Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
File:                     6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json)
Hash identifier:          QDHcdKBniyRclH3tpADr4guO8m1c3LpUzxUYg2I/IGM=
Subject key identifier:   B2:54:ED:3D:36:5C:A0:41:42:F3:E5:26:27:83:A7:14:17:E6:F6:16
Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0
Certificate issuer:       /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
Certificate serial:       35A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
Manifest number:          357D
Signing time:             Fri 24 Jul 2026 14:54:07 +0000
Manifest this update:     Fri 24 Jul 2026 14:54:07 +0000
Manifest next update:     Fri 31 Jul 2026 14:54:07 +0000
Files and hashes:         1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: 8BrXQ3/aRZO4wsN0F7jVNIPhim2t9l51PjNfZq/hVHs=)
                          2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: O3BxGtjSoAOdF49b+yAM0jtpp0WQxG4EaYJi9ABC0kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl
                          rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13734 (0x35a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
        Validity
            Not Before: Jul 24 14:54:07 2026 GMT
            Not After : Jul 31 14:54:07 2026 GMT
        Subject: CN=6a637c8f-39a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:03:8f:08:f6:58:33:ad:50:46:1a:37:5b:
                    14:1a:01:c8:2d:b1:87:68:0b:a6:68:b0:28:b2:0a:
                    f8:73:d9:9c:15:53:c9:1d:ab:b7:b5:16:e6:f9:21:
                    bf:26:82:30:63:1e:5e:56:f8:b0:e1:bd:16:99:cb:
                    f7:53:49:85:53:66:1a:7c:16:e9:4e:73:84:8c:1a:
                    06:86:2a:f3:89:87:93:33:82:f0:45:60:fa:43:bf:
                    3a:c3:a1:cd:6f:16:fd:8b:70:04:01:94:03:42:52:
                    26:44:54:ce:ae:60:06:fb:b7:6f:61:39:fa:4a:42:
                    aa:e0:5d:b4:f0:13:05:82:a9:b9:60:82:98:06:f0:
                    3a:0e:4d:1a:f0:46:09:61:d0:fd:fa:af:20:cc:f3:
                    eb:39:9a:c8:fa:70:bd:c8:ed:e4:4e:53:49:2e:9e:
                    6a:b6:49:2f:23:cf:13:6a:1f:0b:38:02:33:f6:20:
                    8f:e3:31:87:07:e2:0a:f4:48:fb:29:0e:ee:ba:98:
                    fc:ee:d3:df:9b:47:39:6e:92:64:62:cc:a3:ee:87:
                    2a:e5:2d:7e:70:78:1b:9b:56:0c:51:82:70:63:93:
                    d6:ce:64:a4:5a:d6:66:35:75:73:07:34:3e:58:2d:
                    a5:31:f5:a6:75:8e:96:ad:6b:27:3c:a7:92:02:48:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:ED:3D:36:5C:A0:41:42:F3:E5:26:27:83:A7:14:17:E6:F6:16
            X509v3 Authority Key Identifier:
                keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:5b:9a:61:25:f7:0d:90:25:68:8a:66:49:e9:dd:ae:37:3f:
         30:d9:d3:a0:aa:45:99:9f:62:27:18:8d:72:ab:7f:58:91:5b:
         8f:05:60:60:b5:6d:1f:a2:43:a8:6e:0b:50:71:a0:e4:68:d8:
         96:c7:df:a1:be:a0:03:f2:18:07:4c:4a:5e:13:d7:3f:88:76:
         c5:89:5c:3f:45:3a:81:d2:a8:ef:35:94:65:c5:e7:5e:7d:45:
         8f:5d:56:ae:54:f6:95:b9:89:13:26:02:be:c5:2b:c1:7d:8f:
         1f:3a:b2:19:2c:2f:b8:a7:69:50:7d:29:75:52:ab:e8:01:b7:
         c4:84:f0:c0:a8:c9:03:c5:c5:89:c2:7b:64:56:64:9a:e7:b4:
         b5:11:88:9f:c1:96:06:d3:4d:72:5f:80:d5:aa:89:b6:93:e9:
         87:40:81:49:1f:ea:b7:75:a4:84:b2:84:01:b8:16:f0:6d:f4:
         0a:3b:92:49:df:a3:7c:a0:69:98:d5:a3:1f:8c:88:2a:91:33:
         f4:5e:96:a7:c6:23:c8:da:c3:02:25:51:f8:e3:f4:b1:7a:db:
         5f:4f:57:95:f6:a8:6a:84:e8:24:39:af:ec:e1:f5:fa:98:c5:
         6b:3d:32:76:a9:59:f9:79:40:cf:03:5d:aa:d3:68:4b:1c:56:
         89:3c:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:29:04 2026 by rpki-client