Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
File:                     7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json)
Hash identifier:          Lyshcgefekz5sGArHqh1YhBDXaUs1RPP+zOSKy5FPAg=
Subject key identifier:   43:94:95:3A:65:1E:56:70:8E:DF:DD:0A:B4:F0:A8:FC:08:4E:94:7C
Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31
Certificate issuer:       /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
Manifest number:          0191
Signing time:             Thu 23 Jul 2026 05:47:45 +0000
Manifest this update:     Thu 23 Jul 2026 05:47:44 +0000
Manifest next update:     Thu 30 Jul 2026 05:47:44 +0000
Files and hashes:         1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: IaASBBHFP7oMb7HqXNDK+kg4xr9IHLIRIbIx7KIWFTc=)
                          2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: XvV3KrQU+/AFsqX/bmWV7hZZ/sXJVuTdbUfgIHDhAFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl
                          rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
        Validity
            Not Before: Jul 23 05:47:44 2026 GMT
            Not After : Jul 30 05:47:44 2026 GMT
        Subject: CN=6a61ab01-c252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9a:2f:dd:da:d0:7d:10:c5:aa:20:dc:b2:08:
                    c5:88:a4:e6:82:63:76:78:79:e4:e7:41:eb:ef:81:
                    bf:44:7f:d1:ba:9c:ed:f8:cf:c7:7b:ba:58:69:29:
                    f1:09:47:69:79:d4:03:4e:b2:33:56:2c:e6:31:58:
                    8c:0e:73:43:c2:44:e4:01:b4:4b:92:28:7c:7e:eb:
                    aa:fb:19:04:dd:fb:7b:6f:6c:51:11:16:f0:97:3a:
                    17:4b:27:4b:0e:09:3e:56:32:33:7a:20:1a:93:e3:
                    eb:01:61:68:b0:63:88:e5:32:c4:51:ee:55:c5:7c:
                    ce:43:b2:26:11:6c:b1:bc:6a:a7:35:bc:97:7f:7c:
                    2f:53:3d:8d:4c:0f:f8:d5:58:d9:a1:60:2f:e0:f7:
                    b0:53:e2:8e:11:f7:57:64:14:e3:e7:40:01:f7:b8:
                    4e:7a:8c:22:e5:85:fa:68:18:10:ce:78:36:e6:2d:
                    2e:8d:70:67:85:ad:2c:c1:02:0f:58:45:e8:35:bc:
                    e2:89:4c:cd:19:43:0c:f7:4a:ef:9e:17:f8:f9:63:
                    66:2b:ef:e2:ec:b5:29:2f:4e:7d:9f:98:5c:3b:79:
                    9f:72:33:0d:e3:1b:35:bf:86:23:d0:ed:44:be:9a:
                    6a:45:7e:9f:4b:20:c1:e0:86:2b:0b:5a:9e:0b:fc:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:94:95:3A:65:1E:56:70:8E:DF:DD:0A:B4:F0:A8:FC:08:4E:94:7C
            X509v3 Authority Key Identifier:
                keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:b6:e7:21:0d:fb:a1:c8:9e:01:fc:d3:eb:8f:6f:13:12:
         6e:0e:1a:f7:13:39:f4:ef:3a:45:04:f6:b6:ee:36:28:d4:f9:
         67:f9:e3:f3:63:f6:fa:49:e4:ca:08:0e:25:ac:2e:61:cf:c1:
         fe:96:07:98:6a:7a:aa:90:5c:94:c6:3c:c1:5c:02:a2:9f:f0:
         17:f7:be:cb:ea:06:86:5a:16:ed:88:6c:64:62:0b:11:42:40:
         75:de:17:b7:3f:9e:5f:b7:b1:41:ef:d0:87:62:35:09:28:40:
         27:94:c1:b0:16:20:f7:ae:72:aa:1d:89:91:83:f1:be:d8:a7:
         bf:a0:ab:7f:77:58:c0:c5:c4:b6:5c:69:a7:5d:38:4d:54:d8:
         90:45:46:a3:50:f6:31:44:9f:ed:df:5e:fc:a2:a2:c1:b8:a3:
         61:a9:5f:19:d4:ac:cd:72:ef:8e:c1:01:bd:70:fb:13:07:44:
         8c:5a:14:b6:4e:2f:43:54:ea:1f:54:b3:df:ec:93:0c:2c:37:
         de:02:cd:27:76:48:99:77:3a:4f:70:67:18:b2:20:ce:7a:ed:
         6a:f9:93:b8:90:f0:b3:41:f9:a2:54:6a:ba:eb:f8:30:17:3a:
         72:3e:4f:d4:9d:c6:e4:51:c0:8f:70:d5:48:5b:6f:6f:bc:08:
         f2:52:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:02 2026 by rpki-client