Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
File:                     zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json)
Hash identifier:          345pay+QmGn4BkqMiB2NnVaOXt83aO1dsp+lsDqcpzY=
Subject key identifier:   4A:40:0C:CD:75:65:6F:AC:06:AF:9C:75:7C:46:D1:58:B1:EC:CA:91
Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41
Certificate issuer:       /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
Manifest number:          0299
Signing time:             Thu 23 Jul 2026 02:46:55 +0000
Manifest this update:     Thu 23 Jul 2026 02:46:55 +0000
Manifest next update:     Thu 30 Jul 2026 02:46:55 +0000
Files and hashes:         1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: I1N2hjVnzYvBcKMoop2aw8pnbs82bssS9h4Q2/UQYKo=)
                          2: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4=)
                          3: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41
        Validity
            Not Before: Jul 23 02:46:55 2026 GMT
            Not After : Jul 30 02:46:55 2026 GMT
        Subject: CN=6a61809f-e27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:f7:8c:61:c2:26:9f:a6:5f:07:21:b9:c6:
                    69:3d:a1:f5:9f:a6:c7:b4:c0:e5:a6:e8:dd:4a:d8:
                    36:6e:cd:fb:6b:e9:2e:b4:45:59:91:f9:1e:9f:78:
                    0a:8e:2d:c4:eb:f7:2b:d3:e4:4d:a1:15:dd:83:c3:
                    0e:f3:55:16:df:3a:e0:74:29:fe:72:68:42:b8:79:
                    64:4c:5e:3d:f1:f5:d5:4a:3e:8f:6b:8c:55:dc:65:
                    08:fb:02:f3:09:a6:55:2b:b1:16:e1:0d:a7:d6:fe:
                    0d:d9:87:d7:3f:69:d6:15:37:03:db:cf:03:dc:a1:
                    b8:a7:5b:64:2d:33:d1:b4:fe:e5:7e:53:c5:ac:81:
                    d5:86:7d:9b:20:3c:9e:b0:5b:ea:88:6b:08:26:32:
                    f0:d6:36:6f:d6:e0:83:1b:22:7c:45:57:99:c5:f5:
                    75:c0:32:62:7f:04:e2:3f:07:3b:f6:0a:d7:3f:a7:
                    cc:40:ff:e1:bb:fb:83:42:d8:04:c4:a8:87:bd:54:
                    34:c3:00:76:0a:f3:89:a4:83:0d:68:55:0d:4b:9f:
                    5f:19:0f:b9:2c:11:31:94:12:3e:af:0c:ce:78:c1:
                    f9:64:ca:3a:14:b4:a8:a8:18:a8:0f:2e:f5:54:37:
                    2e:f7:6d:2e:74:79:8a:84:71:f1:d4:f3:9a:cb:34:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:40:0C:CD:75:65:6F:AC:06:AF:9C:75:7C:46:D1:58:B1:EC:CA:91
            X509v3 Authority Key Identifier:
                keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fc:86:20:65:f9:0d:d9:01:37:3e:db:1e:3d:84:5b:d9:04:
         e5:15:93:6b:f8:a5:b9:f8:bd:43:28:8b:fa:d3:bd:5c:76:26:
         76:63:34:ff:0e:db:e2:c9:72:72:25:7e:ae:a1:f9:97:9f:f0:
         bf:bf:41:13:2a:fb:35:a4:52:bb:9a:f3:fa:73:a7:6d:7c:bb:
         18:50:0f:8e:28:33:56:6e:bd:bb:e7:bb:f6:20:53:b2:19:92:
         b3:f3:b9:df:10:de:7e:59:dc:94:43:5b:3f:98:21:e4:17:c3:
         aa:25:1a:41:05:85:ec:ca:23:5b:36:73:6f:0c:1d:35:b7:56:
         0c:6c:37:c8:5b:75:5c:5d:14:c4:13:cc:0c:4f:a2:00:50:40:
         ee:9a:8f:17:24:da:e7:a2:94:d6:3b:34:95:ec:2d:7d:d8:30:
         ad:91:03:c3:5d:0b:d5:c9:c4:32:04:5c:dd:df:f1:70:56:a2:
         b9:74:48:41:94:1a:3c:cb:f1:0c:fd:c5:0d:5a:2c:88:8b:2a:
         f9:a4:21:0a:e2:0a:4e:c4:3f:7d:2a:4d:00:b2:47:0c:b8:25:
         d2:26:5f:5a:80:a8:b9:57:ea:42:5a:a8:c9:e0:c7:82:f6:1c:
         86:a1:cc:01:47:2c:90:a0:89:89:65:e6:17:b0:a6:ec:54:00:
         75:a6:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:41 2026 by rpki-client