Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File:                     Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier:          Q24f72R3yGvcFPBh0SorB0C989DqGtYOI4lg8qtzB3g=
Subject key identifier:   68:F0:68:7A:0B:4C:9A:EE:66:18:E0:82:79:6F:5C:18:E7:EC:79:A6
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer:       /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial:       034F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number:          0348
Signing time:             Wed 19 Aug 2026 01:21:40 +0000
Manifest this update:     Wed 19 Aug 2026 01:21:39 +0000
Manifest next update:     Wed 26 Aug 2026 01:21:39 +0000
Files and hashes:         1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: RMfcpuxnbztVtKJIyA0lRzHQUWf44/cq35m1LdVcAXQ=)
                          2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: LqX1NYcUBpIFn4nEYWAdBnB30XYthrymeUC3YsifzY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
        Validity
            Not Before: Aug 19 01:21:39 2026 GMT
            Not After : Aug 26 01:21:39 2026 GMT
        Subject: CN=6a850524-05f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:9e:e8:cb:34:01:70:43:c8:ac:f1:4b:12:
                    ff:25:f8:3b:c1:67:4a:d2:7c:6a:28:7b:c2:17:8c:
                    22:b9:41:f7:24:0c:c2:64:9c:c3:e9:ac:c7:3c:43:
                    d0:2d:60:2f:53:0e:d8:3c:be:59:ce:a2:a6:08:38:
                    0f:9e:44:48:92:08:56:c5:79:3d:f7:d3:39:d3:f4:
                    31:fa:29:66:5c:b5:89:f4:28:26:6d:72:78:ab:a6:
                    40:c3:c2:7f:a2:5d:ce:5d:d3:b3:be:75:7e:c1:19:
                    b4:9f:1e:30:68:4b:0b:22:43:28:f7:ec:5c:35:b6:
                    90:9f:15:f1:d8:f9:80:01:05:8a:b6:0e:50:4e:eb:
                    a3:b0:65:33:1b:29:93:3a:98:07:41:25:23:c8:c8:
                    fc:7c:49:98:94:30:5f:cc:e5:1b:f5:aa:f0:f4:8c:
                    51:ac:4d:2b:6c:5d:50:64:7b:3f:e1:d3:09:f6:10:
                    12:58:c0:f6:58:a6:8f:59:91:91:56:86:7f:a1:b8:
                    1f:09:5a:7e:1d:51:67:7e:8b:58:7d:cc:7f:f1:0e:
                    b7:e6:62:21:3a:8b:48:94:2d:64:78:c9:78:61:b5:
                    e0:ec:e4:a0:69:54:ba:5f:99:30:7a:75:db:c4:42:
                    16:5d:a5:53:b3:4e:50:b9:ed:cf:6b:ef:5e:e4:e8:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F0:68:7A:0B:4C:9A:EE:66:18:E0:82:79:6F:5C:18:E7:EC:79:A6
            X509v3 Authority Key Identifier:
                keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f1:91:36:3e:09:1b:bc:4b:e8:f3:24:25:a0:fa:41:2e:d7:
         16:e4:56:1b:37:51:fa:a3:a7:1a:f5:eb:ee:a6:a0:7f:6f:cd:
         f3:df:5d:33:d4:18:4d:b0:ea:fc:49:22:a9:c5:48:c6:33:4b:
         1d:0d:ec:cc:aa:b7:c0:d6:2e:1f:c4:58:16:22:5e:b4:68:53:
         c0:77:26:05:0e:eb:ab:36:40:34:27:7f:16:aa:d9:35:4e:00:
         55:cd:26:76:3e:c9:15:42:c9:6e:05:f0:64:21:f6:cc:31:e4:
         86:79:b0:6d:50:d8:5f:28:f5:46:aa:63:1c:50:97:c3:a4:e9:
         21:91:fe:1e:7f:96:91:03:9d:eb:23:3d:14:ad:83:1b:94:1a:
         72:0a:f4:7b:9c:bd:05:6a:0f:ca:78:2f:96:bb:5d:54:7e:38:
         fc:83:81:50:4d:72:47:25:bd:55:c8:89:cb:ba:b8:84:41:26:
         39:52:d0:70:44:fc:b5:ce:6b:7d:02:18:08:ec:3b:af:d8:c3:
         64:ca:11:c2:5c:c0:3d:db:3d:1e:08:3c:28:85:f8:03:66:1b:
         18:e8:94:6d:63:90:1e:f4:bd:8b:dd:3d:7f:8d:6e:94:78:ff:
         bb:52:ad:66:40:a9:f4:5e:f1:70:30:e3:a8:16:4a:d0:8c:c2:
         77:e9:89:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwQTAxMTAvBgNVBAUTKDRBMkZCQjQ2MEQxQkQ4RjMxNkY2NjQyRDlFQjVGNEMz
QjIyMDE4OUQwHhcNMjYwODE5MDEyMTM5WhcNMjYwODI2MDEyMTM5WjAYMRYwFAYD
VQQDEw02YTg1MDUyNC0wNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAloKe6Ms0AXBDyKzxSxL/Jfg7wWdK0nxqKHvCF4wiuUH3JAzCZJzD6azHPEPQ
LWAvUw7YPL5ZzqKmCDgPnkRIkghWxXk999M50/Qx+ilmXLWJ9CgmbXJ4q6ZAw8J/
ol3OXdOzvnV+wRm0nx4waEsLIkMo9+xcNbaQnxXx2PmAAQWKtg5QTuujsGUzGymT
OpgHQSUjyMj8fEmYlDBfzOUb9arw9IxRrE0rbF1QZHs/4dMJ9hASWMD2WKaPWZGR
VoZ/obgfCVp+HVFnfotYfcx/8Q635mIhOotIlC1keMl4YbXg7OSgaVS6X5kwenXb
xEIWXaVTs05Que3Pa+9e5OiHwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjwaHoL
TJruZhjggnlvXBjn7HmmMB8GA1UdIwQYMBaAFEovu0YNG9jzFvZkLZ619MOyIBid
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTBBMC9BNDI1NzU2MjE2
QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQTVc5bVF0bnJYMHc3SWdH
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NpLTdSZzBiMlBNVzltUXRuclgwdzdJZ0dKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTBBMC9BNDI1NzU2MjE2QTQxMUVEOEUzN0M3MENDNEY5QUUwMi9TaS03UmcwYjJQ
TVc5bVF0bnJYMHc3SWdHSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsvGRNj4JG7xL6PMkJaD6QS7XFuRWGzdR+qOnGvXr7qagf2/N899dM9QYTbDq
/EkiqcVIxjNLHQ3szKq3wNYuH8RYFiJetGhTwHcmBQ7rqzZANCd/FqrZNU4AVc0m
dj7JFULJbgXwZCH2zDHkhnmwbVDYXyj1RqpjHFCXw6TpIZH+Hn+WkQOd6yM9FK2D
G5Qacgr0e5y9BWoPyngvlrtdVH44/IOBUE1yRyW9VciJy7q4hEEmOVLQcET8tc5r
fQIYCOw7r9jDZMoRwlzAPds9Hgg8KIX4A2YbGOiUbWOQHvS9i909f41ulHj/u1Kt
ZkCp9F7xcDDjqBZK0IzCd+mJFg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:12 2026 by rpki-client