Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File:                     1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier:          sZVEZkvXoOtNUezTjKBqZavUCi7R1G7niG4sxg9egpY=
Subject key identifier:   6E:49:7B:FD:12:3F:27:E5:D0:22:E5:65:43:D2:6A:26:72:07:98:CB
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer:       /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial:       108B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number:          1080
Signing time:             Wed 22 Jul 2026 17:32:01 +0000
Manifest this update:     Wed 22 Jul 2026 17:32:01 +0000
Manifest next update:     Wed 29 Jul 2026 17:32:01 +0000
Files and hashes:         1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: ndMNhd1XiZbYz19TvjcLOtO2FZj5+Hh+C1Je+egndRs=)
                          2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: cNOGWjX3tS0QYF3+Hr85nxbmOcjy7rNxMm+ayP/uy9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4235 (0x108b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
        Validity
            Not Before: Jul 22 17:32:01 2026 GMT
            Not After : Jul 29 17:32:01 2026 GMT
        Subject: CN=6a60fe91-3a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:aa:db:7b:82:db:86:d7:b5:03:3f:23:7c:47:
                    f7:d1:ae:a9:4d:2f:b7:c9:d0:60:bb:66:6d:1e:5c:
                    10:55:5b:00:1c:32:93:5d:75:82:d7:07:50:54:f1:
                    22:41:6d:41:50:d9:1d:3e:83:58:89:5a:96:7f:40:
                    2f:81:d8:02:b3:55:83:46:23:ff:9c:71:db:24:d7:
                    01:4b:3e:ac:46:c6:f4:c9:51:fa:b6:f9:0f:02:bf:
                    8d:35:c2:f8:5c:ed:97:43:16:ae:db:ea:86:29:76:
                    40:d2:95:56:4b:98:c7:71:57:33:20:31:a8:83:3a:
                    2c:cf:5c:63:7f:20:e7:00:3c:17:44:fb:e6:e4:14:
                    16:e5:04:e5:bf:c8:79:89:f2:c6:cf:8d:6c:05:e3:
                    0a:f1:b9:5f:ea:c5:4b:36:49:ac:b2:82:54:d9:24:
                    0a:92:d3:34:2e:67:ea:73:af:f5:93:88:ef:e8:23:
                    41:05:9e:a7:8f:9c:60:90:b8:80:e0:0c:59:cd:eb:
                    ae:c5:8b:2a:75:bf:5e:6b:97:a2:54:5f:62:80:d5:
                    c9:a1:a5:ac:c7:5d:60:8c:21:3d:7d:97:ca:19:7a:
                    3c:08:8c:ed:b8:c0:64:21:8b:5f:b7:db:11:d7:4a:
                    26:73:fd:5e:c7:91:bd:02:3e:fb:9f:82:55:d6:e2:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:49:7B:FD:12:3F:27:E5:D0:22:E5:65:43:D2:6A:26:72:07:98:CB
            X509v3 Authority Key Identifier:
                keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:62:89:b2:84:fd:db:02:f8:32:b8:48:4a:c1:fd:23:1a:6c:
         20:6d:26:f7:e7:5e:25:7e:25:c3:38:34:b5:e0:dc:6d:a9:01:
         80:21:0b:e4:c0:6f:58:5c:77:f4:66:52:ae:c8:3c:5a:22:bb:
         ef:42:5c:f6:a8:70:5d:c6:f0:86:f8:82:e4:dd:4f:3d:13:5c:
         33:f7:bc:68:b4:3c:86:07:2e:a3:af:ef:27:d9:aa:6f:d7:a5:
         56:e0:46:60:0c:f4:2a:7e:d2:07:ea:9a:c4:65:9b:50:1e:c4:
         44:03:73:1a:4e:59:b1:e6:f3:88:82:42:4b:a8:d5:2b:f4:c1:
         45:a3:a6:12:4a:b7:8a:69:4c:17:c5:35:ec:08:28:65:d2:e0:
         3d:e3:3f:f6:1f:7d:58:75:38:4e:02:ee:1c:04:22:7e:33:5b:
         af:20:22:47:49:b7:b9:08:ab:69:00:b3:b8:ca:0e:c6:87:50:
         d1:cb:f3:f7:53:7d:ab:0e:5c:3d:50:c7:f9:20:19:de:6a:15:
         07:a9:01:e0:96:2b:79:a0:ca:54:4e:89:36:f2:3e:39:6b:1a:
         6f:18:b9:96:cb:f4:d6:2b:52:f6:d8:a6:dc:f9:55:4d:21:b2:
         57:59:9e:e3:dc:79:ef:16:0a:e7:10:06:66:b1:07:71:0f:67:
         4e:45:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:29:24 2026 by rpki-client