Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
File:                     DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json)
Hash identifier:          qnRAeKP4LR02vSp1VyonI0Onw8+0dYKxaeDs+A1XW30=
Subject key identifier:   9E:44:BF:8D:8D:28:9F:9A:18:E1:AD:C2:C4:84:FB:4F:F2:23:40:81
Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E
Certificate issuer:       /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
Manifest number:          01A8
Signing time:             Thu 23 Jul 2026 05:31:13 +0000
Manifest this update:     Thu 23 Jul 2026 05:31:13 +0000
Manifest next update:     Thu 30 Jul 2026 05:31:13 +0000
Files and hashes:         1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: rowP3I2vN9GZiAutswPX4vLExAZ996fYR8SvazSD/0M=)
                          2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: jcMfcvbTYBEvZvAM9l9pumxljJCtyzP7TzycGPDLmwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl
                          rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
        Validity
            Not Before: Jul 23 05:31:13 2026 GMT
            Not After : Jul 30 05:31:13 2026 GMT
        Subject: CN=6a61a721-ba8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:fa:ae:58:71:09:70:bb:79:61:be:54:da:
                    b9:8d:3e:55:2e:23:4a:bb:e6:ac:5e:7c:c4:73:77:
                    8c:10:bb:da:ed:70:f3:bc:6d:7a:7a:60:13:59:6a:
                    81:3f:d3:3e:8b:bf:fe:0b:01:4e:20:66:ed:10:1c:
                    46:55:49:c3:fc:82:ed:35:a1:84:3a:93:72:85:4a:
                    eb:95:fc:0b:39:05:70:92:2c:10:72:9f:d0:f1:33:
                    09:db:0f:60:31:98:9d:d0:a8:f4:be:ea:99:ff:ec:
                    92:a8:2a:a0:70:88:cc:0b:86:9d:85:36:2e:91:20:
                    2d:46:39:aa:7b:09:38:26:4a:89:e9:d5:0c:17:0a:
                    80:ea:34:e9:40:ef:1a:25:b8:5b:49:91:80:75:1c:
                    e2:6f:8d:29:66:71:7b:de:f6:07:74:cb:75:6d:d8:
                    75:4e:4d:57:8e:08:e5:6e:28:69:6e:98:95:9c:a3:
                    a0:b1:2f:2e:88:cf:f1:c8:99:5e:e2:49:f0:0a:73:
                    6d:ef:4c:dc:11:2b:0f:46:0c:ab:c0:4e:1a:f7:4d:
                    51:02:33:f3:40:0a:79:c1:1d:09:c9:8c:d5:01:b9:
                    ae:76:e3:4b:40:e4:c4:5c:6e:6c:76:33:91:ef:4a:
                    1b:ee:e7:fc:b1:a4:1b:8e:dd:2d:6f:8c:55:24:7b:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:44:BF:8D:8D:28:9F:9A:18:E1:AD:C2:C4:84:FB:4F:F2:23:40:81
            X509v3 Authority Key Identifier:
                keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:92:21:ba:f5:8c:ca:21:d3:0a:e6:8a:f7:8d:d2:30:a0:39:
         e3:d1:18:ed:af:e4:d4:e5:c6:54:ae:a8:c6:4b:65:38:59:c5:
         a9:a8:e8:f9:42:a7:19:d3:60:f2:22:e3:8e:87:2d:36:2c:da:
         fc:ad:e0:dc:45:83:d2:18:a9:e3:71:24:90:99:2e:ef:e3:4c:
         aa:97:76:8a:9c:de:56:37:5f:89:72:7e:9d:a2:4f:42:9e:0d:
         4c:9c:5b:fb:c3:4d:52:fb:1e:95:99:08:f8:8a:09:50:68:a8:
         03:d2:d3:3c:09:25:88:75:bd:00:ca:cb:c2:29:dc:8f:c8:49:
         30:a4:24:93:92:21:7b:76:77:81:26:c5:ad:e6:ff:00:b6:29:
         00:30:9a:c3:7d:70:ac:5e:1e:a4:bd:69:33:60:4f:46:48:6c:
         eb:3d:74:0c:ae:34:58:aa:29:e4:11:b9:d0:47:26:ac:ce:5a:
         4b:91:06:e5:9b:98:5c:75:04:ef:b0:cb:6d:76:5b:38:cf:9a:
         3b:ca:9d:99:ab:dd:3d:ee:a2:9f:c2:7c:a1:1d:a0:99:24:f1:
         23:b0:48:a1:2f:bf:a7:97:fe:fd:c8:99:97:b1:7c:42:02:c9:
         9a:03:60:df:90:9b:13:b5:21:12:9f:5d:e7:89:6c:98:41:3c:
         a7:a4:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:26 2026 by rpki-client