Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
File:                     S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json)
Hash identifier:          8utP04Zv7SnJL2gsQuj63SO/PWQ0ipLh/LbY1iJlYZo=
Subject key identifier:   C7:40:A8:0A:EE:0C:92:BD:36:95:85:47:0E:77:DF:C7:7A:6D:24:2C
Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
Certificate issuer:       /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Certificate serial:       0855
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
Manifest number:          084D
Signing time:             Wed 08 Jul 2026 21:42:36 +0000
Manifest this update:     Wed 08 Jul 2026 21:42:36 +0000
Manifest next update:     Wed 15 Jul 2026 21:42:36 +0000
Files and hashes:         1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: v8q/rU2zy0tDdzTbHOaBH6jbDGs9Tnpyj/p1dJgiChw=)
                          2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: uOMbohBjqYkrJACqTf93OXW7s4M6jLEwG//Jh6twRk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl
                          rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 21:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
        Validity
            Not Before: Jul  8 21:42:36 2026 GMT
            Not After : Jul 15 21:42:36 2026 GMT
        Subject: CN=6a4ec44c-5b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:18:02:08:6e:86:bd:f5:03:34:dc:15:65:ba:
                    2a:ce:df:ee:25:ce:9d:5a:d7:82:a3:d2:39:bf:fe:
                    1f:1c:a5:89:60:c6:8b:48:b8:48:98:0b:4e:a1:a7:
                    b4:dc:83:6d:82:af:ca:47:ac:9b:57:ec:90:5f:3a:
                    a8:82:4a:7e:17:f6:3f:ce:f0:4f:ed:83:f5:b0:09:
                    3d:46:b4:ae:79:c7:c8:cc:6d:98:0c:d6:2d:d6:b7:
                    0c:e3:c0:fd:34:5a:29:7b:58:a4:cf:49:1a:b5:90:
                    75:b2:f4:1c:04:40:ed:b5:0d:22:8a:cc:b8:e5:e8:
                    b5:cd:a6:32:52:a3:e1:74:cd:69:e2:0c:e6:db:31:
                    b0:ce:9e:49:b9:08:54:63:8f:a6:6c:cb:b3:70:f9:
                    6a:05:54:50:7b:4f:9f:71:c3:e9:cd:87:9b:2c:72:
                    e7:2b:df:a4:94:3a:37:4a:79:4e:67:30:c0:ba:bd:
                    30:8c:0c:ff:d4:b0:80:0f:4e:c7:22:63:de:e6:7d:
                    3f:7c:d4:16:c5:5a:9f:fe:54:d6:fe:df:39:e2:db:
                    d7:24:0a:18:62:a6:5c:d9:03:05:2f:c7:ad:fc:cc:
                    f4:50:cc:ea:e6:91:87:bf:47:8d:6f:ff:3d:3c:f8:
                    2f:2d:56:d8:f1:94:c7:a6:bf:2c:ed:17:07:e9:f7:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:40:A8:0A:EE:0C:92:BD:36:95:85:47:0E:77:DF:C7:7A:6D:24:2C
            X509v3 Authority Key Identifier:
                keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:11:07:e7:5a:ab:e9:74:25:e3:58:4d:17:d7:52:bd:43:
         1f:f9:86:52:8f:dd:e5:dc:f9:5e:19:bd:f9:94:db:cf:4d:fd:
         ad:09:f4:f3:24:16:c0:84:1b:6a:fd:c0:b8:f0:19:15:43:59:
         55:fb:7c:3f:a3:35:77:18:8f:01:f2:c8:85:25:0d:7b:4f:56:
         a0:00:04:b2:44:19:0f:3c:47:06:40:4b:b5:04:a6:fd:00:0c:
         3a:8f:f9:29:f9:ba:68:f1:a3:56:a6:6f:0c:3a:5b:48:1c:00:
         a8:1f:2b:cd:ad:ae:96:59:0a:59:97:3a:20:c6:88:9e:87:c0:
         10:6a:bd:31:ef:0f:73:74:e0:00:4a:5f:f0:f9:b7:51:4c:c0:
         a6:0b:13:d8:03:09:34:f8:6b:b8:49:3d:82:5b:24:21:3c:cb:
         e3:e7:9a:18:fb:94:03:51:a1:57:f1:b0:77:a4:8c:05:56:6a:
         66:f1:cc:e7:a1:49:10:18:e1:24:d5:5b:85:73:99:9c:ae:e7:
         11:9d:87:c8:f3:0d:6f:9d:fc:fe:1c:7d:de:76:82:0a:34:b7:
         fa:57:a7:fa:ae:f9:d6:63:6c:19:ef:48:b4:ca:eb:2f:18:a1:
         3f:21:0c:67:e9:1e:92:ef:7b:ee:5d:79:c1:1c:b3:21:28:83:
         e9:75:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 11:07:26 2026 by rpki-client