Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
File:                     Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json)
Hash identifier:          dUKB823uOMcrv0Xf2wWt2oCTYc2+T0lmkQgACmg4+bU=
Subject key identifier:   A4:D3:96:9A:0D:A1:F6:90:71:A1:2A:69:B9:A6:87:D6:50:22:51:5B
Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
Certificate issuer:       /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Certificate serial:       0CB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
Manifest number:          0C9F
Signing time:             Wed 22 Jul 2026 18:50:58 +0000
Manifest this update:     Wed 22 Jul 2026 18:50:57 +0000
Manifest next update:     Wed 29 Jul 2026 18:50:57 +0000
Files and hashes:         1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: fKpe5b7jsp6Pnr1mH3i9sbWHq5NFAloGbgLOCibz0Yc=)
                          2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: aBLu12X/KjBQz6+vTYYYPJq2RB5e32VzOLCjoKt8rHA=)
                          3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: OyMpzW+KeT1/VlF8h4v55nU9WTVj14mDgJ/Hy/mEDTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
                          rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
        Validity
            Not Before: Jul 22 18:50:57 2026 GMT
            Not After : Jul 29 18:50:57 2026 GMT
        Subject: CN=6a611112-ee65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:71:be:00:51:b2:d4:ad:1b:a1:dd:0c:69:36:
                    9c:20:e1:a3:9a:29:18:18:af:b0:a6:43:17:ee:f4:
                    09:76:00:e0:cb:6d:9b:af:25:6b:a6:c3:85:11:17:
                    b1:71:91:64:d2:96:51:c3:08:e6:20:8e:59:7f:e8:
                    29:77:d8:9d:b9:8f:94:04:78:aa:22:45:d0:6b:be:
                    9e:68:3d:83:9b:ae:77:41:b5:21:bc:9f:4b:82:cf:
                    da:2c:f5:f1:ee:b2:13:f0:d4:db:fe:86:48:82:20:
                    33:a6:fd:d1:08:17:f0:7f:3d:06:b3:0b:23:1d:fb:
                    4c:fa:18:e0:76:a4:38:2d:2b:a2:87:8b:6b:67:17:
                    bc:78:2b:7e:98:c8:16:cd:40:e9:a9:08:b3:55:13:
                    3e:8c:9e:a1:72:c1:38:21:0b:67:a0:2d:81:01:f2:
                    7c:80:14:c5:7d:64:e9:8b:8f:db:ab:37:f6:2f:0b:
                    3f:4f:f7:c8:48:f9:2f:2a:2e:85:9c:81:f6:09:a2:
                    11:2a:9f:66:b1:33:96:9a:6b:65:9c:73:cd:fa:1e:
                    46:37:8f:34:55:e5:42:e6:c3:70:0e:74:7a:11:9a:
                    7a:f8:dd:e9:98:43:2a:cc:dc:09:f1:99:e3:6e:3a:
                    fe:08:ea:fe:39:14:ae:46:d2:d8:e5:c3:da:8a:8f:
                    04:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D3:96:9A:0D:A1:F6:90:71:A1:2A:69:B9:A6:87:D6:50:22:51:5B
            X509v3 Authority Key Identifier:
                keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:01:4f:b7:28:ac:70:56:47:b0:bd:0a:2b:60:34:23:cf:
         61:86:a2:08:87:9a:9c:66:d0:11:e3:ed:70:24:56:a2:b8:aa:
         3a:b1:fb:27:d0:12:81:cc:34:25:50:55:d6:fd:75:e4:12:d1:
         3a:81:4f:8d:4f:4f:34:da:5d:7e:5a:27:0e:b2:36:f8:64:e3:
         e8:2d:bc:e0:fd:39:f5:b1:f9:d6:a0:61:2b:97:69:f1:84:cf:
         ed:63:63:11:5d:21:ae:c7:29:87:bd:df:21:7c:50:83:2e:ae:
         bd:6e:3c:6b:02:69:55:ae:ae:00:59:73:4c:19:79:ef:a0:e5:
         73:f9:1e:06:cb:89:95:de:2b:ff:03:f2:3c:0f:7b:51:6e:7b:
         76:48:08:a1:eb:02:ef:7b:a9:5e:cf:41:21:b3:47:a3:f0:be:
         e2:54:2a:09:45:2d:71:fe:c8:93:00:1f:69:0d:02:98:dd:58:
         fa:d0:c6:cf:b4:3d:f9:86:fc:b4:66:50:57:40:b1:b8:79:05:
         a3:34:e6:90:87:c5:6b:1f:2a:e2:3b:18:c1:d0:bb:5f:88:97:
         d4:1e:16:83:66:8f:27:c3:cc:89:5c:9a:6a:ae:90:15:57:98:
         67:ae:47:8e:d9:10:a3:fe:fe:3a:17:0d:cd:ee:b5:08:a8:e8:
         d7:76:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:16 2026 by rpki-client