Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
File:                     f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json)
Hash identifier:          9Y9cl5roDyIN3DxMrbcAOXe12gb7v3v+iHyFKH+SEHc=
Subject key identifier:   96:16:58:E3:BE:09:C4:DE:0F:BA:51:E4:03:39:73:B5:CD:B5:5E:85
Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Certificate issuer:       /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
Manifest number:          0272
Signing time:             Thu 23 Jul 2026 03:09:00 +0000
Manifest this update:     Thu 23 Jul 2026 03:08:59 +0000
Manifest next update:     Thu 30 Jul 2026 03:08:59 +0000
Files and hashes:         1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: 0kC5yhf75grPjMU+mWrLM7l0YGT26O0ECL8x/TZULbY=)
                          2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: UmgIXHzfkXMqKWVff6849jzy9LFm+7q1hZgvaLwPQ/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
                          rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
        Validity
            Not Before: Jul 23 03:08:59 2026 GMT
            Not After : Jul 30 03:08:59 2026 GMT
        Subject: CN=6a6185cc-df1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:6b:8d:05:02:17:0c:60:69:fe:f7:79:12:
                    c1:01:54:a3:ff:d7:b0:37:82:a9:48:7e:9d:1b:d5:
                    5e:61:01:bb:c5:90:91:9b:ec:dc:86:64:94:99:da:
                    f6:0b:b6:05:20:a3:55:8e:90:25:16:93:3b:e3:dd:
                    03:a2:44:f9:1c:74:64:67:c3:29:a8:fc:f1:ab:32:
                    a4:69:f2:bb:b9:f0:01:dc:5b:e6:27:b6:61:62:92:
                    a9:91:16:4c:26:6d:39:d2:cb:9f:af:48:30:62:5e:
                    90:ac:1e:a7:c1:1e:fe:75:ca:90:9a:5d:ca:e2:6c:
                    3e:33:e7:a7:31:19:13:f0:e3:65:33:ab:4b:ab:2f:
                    ac:42:63:40:38:ac:81:65:bd:3a:c7:3f:e4:8c:b0:
                    f8:9b:57:ff:95:bc:a4:e1:b4:2a:29:07:b3:ec:8b:
                    70:55:9f:4e:dd:40:b8:70:2f:39:c9:96:0c:56:8a:
                    67:00:d9:24:c1:de:52:68:4d:db:8a:00:3a:95:66:
                    e3:6d:fe:6b:17:25:46:90:f1:cb:d2:4b:15:50:9b:
                    31:8b:11:36:93:4e:71:8f:9f:ab:d2:f9:48:26:53:
                    66:b5:7b:da:ba:b4:0c:00:18:27:74:ae:d7:57:8f:
                    41:22:11:f4:88:a8:bd:55:f2:28:ad:68:ce:9b:27:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:16:58:E3:BE:09:C4:DE:0F:BA:51:E4:03:39:73:B5:CD:B5:5E:85
            X509v3 Authority Key Identifier:
                keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:f4:76:90:2a:1e:eb:47:6e:86:3c:c5:09:ae:cc:67:de:
         e4:be:aa:b8:27:c2:2d:50:29:4c:c5:c6:2d:63:25:22:a8:b7:
         4a:4a:ba:17:80:a2:eb:81:ec:c9:7d:2c:2a:62:65:15:98:2a:
         23:7d:c1:ae:17:62:b2:1b:af:9e:f5:9f:b7:ea:7a:cb:37:67:
         80:8c:73:48:b6:73:0e:1d:1f:8b:86:30:70:3a:1a:c3:35:d1:
         b0:2c:af:8f:36:63:25:7e:14:04:bc:fd:cc:ce:2c:68:ca:5f:
         39:89:11:3f:db:f6:92:17:42:5e:13:84:7d:0b:e1:93:a7:da:
         30:f7:ff:26:87:ac:55:8a:a9:31:08:b3:4e:c0:f0:65:bb:7b:
         0f:8f:d3:c5:b9:cc:c2:6d:0c:8a:cb:5c:ea:09:7a:c6:9a:d8:
         de:fa:21:20:32:f5:00:b9:f3:ab:a4:ab:c1:1c:be:b0:66:34:
         63:03:bd:91:41:f1:f8:aa:9a:7d:81:b3:a7:c5:b1:07:48:9a:
         21:10:3a:9a:10:f8:3a:9d:4e:65:77:2d:03:19:7c:ce:ff:e8:
         57:7a:0f:56:0a:6c:b4:0a:7f:85:13:09:09:71:f3:8f:c8:20:
         78:1c:d9:f4:2a:3c:10:48:4c:0d:6c:68:8d:7b:b8:1d:b7:5e:
         1f:7f:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:57 2026 by rpki-client