Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File:                     AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier:          61+ibiBG91dliGOHoKAwmm516icrSHuH/PfD7UDfY1I=
Subject key identifier:   E0:F6:8A:ED:88:07:BF:58:59:24:05:75:1C:AC:D3:8E:D5:9B:5C:DC
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer:       /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial:       08A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number:          089B
Signing time:             Wed 22 Jul 2026 21:05:15 +0000
Manifest this update:     Wed 22 Jul 2026 21:05:14 +0000
Manifest next update:     Wed 29 Jul 2026 21:05:14 +0000
Files and hashes:         1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: whlwo8xIkW8QMGglCQUG3OObgcqU8KPv0sTbVaWYVA4=)
                          2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aJ1rzrX52ih0nJe0c9m5UvMOZxkTO0Kam9iVSQYKSgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
                          rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
        Validity
            Not Before: Jul 22 21:05:14 2026 GMT
            Not After : Jul 29 21:05:14 2026 GMT
        Subject: CN=6a61308b-6a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:04:57:90:da:7e:dd:5c:bd:c4:c9:a0:29:
                    ce:f9:53:08:d0:8c:aa:90:57:16:df:cb:31:be:35:
                    a9:78:65:cb:43:a3:44:e8:06:2a:4b:9d:a4:9f:8f:
                    40:b9:5d:e0:0a:03:05:9a:9b:b6:45:33:ba:0d:6a:
                    05:4d:89:c2:f7:b1:60:66:88:ae:a5:f5:3d:16:97:
                    13:fc:73:d1:d1:5d:e0:46:3a:f1:e1:65:c5:69:d0:
                    0a:7d:3f:dc:7b:a0:c4:21:f9:23:96:2e:23:e5:13:
                    4b:bb:e3:50:27:64:93:4e:2a:23:05:a1:a7:7a:6d:
                    e4:f5:6d:ca:9c:6b:e7:88:91:04:37:d4:46:89:69:
                    c0:d6:1e:cd:20:7d:e0:68:d1:93:fd:54:f3:63:69:
                    51:04:d3:ad:62:2f:1e:e1:b1:ec:3f:f1:18:43:7f:
                    7a:66:1d:a9:4f:01:0c:b0:dd:39:18:11:ce:f4:83:
                    95:41:9d:26:9a:58:40:5f:29:d9:2e:d4:d2:a4:de:
                    df:71:ed:2f:50:fa:a5:78:08:87:02:7c:ea:dd:a6:
                    56:ea:e7:09:0e:29:cd:26:83:15:88:5c:bb:66:8b:
                    3c:fc:6f:40:da:0d:13:65:7f:18:47:7f:79:f0:3a:
                    90:1b:2e:b4:80:62:84:ec:df:1f:50:70:a6:3b:6c:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F6:8A:ED:88:07:BF:58:59:24:05:75:1C:AC:D3:8E:D5:9B:5C:DC
            X509v3 Authority Key Identifier:
                keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4c:47:93:10:26:3d:87:51:33:c3:27:9f:8d:5f:29:b1:6e:
         10:30:96:9a:ae:65:aa:f9:0b:6e:b9:ce:d6:db:fc:07:53:a0:
         ce:23:35:9c:8c:5d:1a:23:11:d8:44:94:11:f0:a2:2c:de:92:
         47:d1:a3:e4:ff:1d:cd:9b:4b:9d:2b:63:d9:ee:74:4f:3e:f0:
         04:72:cf:d1:3f:e7:40:2f:bd:2c:0f:08:51:73:4d:92:b3:05:
         d5:45:b9:7b:89:89:38:2f:45:a2:5f:2e:26:d7:d6:d5:19:c1:
         cb:17:49:b9:7a:24:66:11:e1:b9:1b:50:22:3c:b9:6c:a9:96:
         c5:b4:70:3f:6a:c3:4e:1d:1c:32:cd:18:78:0a:ec:a8:8a:60:
         c1:d8:ae:34:ac:d9:77:7f:36:e2:b1:4e:c0:30:36:62:d6:8c:
         a6:eb:f6:d0:d6:68:2b:ba:8e:de:bc:e8:ac:aa:53:b7:35:d6:
         22:cb:29:0a:99:7f:fe:14:28:d7:fc:dd:f1:88:3e:51:84:93:
         f4:e3:c6:02:60:ce:b7:4c:23:22:5c:25:ec:51:1a:db:f3:29:
         de:b7:56:e2:aa:0b:0e:b6:5f:92:77:be:f6:d8:d3:b5:e1:46:
         f2:c8:2d:74:dd:4e:77:66:12:e5:0f:43:d5:f9:f0:0b:79:f4:
         2d:6d:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:48 2026 by rpki-client