Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
File:                     MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json)
Hash identifier:          7fzx+9xvTUKMLIQjLvEAiLrFyNO4w43eWcEkzNEAKBI=
Subject key identifier:   10:7A:87:20:8A:37:9C:B5:B3:EF:0E:D4:6D:41:87:6D:DC:02:BD:D0
Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
Certificate issuer:       /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
Manifest number:          7F
Signing time:             Thu 23 Jul 2026 09:36:32 +0000
Manifest this update:     Thu 23 Jul 2026 09:36:32 +0000
Manifest next update:     Thu 30 Jul 2026 09:36:32 +0000
Files and hashes:         1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: xbpHxJU6dfYkMkfyrVauou0zy3HGs21XAy+LS5Q24k4=)
                          2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: YgMVa/NKSadZ8Pl0yQHFdoPMQfnm0r1V/gi6KwsxDA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
                          rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
        Validity
            Not Before: Jul 23 09:36:32 2026 GMT
            Not After : Jul 30 09:36:32 2026 GMT
        Subject: CN=6a61e0a0-0e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:51:f7:eb:37:d0:fa:5f:50:3e:ae:c9:91:
                    29:27:39:0a:21:60:27:3e:76:f6:4e:ad:8f:c0:1d:
                    22:08:7d:b4:1d:1d:d0:a5:b3:9a:96:13:70:7c:50:
                    93:b4:18:2c:18:e2:7c:52:71:05:c4:eb:c9:a4:7a:
                    be:e8:d7:2b:68:ff:d7:4f:ea:72:db:3c:1c:bf:f2:
                    63:54:9e:b0:45:c8:e2:e2:33:6e:9d:95:df:c1:e2:
                    46:74:28:96:ba:89:c2:0c:23:94:c8:35:19:62:3a:
                    64:49:89:1c:00:42:7d:45:19:25:e4:23:0b:71:40:
                    37:8c:85:77:5c:25:01:f0:d5:ed:20:e8:0f:aa:c7:
                    6e:b9:a1:a7:ca:94:38:47:13:78:36:0a:3c:43:3c:
                    ee:7f:9f:75:6a:2e:61:84:a9:1c:1e:3c:38:0d:f3:
                    73:e8:67:02:24:83:83:48:5f:3f:db:cb:be:de:d2:
                    f8:2b:d3:bc:ff:9c:51:84:69:b5:23:4e:c2:f6:7b:
                    f9:0e:a9:a6:c1:13:06:16:4d:78:88:b5:ce:10:51:
                    e4:e0:f9:da:02:5c:e5:67:49:b0:b8:3c:31:a4:5e:
                    07:09:51:cc:20:3d:49:84:3e:81:c4:ca:a9:ea:54:
                    12:b7:8c:34:5b:0e:83:d5:05:b7:83:a8:3b:ff:d7:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7A:87:20:8A:37:9C:B5:B3:EF:0E:D4:6D:41:87:6D:DC:02:BD:D0
            X509v3 Authority Key Identifier:
                keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:26:c1:67:08:0b:6a:3a:e8:b7:ea:34:e8:a3:35:ae:e7:bd:
         c0:4f:5c:08:e9:7d:6c:c3:09:93:7b:53:1d:8f:7d:48:07:7b:
         90:60:2e:fc:6a:2a:45:47:10:7b:82:27:0b:94:39:5e:ac:1e:
         d4:2e:00:fb:2d:a6:ce:4f:a4:df:c4:ea:f9:6a:80:72:66:6f:
         0d:35:29:23:ed:f9:ab:cc:8b:33:0e:64:3d:f2:cc:a8:3c:62:
         9c:61:65:bb:fa:a8:0d:7e:d5:e9:37:e1:41:55:b6:88:49:2e:
         3e:6e:c3:97:99:16:27:30:fd:6a:af:6c:f0:39:8a:dc:32:9f:
         b6:53:71:d5:df:7a:ed:de:42:df:9e:62:d6:a8:97:cb:b9:91:
         cc:94:c7:bc:e2:93:ff:2b:a3:90:0c:d0:99:16:a4:08:6e:25:
         7f:47:d7:2d:b1:d9:f9:f8:9b:39:e6:89:cc:d0:a8:e0:63:30:
         87:8a:40:27:5b:4d:0e:f4:05:74:a8:ac:69:a3:9f:24:bd:64:
         5d:87:03:1d:91:52:7d:f7:1b:bd:8a:ce:f5:b3:5b:2d:0f:dd:
         e7:1f:b7:99:28:d1:b3:f0:f0:a1:c4:c1:0f:b4:68:57:c7:b7:
         8a:93:61:07:5c:b3:1c:3c:ab:36:95:d3:6a:7e:ed:79:79:07:
         4a:fd:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:48 2026 by rpki-client