11:a5:bb:97:
                    3a:d3:a6:e3:07:97:d8:03:24:e5:a5:e5:d5:55:3d:
                    22:f1:a5:ba:94:78:b0:94:df:14:f2:9b:1c:f6:54:
                    bd:07:e5:f7:fc:b0:a1:72:12:22:09:94:d4:91:b3:
                    0b:db:2a:3f:18:9c:75:54:4f:0f:15:06:3b:7d:9a:
                    b1:99:85:d1:ec:ee:5a:57:b7:62:da:d5:1c:74:33:
                    04:6b:85:57:e0:56:16:db:4e:68:98:5d:33:e0:fc:
                    ce:ac:46:d6:c8:f6:27:bb:44:b3:e8:6a:99:10:10:
                    f1:61:f2:14:94:77:ae:e9:f7:14:02:e2:55:04:e3:
                    bb:8a:ec:43:8b:a4:05:04:c7:d6:06:a6:61:e4:48:
                    f3:dd:ad:dd:95:e0:09:ad:38:25:6b:50:92:b7:0f:
                    36:0a:01:05:00:98:7e:18:ac:d0:54:fc:81:f8:28:
                    18:3f:b7:b8:bb:a5:a8:e0:96:01:61:a7:ba:34:9e:
                    aa:64:92:e0:bd:02:72:ae:80:99:91:52:54:d1:d8:
                    b4:51:b5:5d:12:1f:d9:1e:d2:c6:ea:04:17:19:52:
                    14:9b:c7:cf:a7:0b:82:33:0c:a0:48:57:ef:7d:eb:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:ED:69:1F:E9:E9:F4:BC:55:55:B1:7A:FB:EA:D5:30:F6:B6:39:B2
            X509v3 Authority Key Identifier:
                keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:a8:03:06:12:41:c4:dc:f2:14:86:4e:1c:45:02:3d:be:
         ca:36:cb:85:c5:17:08:54:41:20:10:8d:99:0a:37:74:c8:7c:
         ac:18:14:8b:af:31:f9:de:2b:d8:71:b4:48:34:f5:df:48:12:
         d6:cb:f1:76:31:3b:be:cf:48:9e:91:ad:ab:76:40:0c:2e:2c:
         e5:84:29:ac:d5:9e:00:3d:e1:8b:b3:4d:1c:a7:a5:51:16:8f:
         44:7c:e1:a1:a2:7f:4e:a8:dd:0d:68:92:03:6c:09:de:08:3b:
         12:89:f1:05:21:48:87:12:48:c0:bb:a2:37:7e:b1:7d:08:18:
         7a:8b:05:bf:17:29:11:b5:ab:04:7a:5f:4f:3f:07:e1:7e:67:
         0b:e3:3e:a0:91:56:ea:d6:d6:90:64:2a:42:a3:e7:56:d9:4e:
         7e:33:23:d0:b5:87:6c:3d:12:3b:08:ff:8c:3f:21:8f:de:2e:
         cf:75:6c:80:91:ba:1e:0f:6b:b4:1b:64:3d:6d:2b:58:5d:85:
         3e:9a:a1:79:ab:e2:00:15:d5:a6:bc:dc:2d:60:72:85:02:df:
         e5:76:d4:43:85:48:44:f5:1a:d3:e2:c0:50:f5:19:04:37:5d:
         0e:9d:a7:76:44:70:09:e7:94:4e:46:aa:45:1b:50:4a:f0:8a:
         42:11:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:19 2026 by rpki-client