Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File:                     d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier:          jDcqsdGMV3RYa2DD3w0xjBmB/zq/5aNp/7+G2NaRrfY=
Subject key identifier:   C6:46:AB:D1:1A:EB:A2:53:C2:AB:0E:33:52:AA:70:3E:73:B9:DB:EF
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       3567
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number:          3561
Signing time:             Wed 22 Jul 2026 15:19:39 +0000
Manifest this update:     Wed 22 Jul 2026 15:19:39 +0000
Manifest next update:     Wed 29 Jul 2026 15:19:39 +0000
Files and hashes:         1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: vE2Oc3ti1ECBNEu9wSURtRN2A7Va7sI2HsrbNGhXmYQ=)
                          2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: xDho51ddKsKnW1mieTz7ANylai7wvJBRqnmFiSl8KPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13671 (0x3567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
        Validity
            Not Before: Jul 22 15:19:39 2026 GMT
            Not After : Jul 29 15:19:39 2026 GMT
        Subject: CN=6a60df8b-d59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:09:a6:82:98:b6:69:ff:43:9a:8e:4b:a3:
                    a0:72:f5:3f:17:f0:cc:f6:e7:6d:dd:50:cc:5a:91:
                    89:dd:9f:41:49:1d:35:af:fa:b4:7d:d4:96:7a:14:
                    3c:68:29:92:57:82:2d:c0:18:6d:d1:0c:5d:6e:42:
                    00:38:7c:8a:97:a7:fe:3f:7f:95:ba:c1:a9:e2:d4:
                    42:5e:f4:5f:5d:64:85:0b:ee:80:f1:3d:bb:59:0a:
                    c6:92:79:5f:f6:08:45:fe:3b:fe:e2:20:e0:0f:ec:
                    80:60:05:aa:61:11:18:8b:26:9a:90:ed:93:fb:f1:
                    29:46:69:24:27:52:80:57:50:8f:a7:79:07:f7:6e:
                    e0:61:a9:21:d9:6e:f5:81:87:9c:cc:6d:d2:76:2a:
                    df:68:d2:c4:28:33:f6:7b:eb:b4:15:1d:76:2d:6d:
                    c3:d4:e3:00:99:aa:92:6f:bb:80:bf:b9:15:8e:30:
                    a3:71:ee:f4:92:5d:e9:a6:f3:50:f9:70:b0:7a:13:
                    f1:b2:db:4b:1e:a8:d6:aa:83:68:55:5d:d6:e9:36:
                    35:11:e7:2c:7b:31:ea:98:43:78:09:d0:1c:8d:7d:
                    3c:ab:3f:f9:fe:f3:92:f0:2d:69:f3:31:07:24:b2:
                    f0:2b:a8:6d:7a:d9:b0:f0:bb:4f:d8:ef:40:ec:08:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:AB:D1:1A:EB:A2:53:C2:AB:0E:33:52:AA:70:3E:73:B9:DB:EF
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:9b:9c:06:d2:ee:3c:d6:db:e9:d8:a7:fb:58:4e:dd:28:
         72:88:b1:43:60:39:0b:1a:94:a8:09:f8:e7:1e:4f:e2:b3:82:
         ee:39:31:8a:75:0c:d5:0e:c3:42:0a:c7:9d:25:8e:bb:5a:da:
         7e:06:87:01:e2:8f:84:7a:15:69:73:65:31:3b:f2:bf:32:d8:
         eb:4e:71:1c:f6:4e:8e:c5:14:15:da:b1:40:8c:46:05:38:1f:
         10:30:53:9c:c9:d5:1a:c1:10:65:6e:17:bc:78:fa:d9:5f:49:
         8b:e8:ea:62:ad:49:80:a1:61:26:5a:0f:f5:91:3c:31:e0:88:
         4d:33:ad:a2:bd:20:98:0e:fb:2c:96:c2:4a:76:cc:f2:92:5b:
         25:f6:6a:96:66:c2:5c:6a:55:30:cf:a8:ba:f9:46:82:fa:08:
         3e:83:a0:8e:c5:59:9c:99:35:5a:bd:5a:8f:c7:51:df:4a:40:
         b9:c6:21:6c:b2:34:4f:16:68:94:4e:01:87:c3:13:09:32:2a:
         66:f9:0b:ec:5b:57:67:17:54:bd:67:28:fe:91:c3:73:57:dd:
         28:47:97:8a:67:11:56:15:15:2d:d4:ca:86:1a:51:3c:4b:cd:
         78:c2:0e:a9:63:fe:15:fc:44:cd:15:e0:e5:4a:5d:a6:22:be:
         b5:49:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:18 2026 by rpki-client