Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
File:                     cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json)
Hash identifier:          Yt+imIf1SYMMuXZ7k/YYLLLwrEwhUKrtZS/3FUByLJs=
Subject key identifier:   AE:05:9D:53:38:AF:C6:53:9D:99:C2:56:A1:71:AD:03:1B:EE:95:90
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Certificate issuer:       /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
Manifest number:          0587
Signing time:             Thu 23 Jul 2026 00:03:15 +0000
Manifest this update:     Thu 23 Jul 2026 00:03:15 +0000
Manifest next update:     Thu 30 Jul 2026 00:03:15 +0000
Files and hashes:         1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: DvcwlCU5jhiOgHxhYczXgip2VzkIZsJKQ1wuCQzAV8M=)
                          2: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: baibuYWIpr+G/3yWYzUEd75gq0D9onuWC061QPJtxB0=)
                          3: 2894A350705F11F1A7A1ED8F70A30FBC.roa (hash: f5hXdnbfoOJMTROR6C6aBv/K1AhGm1KG2D4JAjNeBYA=)
                          4: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: AcOK+or8IBRyx2MYpgbbtYCs/ZUAEOaOnVDcLAu/Hbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
                          rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
        Validity
            Not Before: Jul 23 00:03:15 2026 GMT
            Not After : Jul 30 00:03:15 2026 GMT
        Subject: CN=6a615a43-5fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:4d:ee:25:3a:d6:d6:d1:bc:e8:a2:ca:84:
                    ec:20:6b:49:e5:3e:80:68:2e:da:c3:d9:15:ed:ab:
                    7b:cd:d7:7e:57:10:d5:25:f5:b7:0e:04:7e:e2:b7:
                    bf:11:19:50:79:db:c5:24:66:6e:5e:e4:2a:96:27:
                    ed:10:c4:a4:20:22:40:49:17:7b:28:e4:a3:fa:b3:
                    b2:b7:e1:1b:19:b1:97:c0:46:dc:eb:f9:0a:0a:48:
                    f1:df:ac:ea:81:dd:cc:c1:20:f9:f5:a3:c5:b7:19:
                    8c:c7:91:24:92:d8:71:59:f0:b3:a5:1f:f5:85:02:
                    c6:af:0f:f6:8c:43:50:21:39:d0:b4:68:ea:e2:be:
                    1a:d0:92:81:7d:9d:5d:8c:44:b5:47:78:64:7a:1d:
                    98:2c:d2:a5:e8:08:d2:6b:87:53:b9:f6:e5:33:2b:
                    59:ae:6f:e4:b7:97:63:f4:fe:6a:6d:61:3c:ba:30:
                    52:d7:5c:a8:c7:3b:6c:ac:6e:c9:7e:4a:de:d7:bc:
                    62:da:14:83:26:67:2d:4a:60:46:80:18:cb:dd:72:
                    d0:6e:6d:aa:ce:6e:3d:11:11:2e:32:8c:b2:ff:89:
                    35:6e:23:3a:74:bf:59:04:10:35:9d:86:68:2a:d5:
                    79:c4:af:77:c8:c3:54:87:c7:d9:6c:c6:6a:ed:28:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:05:9D:53:38:AF:C6:53:9D:99:C2:56:A1:71:AD:03:1B:EE:95:90
            X509v3 Authority Key Identifier:
                keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:9a:8e:ed:c5:08:3e:83:b2:f4:5d:6d:c1:c4:76:95:a9:
         0d:76:7a:91:dc:ef:88:8f:48:ce:f8:fb:55:44:ad:18:df:9b:
         3a:5b:e1:33:9f:ed:22:99:7c:1a:ae:ee:bc:94:96:6d:32:d5:
         ec:d0:c2:7b:69:01:8d:cd:5e:21:61:b5:9d:42:ec:88:4e:79:
         38:5e:8a:3c:93:70:ff:eb:7b:c1:ae:9d:6d:d6:7f:f2:1b:4e:
         92:c9:a9:cd:77:79:15:3d:4b:45:f5:32:4a:74:04:a9:6d:47:
         af:fb:31:b5:5f:07:52:a3:1a:7d:2b:dc:7d:53:ae:60:f4:55:
         95:fd:41:a1:85:0c:4e:69:12:da:09:5a:4c:87:22:c7:ab:f1:
         b2:dc:b1:e6:fb:34:d1:bc:51:6b:63:0a:9d:ce:dd:0e:24:24:
         77:40:0d:61:e1:00:ca:90:02:7d:24:7f:d0:f2:dc:5a:89:95:
         22:25:46:4d:4b:64:d0:49:d7:92:28:88:3d:86:a9:5a:e1:35:
         48:37:a9:4b:64:04:fc:36:15:1d:c4:7b:75:d7:c0:4a:21:e9:
         a4:27:75:de:17:a8:c4:ee:e6:6f:79:6f:9b:cb:a6:35:f6:ea:
         7a:75:78:cf:97:b6:6b:8d:27:01:bb:3b:d8:dd:2b:1f:88:e6:
         01:12:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:42 2026 by rpki-client