Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
File:                     zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json)
Hash identifier:          vyaBdDN1eEDV4CaNFwqYb1Jn4+HY0IppJRgAPj3qpfY=
Subject key identifier:   12:A1:30:98:9C:27:08:47:EC:F6:DE:DC:BB:70:2C:2B:6E:58:97:32
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Certificate issuer:       /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial:       1F16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
Manifest number:          1EE2
Signing time:             Wed 22 Jul 2026 16:07:01 +0000
Manifest this update:     Wed 22 Jul 2026 16:07:00 +0000
Manifest next update:     Wed 29 Jul 2026 16:07:00 +0000
Files and hashes:         1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: qZ4nBfZV88cvJCGm9Vw8dKs7s77l5hp9Vw0+2mFAvjk=)
                          2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: ZF+S9Eq6dimNzHWGXtdSSL8R6tb42i721A8ipARJHDg=)
                          3: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: SP9KLqagmi8apHAQ/A1PSM4jrXC2JUZTS6enHcX0VwU=)
                          4: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: fuTljzKvBea7sJt2VNckungbhAnkDIYji3I6D462WJ8=)
                          5: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: TptByVGgUQdWR0MavGH9OYmCsbH/nXydqU06KChwsXI=)
                          6: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: MORsfRo625k6Z6J+RgEowsAvarYUIEu/pPax0H0xX08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7958 (0x1f16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
        Validity
            Not Before: Jul 22 16:07:00 2026 GMT
            Not After : Jul 29 16:07:00 2026 GMT
        Subject: CN=6a60eaa5-4583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:a2:02:cc:0a:87:b9:42:b7:66:9e:77:1a:
                    1c:3b:2e:d6:dd:23:01:38:89:25:aa:f3:05:1f:5c:
                    a0:3c:3e:ec:23:8d:3c:aa:1d:8e:a5:4f:25:47:f2:
                    ec:34:09:d7:55:94:8a:14:78:2c:ea:8c:95:bc:cd:
                    ee:f7:5d:bf:90:8a:f3:60:9a:45:a1:9c:96:36:6f:
                    e2:fb:5b:19:9e:19:ce:30:f9:fa:5e:4e:ac:db:fa:
                    32:2a:96:1f:d9:d7:cb:91:37:b5:c0:9c:a9:ff:29:
                    63:b2:31:7d:3d:42:58:84:e6:60:c0:68:4e:10:e9:
                    18:a7:d8:c0:9b:41:a0:17:09:b4:fd:b3:29:8b:e6:
                    88:5f:21:38:cd:89:59:81:58:db:7a:bc:68:e7:45:
                    36:72:f8:cc:45:94:fe:38:74:af:13:57:cc:1b:84:
                    82:e1:0b:b1:e8:d8:75:8e:3e:6e:03:7d:78:17:60:
                    9a:bd:bb:f8:11:25:03:45:22:c1:71:a8:76:b7:9d:
                    d3:57:2c:59:d3:f6:38:1f:db:08:01:b4:16:d4:b8:
                    60:c9:92:18:68:c9:66:5c:ad:a3:0e:7e:70:9d:8a:
                    7e:09:4c:76:b7:ab:df:9b:bc:09:08:73:00:58:9a:
                    2c:5d:00:f6:a7:db:c8:20:14:aa:83:36:77:ac:65:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:30:98:9C:27:08:47:EC:F6:DE:DC:BB:70:2C:2B:6E:58:97:32
            X509v3 Authority Key Identifier:
                keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:af:5d:78:b2:0f:a7:bf:7d:33:ea:12:21:4b:b6:b7:10:
         1d:f4:bd:c0:85:d6:b5:be:b1:bb:37:23:c9:de:00:be:14:51:
         46:d9:d7:5c:60:48:88:fb:57:16:69:01:b3:3b:03:98:bb:ff:
         f2:82:a9:8f:24:b2:e8:37:2c:d4:68:f9:5a:42:8a:46:43:a3:
         60:c9:e5:bf:cd:29:ea:90:5f:87:c7:6c:d8:fb:06:ec:bd:f1:
         db:68:70:b2:b8:28:fb:31:84:8f:b2:aa:4e:48:3a:ae:e2:8e:
         39:19:76:53:41:24:2f:a1:d0:58:e6:b7:07:c7:14:0b:31:6b:
         a6:20:7f:1b:d2:65:10:9f:35:36:5e:59:2c:83:8f:06:62:9c:
         d3:86:bb:32:d1:bf:34:d4:ed:0d:64:ce:f7:af:86:08:36:a9:
         ac:85:a1:b3:27:d3:ae:02:02:07:f9:a9:72:48:cc:36:fe:53:
         5b:ab:2d:c3:e9:6d:b1:0e:cd:69:14:ae:7f:39:ea:20:6a:cb:
         85:8a:4e:36:da:22:7d:d3:a3:16:d6:05:04:74:01:83:f5:7a:
         0d:f3:0a:1f:37:07:c9:6d:ea:c5:2b:da:fe:b7:36:6b:46:8d:
         d0:27:70:28:89:0b:53:af:17:23:a1:b7:c2:c8:e4:5f:a4:44:
         b6:d6:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:38 2026 by rpki-client