Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File:                     bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier:          F2lPN3Bz4LO3L+Q5XruNyo0TCp8vxNDHaZMAtyAZDCE=
Subject key identifier:   0E:E7:00:90:0F:37:89:49:6D:79:E0:71:A9:2C:77:01:D7:A2:20:D4
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer:       /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number:          72
Signing time:             Thu 23 Jul 2026 09:47:44 +0000
Manifest this update:     Thu 23 Jul 2026 09:47:43 +0000
Manifest next update:     Thu 30 Jul 2026 09:47:43 +0000
Files and hashes:         1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: NOQUPuyDrCeHWjKnNTApHHexhPGYo7dZDBRYKvEKjVM=)
                          2: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
                          3: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
                          rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
        Validity
            Not Before: Jul 23 09:47:43 2026 GMT
            Not After : Jul 30 09:47:43 2026 GMT
        Subject: CN=6a61e340-749c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:32:04:ad:67:ed:77:d8:72:78:e3:3f:71:
                    6a:83:6d:17:ce:de:4e:f2:6b:6f:0f:17:86:1f:ab:
                    79:f3:06:24:e5:d5:32:54:ea:23:17:c4:31:87:14:
                    b1:f6:45:a8:78:a4:56:9c:fc:68:fc:fb:b6:90:59:
                    ed:b1:85:cb:16:b2:95:b1:f4:c9:43:3a:5c:64:5c:
                    80:d9:ee:03:df:f8:b7:17:1b:0b:d2:0e:cd:06:21:
                    cf:98:f4:5d:ce:05:a1:ac:41:46:f4:74:ae:3d:e0:
                    a5:12:9a:a3:ed:1d:61:d4:20:24:ea:91:6e:d9:a3:
                    1c:99:60:2a:e2:6a:f0:70:5c:9b:2d:96:11:db:9e:
                    6e:21:6a:20:2c:3b:51:ff:70:9b:e7:26:47:4b:46:
                    92:85:8a:37:eb:cc:f3:00:4e:2b:2a:e0:c6:38:f6:
                    04:41:65:a1:a7:eb:ae:03:6b:fd:a5:e1:56:19:90:
                    72:f6:95:5b:93:9c:b7:43:af:2c:69:11:0b:ad:c0:
                    a2:76:25:3f:ac:a6:3f:ef:97:db:73:d1:75:42:47:
                    e7:71:b8:34:67:09:d9:39:22:40:08:a4:6f:92:f6:
                    6b:3c:47:b9:e7:0d:eb:37:f0:b0:97:3d:b9:72:80:
                    01:53:07:a7:e4:4a:75:f0:da:e3:34:74:b6:c6:68:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E7:00:90:0F:37:89:49:6D:79:E0:71:A9:2C:77:01:D7:A2:20:D4
            X509v3 Authority Key Identifier:
                keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:03:91:7a:59:ab:d9:08:fe:05:93:40:ba:2d:03:ef:57:
         c4:32:ff:ca:51:54:df:80:1c:e0:da:bc:f7:81:06:6b:e1:02:
         09:70:7d:f8:1a:5d:dc:91:25:24:6f:c3:73:15:23:5b:4b:64:
         75:61:30:03:e9:ee:8d:3e:d5:2f:3e:f0:b9:f8:0c:60:19:d8:
         5c:30:f9:d3:50:45:55:97:74:a5:29:35:eb:d7:f9:97:ab:ec:
         82:00:03:86:8d:5c:4f:c6:3e:57:8a:db:cc:71:63:9d:90:b1:
         0e:ef:1a:91:f5:f0:57:13:ed:32:ba:2b:2b:18:6d:fe:dd:90:
         ae:12:ee:52:7a:de:56:dc:3b:5d:49:f6:66:72:ff:6f:12:62:
         dc:dd:db:16:43:fc:36:5b:14:45:f4:6a:40:85:af:89:3e:9f:
         5b:f3:a8:3b:3c:56:08:df:f5:17:ca:82:8d:9a:0a:63:52:f1:
         7f:73:3e:46:77:d6:aa:7d:65:2d:1f:cc:1a:73:dc:f2:2f:df:
         40:aa:9b:13:1d:12:3f:fd:fa:19:f2:d5:a0:c7:d7:d9:57:86:
         e0:ee:55:f6:ae:0a:4a:91:70:fc:94:6a:c5:a7:45:8d:aa:e5:
         67:ae:be:bb:b1:56:8f:44:de:2b:49:47:55:59:53:6c:8f:19:
         88:11:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:36 2026 by rpki-client