Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File:                     n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier:          WOsuQfHeHg7cWp1MAnp+dLRgDm1eyebswJiEE3w7kDA=
Subject key identifier:   54:83:56:4A:E1:38:AF:3E:24:5D:DB:32:DB:E8:88:0A:F0:72:BD:54
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number:          35AA
Signing time:             Wed 22 Jul 2026 14:22:53 +0000
Manifest this update:     Wed 22 Jul 2026 14:22:52 +0000
Manifest next update:     Wed 29 Jul 2026 14:22:52 +0000
Files and hashes:         1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: lj0D8qOS3dtP1GCi68DzRXi8mIae0gqi3eAiCRGBy4M=)
                          2: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: n/rtVmTMB1Py5Ik0TDu++khNfNTrCl3b/ICvjZej0xc=)
                          3: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: bMXbbXDj5RaZ0Ee7YCwgs/7Vdo6yL1uCa/jY5e4Qep0=)
                          4: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: YuxiT+o6NacPiPMOQ8zhMa/ehrSyMJnmfoAK7JucAN0=)
                          5: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: Dx8o50rE1OKe1inVw3oUo0yNA4V99kP9sCKq9GKRraw=)
                          6: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: u97TYLT/BQTtijKwV5M2wT1c0/v/G8Iw+MIW/+UaOhM=)
                          7: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: hz5gUzbaN7J/VQDJx9BzlgHZ7QvQPcRlAB3rDG9NM3I=)
                          8: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: ajWPfgyIE3umSCJ2gTUfFCsZjiBnhTSdlnITGNY926s=)
                          9: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: tim1sMDu0bOwl1syg0MHcvHXmnELHIcAaqZu6XOIY64=)
                          10: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Pi9bRPgU/hz3+L0wJzzWeCFlpEZjC2aR2BJhIidT0sA=)
                          11: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: tnQvcL+XlKj1mrWVClsnZNGw7PANVizY98r9YXkQdO4=)
                          12: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: p//zkhXiOBuBirrvlxHSciakC9fZnELNCSm8Uvn27ZE=)
                          13: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: qtf7Df2GnJiRrGvanH5s0hEvrPF8g7/kGohVnvp97F4=)
                          14: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: WVPtgUERZHpgB/DQwz60lkH6Uc54oBG0ERaAVC6IExA=)
                          15: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: BZKoDF/7kTMYC8p2F7sy+ku+IsTTX9iqMyQIA+SIbiY=)
                          16: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: folYHW0Gwg29Q/Y88gdrsYlLi/YxqwtkEzwH995b74w=)
                          17: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: T1/3yr80tQn2wXUoaI6SgP3gcD+G/JWjJxOxFcBZOzQ=)
                          18: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: B27wh3fEi/hAOB71J/u7lh6WCTRhDeDyoP1VWvu0ryI=)
                          19: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: lpyjRDEla69ljuEGYEqFeb3N2SUniW4iezq7HN/byZI=)
                          20: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: 2IvnCeqQ65Zlp2C2lqFnO2zCq+IPSyQ8nLjI5fuUZPA=)
                          21: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: uu4m5WVb6SU6WZl3ObRQUMqZyoKCwCWL6M6mRfFvoL4=)
                          22: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: 0+07+O2nWAirNYVLyV1pe7GfKo/vf0ORWGc4yAP010g=)
                          23: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: tuxt7AAVdlIorySbquWSOc2cd9Lyaw78OSqZYuKb270=)
                          24: CEC68F44973211E9954F0565C4F9AE02.roa (hash: 9TSvBz+OjIAdBGbstVi1TzZ4VL3DuXLguW4IimNLnXA=)
                          25: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: pTltMgVWE0zVNXrntrbtBqvZnO3y4UNU+dhd1NyglWY=)
                          26: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: Bwyx7v9ErsR+mUyY+3+Ype9qNhlTd5XIZgvvVkhOvjQ=)
                          27: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: wq81aF5SSoAZI/JyoA1vNO3zjZsKt2TkcT5Pso38nSU=)
                          28: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: /+QRen7Io05J4Xucot84AqX64nbfLZG1ouY7NxOjV3s=)
                          29: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: lHidmOj5/4kQC0HWnQsBBkm8/7iR9N9wMoSuEzHus1A=)
                          30: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: xXXKUBvKApT8YVzNPAtueFWn7BnVKJjI5nKq0lyvM4o=)
                          31: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: hRhJmPw6HJ/CFTNiB4jTfaz2NVHh3MBNmnrOJmVcsDg=)
                          32: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 9CH9K0zReFPkNUN2+CaNA2ol+J26nnIjRlVx1c5X4ZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14054 (0x36e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 22 14:22:52 2026 GMT
            Not After : Jul 29 14:22:52 2026 GMT
        Subject: CN=6a60d23d-2ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:cf:58:8a:81:3f:47:1b:53:b7:0b:79:2a:
                    c7:ff:f9:00:57:53:b7:09:44:70:b6:52:b2:a2:60:
                    04:4b:fb:93:98:ff:03:fc:60:1d:ef:d1:38:ec:a8:
                    b7:c5:18:88:a2:f2:92:20:e1:4b:9b:8d:a9:66:db:
                    66:24:06:9e:14:c1:ba:a8:9e:c1:17:16:15:30:85:
                    8f:57:0d:df:c7:e7:c4:d2:a5:31:65:64:d1:7c:43:
                    58:be:8a:f2:23:19:01:f1:bf:e0:30:c2:bf:da:23:
                    cd:9a:e9:54:79:43:f3:c8:09:e6:57:55:3c:fc:3b:
                    e5:9d:6c:80:54:77:b3:09:b1:a9:b4:46:5b:76:76:
                    1f:38:db:36:90:7c:ab:41:6d:ce:ef:0b:67:1e:63:
                    cd:08:4e:13:59:d6:30:74:42:a2:46:6a:a8:a0:f4:
                    5e:ac:ea:be:87:75:be:d6:75:d7:08:54:77:7e:47:
                    39:22:fe:f9:8d:f6:0d:ea:63:f6:13:71:52:cc:af:
                    12:5e:a7:83:d6:c1:02:59:24:8f:8d:8a:ac:48:77:
                    ad:24:bb:b3:03:4e:5b:65:b1:cc:52:05:8f:01:f0:
                    ff:79:2a:9f:65:c0:cd:9d:f8:9f:5b:88:56:c5:8e:
                    2a:56:2d:40:3a:f3:79:9e:23:d2:8c:37:66:36:9d:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:83:56:4A:E1:38:AF:3E:24:5D:DB:32:DB:E8:88:0A:F0:72:BD:54
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:48:7f:14:ee:bf:56:f8:4a:5d:99:c8:6b:f2:12:70:5b:5b:
         e6:de:ea:5c:24:2d:b6:62:0c:b6:06:de:30:14:15:8d:9f:e5:
         86:c9:a2:06:17:81:8a:fc:0d:b6:85:9d:ee:74:bc:4a:52:96:
         8f:aa:63:7d:b5:6d:d9:6b:4d:b0:84:4f:19:54:b2:69:d2:ab:
         35:51:76:fd:c9:c3:b7:84:02:ea:32:79:55:88:d8:7c:4d:88:
         db:3d:c1:7e:6c:d2:85:f7:89:98:5e:63:89:32:92:90:5a:43:
         96:77:fe:7d:18:d2:f4:b3:61:83:24:b6:0e:b4:4c:c1:33:5a:
         54:a8:f5:cd:91:0d:cf:81:6c:09:1b:a5:7f:2a:80:b6:37:88:
         f5:0c:d8:88:a8:0c:99:ff:91:4c:65:36:1a:13:8f:c7:69:c0:
         9e:a8:44:45:4b:58:51:80:ef:c9:ef:70:a1:8f:70:fa:94:a0:
         27:bc:0c:d1:be:7a:9d:c2:fe:cc:1c:62:22:a8:64:a1:62:57:
         2d:67:82:d8:7e:94:25:ca:4c:c0:c0:ed:06:45:5d:f4:00:ae:
         a4:12:e8:39:a5:67:4c:47:a7:60:e5:a9:81:ce:f8:4d:77:8b:
         4e:46:ed:c0:79:d7:d1:fc:01:c1:04:83:a0:87:57:b1:59:89:
         87:a1:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:13 2026 by rpki-client