Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
File:                     f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft (raw, json)
Hash identifier:          Zk6uQKU+9yX7cZmUlh1UWygg2hEhXZj6yzo1mBBiXgw=
Subject key identifier:   82:BB:22:9C:B1:2C:3A:C8:A1:4F:48:0D:9E:6A:B9:61:5B:CC:13:49
Authority key identifier: 7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C
Certificate issuer:       /CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
Certificate serial:       04B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
Manifest number:          04B0
Signing time:             Thu 23 Jul 2026 00:44:42 +0000
Manifest this update:     Thu 23 Jul 2026 00:44:42 +0000
Manifest next update:     Thu 30 Jul 2026 00:44:42 +0000
Files and hashes:         1: f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl (hash: hIHFD7fMCT3LUNFU3TMetoJ7acVJnK/IXaTAfUaJ3E8=)
                          2: 95EE2A18A8C511EC8F560C42C4F9AE02.roa (hash: oByhC98DATfVbELyz8rzGHhJXD6AbxTBKewcbZBeRZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1209 (0x4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D50, serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
        Validity
            Not Before: Jul 23 00:44:42 2026 GMT
            Not After : Jul 30 00:44:42 2026 GMT
        Subject: CN=6a6163fa-53ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:20:cc:47:a1:f1:e1:32:46:a4:ce:66:90:
                    28:96:d4:63:c4:07:ca:dd:4c:c9:93:6e:d4:49:20:
                    43:2b:28:45:3d:c5:03:d5:a0:4f:3a:44:65:ec:32:
                    3c:5b:a8:f6:26:c8:93:54:85:5f:bd:f4:aa:52:25:
                    b1:bf:66:ec:b2:37:2e:f3:2a:a5:47:31:21:70:25:
                    bf:82:db:f1:d7:73:31:8f:0a:e4:ff:2b:a1:bf:d5:
                    7f:49:b6:dd:cf:7d:db:ec:47:57:5e:4a:fb:e0:47:
                    f3:6c:d5:6d:61:ee:95:fa:69:07:2f:bb:b8:38:8a:
                    70:96:bd:09:d5:2a:b2:7b:d4:6a:c1:77:ad:88:19:
                    58:f3:1a:f0:27:e1:eb:60:8c:1a:6f:c1:37:88:22:
                    46:05:08:f4:77:f6:0d:06:69:ab:2b:d4:87:69:4a:
                    82:a0:b7:a8:34:b6:79:f2:7e:b4:05:b2:71:b6:b7:
                    56:c1:70:fb:d1:d2:82:d7:f3:dc:36:45:f9:9c:80:
                    ba:62:65:98:f8:c3:f8:d8:ae:e7:fa:d8:fe:31:ea:
                    03:c0:e6:0b:5d:6a:c5:fc:95:71:83:ac:ca:a6:a2:
                    ee:8a:23:fd:d9:95:69:df:1a:65:b4:ab:c3:09:fd:
                    61:01:04:f9:7a:6d:77:81:4f:33:89:0d:00:73:6b:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BB:22:9C:B1:2C:3A:C8:A1:4F:48:0D:9E:6A:B9:61:5B:CC:13:49
            X509v3 Authority Key Identifier:
                keyid:7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:21:38:bd:54:b3:cc:a0:88:a4:e8:25:54:14:4e:92:35:
         31:1a:62:d2:ff:c6:e0:1c:12:da:a3:ee:e0:64:41:da:fd:f5:
         a0:0a:6f:cd:4a:95:c5:59:f7:08:bd:8e:6c:fe:7d:ad:88:30:
         dd:12:8f:e3:aa:f3:d9:4b:82:d1:04:29:0c:1f:39:85:a8:25:
         db:21:71:d7:33:9b:d7:6c:a7:5c:2a:ce:6e:a4:62:3e:7b:3d:
         40:1a:79:bb:96:21:f3:9f:1c:4a:95:7c:43:47:0b:51:76:7e:
         c6:1b:3d:c6:07:14:fd:a3:92:9a:96:a3:23:1b:78:91:8e:6b:
         61:32:3f:43:b4:54:eb:94:6f:37:eb:42:35:8f:48:08:fa:11:
         96:34:22:2a:38:b9:53:79:2c:5f:d4:7e:a2:75:47:34:bf:0e:
         26:fc:3a:67:af:bc:c8:35:db:25:8b:42:87:ff:74:27:60:bb:
         d1:35:cb:9f:7e:2a:b3:5c:53:76:aa:81:58:3c:4c:cc:35:39:
         d5:c7:8e:ae:c5:ae:27:68:7b:ed:9f:aa:15:22:a5:82:37:39:
         48:07:d3:d1:ea:93:01:31:51:9a:dd:12:20:bd:74:66:be:ab:
         33:3e:d7:a8:c8:a8:eb:34:17:f6:be:90:cc:4d:c2:4d:15:68:
         ff:6f:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:26 2026 by rpki-client