Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
File:                     SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json)
Hash identifier:          JSTXwMrpQQFtHjk1ABhom1qn1S2ucN2r/YNDYa0OEk0=
Subject key identifier:   82:DC:57:C6:6A:16:A5:5E:AA:E1:9C:91:1B:BE:A6:63:FB:57:3D:FA
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Certificate issuer:       /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial:       03E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
Manifest number:          03DC
Signing time:             Wed 19 Aug 2026 00:53:15 +0000
Manifest this update:     Wed 19 Aug 2026 00:53:15 +0000
Manifest next update:     Wed 26 Aug 2026 00:53:15 +0000
Files and hashes:         1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: 7+/DSVawsDLx3V4qJ1WtGinF57z/efchnioY6VpU0xg=)
                          2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: 8Hg/6bEHVG5wm6bRNXZ2MyaYHSXk0DkxhouM2LKNEnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
                          rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
        Validity
            Not Before: Aug 19 00:53:15 2026 GMT
            Not After : Aug 26 00:53:15 2026 GMT
        Subject: CN=6a84fe7b-4e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:aa:c4:c8:03:43:e5:c1:5e:33:cc:9a:85:
                    48:1d:ba:98:a3:b3:fe:8d:c7:f9:b0:e7:9c:f8:9d:
                    b8:1e:fe:22:c4:19:5d:b5:8f:4d:b4:00:2d:d8:f3:
                    a4:86:5a:b3:c3:60:b7:88:91:f2:6a:48:90:aa:79:
                    0f:73:3b:67:f5:83:2f:0f:e1:46:56:0c:d0:2b:37:
                    04:2a:a0:c1:e2:d9:b8:95:1e:ad:7b:62:0d:c1:f1:
                    64:cf:8d:ca:40:10:2a:1d:c7:85:8a:ae:3f:19:3a:
                    72:cc:12:1a:bd:5f:20:69:81:8c:0d:13:cb:8f:15:
                    27:ca:00:90:1b:4a:45:80:52:a9:99:69:16:2f:a3:
                    ac:5a:c4:56:ae:f4:ed:28:e8:91:3d:a4:f7:6d:b9:
                    3e:7c:a0:e7:51:88:3f:25:84:e5:b9:f0:5b:5f:fd:
                    b7:0d:0c:bc:ba:2f:ab:1a:44:23:ad:5a:dd:e3:b6:
                    1e:19:e7:a8:ea:d7:e3:6d:ca:eb:df:63:d6:bb:22:
                    13:34:81:21:6f:e9:8d:2d:9a:93:69:39:dc:a5:2d:
                    e1:64:71:e3:7a:3d:ea:2e:c1:ac:52:5c:ac:53:53:
                    29:f2:53:16:b2:16:37:66:e4:53:22:50:57:26:03:
                    8c:1d:08:33:b5:f2:82:5d:b8:db:c5:0f:5f:dc:7f:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DC:57:C6:6A:16:A5:5E:AA:E1:9C:91:1B:BE:A6:63:FB:57:3D:FA
            X509v3 Authority Key Identifier:
                keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:02:c0:10:08:95:e8:56:35:cd:67:03:68:81:af:aa:35:e8:
         ec:82:6c:70:31:45:e0:cc:1a:30:fa:da:30:ce:d0:46:72:4e:
         40:53:36:b1:ad:0a:ec:7a:d3:db:2c:1c:47:f9:09:38:06:0b:
         4f:50:d3:61:93:ee:a4:5d:97:cb:2c:dd:87:4c:26:57:8c:2b:
         3b:b0:ad:83:26:f5:e1:14:bf:ea:38:3d:94:39:40:4b:ea:c6:
         a6:e2:92:28:83:24:b3:1b:88:99:51:d7:fc:d1:29:d7:e6:4a:
         60:af:b2:22:de:56:c4:44:b7:14:7d:1a:c1:01:5a:99:7d:ae:
         53:f3:d9:40:e6:29:93:b3:d6:79:9f:b6:3c:c1:37:de:e7:90:
         77:c1:02:f0:50:e2:b6:26:8a:87:b4:94:1d:c8:7b:45:60:39:
         f0:0a:72:6d:af:1e:14:46:a9:cb:ba:ca:c5:22:7a:79:dc:7a:
         1c:0f:39:f6:63:05:8d:3c:bb:62:ef:1c:20:08:69:e0:b2:34:
         e3:fc:5a:24:c4:2c:e0:53:e5:1c:e9:ef:dd:27:07:6d:c9:d5:
         5e:77:19:bf:99:1b:96:3f:5a:e4:d9:55:a0:81:68:df:f2:7e:
         36:08:21:55:06:40:a0:6f:f1:8a:50:a3:f9:c5:a7:17:1e:30:
         01:e1:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:07 2026 by rpki-client