Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File:                     Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier:          88huI9okFgsZKfmI1fVuSxXjFqc99dxIxqJQOEygq7s=
Subject key identifier:   F8:24:35:87:EA:CC:FF:56:87:00:36:33:DB:91:E2:A6:18:F9:C9:87
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer:       /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial:       29F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number:          29CE
Signing time:             Wed 22 Jul 2026 15:39:19 +0000
Manifest this update:     Wed 22 Jul 2026 15:39:18 +0000
Manifest next update:     Wed 29 Jul 2026 15:39:18 +0000
Files and hashes:         1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: nDS2byRLFWH+/n2S5MTteX3m9iFsJy5hWvwt8h3R2hU=)
                          2: 58292E96774111F0A079543BC4F9AE02.roa (hash: +OItqlvFi/OJz28aPTkH59gdOncbNOxJz2Bk3pv0y/8=)
                          3: F4246CDA561811E98A165872C4F9AE02.roa (hash: 2dvRnm4pfzjCtWstN3B5/ymv7Hda5U6DYqNjAuMZVLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10739 (0x29f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
        Validity
            Not Before: Jul 22 15:39:18 2026 GMT
            Not After : Jul 29 15:39:18 2026 GMT
        Subject: CN=6a60e427-ea3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5f:a9:98:a0:7d:10:d1:55:c7:30:c9:4f:18:
                    49:5f:ed:90:10:96:8c:5a:70:ed:c9:49:91:f4:c5:
                    6b:b4:39:df:d8:5c:3a:3f:21:ee:8f:1e:51:0b:0a:
                    f7:aa:07:6b:6f:2d:d2:c9:28:62:1d:2e:22:eb:20:
                    a3:74:57:01:62:7d:5f:c9:ba:6f:83:b1:34:5b:75:
                    4e:5d:81:77:23:2a:c1:e4:c7:91:5f:43:83:e8:f3:
                    5a:35:ab:59:61:de:0e:54:34:8f:3f:67:bf:1c:55:
                    58:5f:eb:7e:3f:3b:ff:74:4e:57:2a:3d:2d:e7:0d:
                    24:45:d6:05:08:f7:e1:d3:1d:1f:be:85:53:d8:7c:
                    77:ac:e5:b0:06:14:6c:40:c3:16:fa:47:eb:f2:20:
                    f9:72:02:78:cd:1e:07:db:28:3e:04:7f:6c:13:b8:
                    8d:6f:5c:08:8e:bd:d2:c6:cc:bc:83:f3:59:d4:ac:
                    a2:a2:a5:88:d6:e1:35:16:11:36:1d:e7:09:1e:f6:
                    d7:bd:76:da:75:f2:24:30:a8:70:c6:9a:db:37:6e:
                    60:24:e6:57:5a:06:76:1f:3b:61:3d:55:6c:55:9d:
                    ca:fe:52:b9:ba:69:58:82:54:58:ae:0d:c4:c8:fe:
                    d5:56:8c:9b:df:05:16:89:80:6d:88:5d:96:19:4a:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:24:35:87:EA:CC:FF:56:87:00:36:33:DB:91:E2:A6:18:F9:C9:87
            X509v3 Authority Key Identifier:
                keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8b:cd:6b:90:35:b1:8b:f6:b2:48:ee:0a:93:fc:f6:10:da:
         d7:91:fe:cc:3a:8f:90:af:c6:af:6e:84:78:25:b3:d3:98:09:
         18:0f:77:58:31:12:41:cc:73:5c:22:ba:13:ec:9e:0b:76:20:
         d2:84:aa:cd:83:3e:24:4d:e2:14:79:c5:dd:ff:fc:91:6a:9e:
         1b:b6:44:72:64:c0:d3:23:1c:b7:21:18:a7:6e:80:ec:63:0c:
         31:a9:99:7b:c0:02:98:a1:29:63:8e:e9:d5:bc:80:6c:72:76:
         9b:31:a0:c4:18:88:6a:84:94:48:c2:64:3f:60:ba:6b:82:01:
         bb:ac:c0:21:23:9f:9f:b3:37:e0:ca:a0:27:04:75:35:f4:25:
         49:18:51:10:82:ca:3c:6c:58:63:3d:4c:14:6a:4c:0d:92:4a:
         42:a4:fb:7e:65:f5:5a:52:47:20:00:53:ae:ca:5d:79:ee:76:
         d6:6b:59:8c:23:bb:24:38:2a:10:03:8f:3e:22:70:60:c1:0c:
         7c:fe:7d:2b:6a:d8:ef:43:55:8e:11:fd:12:1a:3c:fd:9b:3f:
         23:b5:37:96:70:42:2a:ad:6e:d6:84:54:98:b0:ad:f2:15:58:
         d1:44:3e:b2:69:3a:2b:ab:95:85:81:02:b1:3d:5b:b1:f5:53:
         c5:2e:33:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:02 2026 by rpki-client