Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
File:                     nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json)
Hash identifier:          3U2ihDtwtpTgUBylpF4FAx0lk9aANgLoiDWhVX5tg0U=
Subject key identifier:   EF:96:DA:D7:E9:7A:85:74:4D:5E:E7:0E:94:6B:06:DE:9A:D0:5F:62
Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
Certificate issuer:       /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Certificate serial:       355A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
Manifest number:          528B
Signing time:             Wed 22 Jul 2026 15:18:04 +0000
Manifest this update:     Wed 22 Jul 2026 15:18:04 +0000
Manifest next update:     Wed 29 Jul 2026 15:18:04 +0000
Files and hashes:         1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: NeTq4OWotDEQinPlE7XexVAgAn6vYp0ZTkNpCl2D6Dw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13658 (0x355a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
        Validity
            Not Before: Jul 22 15:18:04 2026 GMT
            Not After : Jul 29 15:18:04 2026 GMT
        Subject: CN=6a60df2c-e0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:18:47:d1:74:95:68:c9:5f:2e:fc:eb:32:
                    f0:5c:14:c7:4a:26:6f:1b:8a:59:63:78:92:cb:2b:
                    2c:c0:da:23:37:16:92:e4:bb:50:ba:d3:cf:04:f6:
                    f3:1e:ee:70:c5:12:ed:89:18:6e:8b:2c:a5:6e:63:
                    dd:98:cc:33:71:20:50:18:fa:59:6c:01:26:a3:30:
                    9a:57:67:ae:11:46:69:00:c9:06:bd:b6:0e:66:83:
                    7f:53:2a:d6:b4:59:a5:48:76:9c:f1:15:e8:87:ea:
                    62:56:93:82:50:57:5a:de:0c:d1:f9:56:28:44:a1:
                    5e:55:64:29:3b:f6:a7:5a:b4:9d:0b:9d:9e:a6:07:
                    26:a1:19:3a:03:12:1a:e9:66:0c:1f:23:58:35:23:
                    b6:b8:29:cd:22:3e:41:47:99:32:f2:ae:16:70:2f:
                    57:9b:42:7f:6b:36:98:5b:de:3d:bd:f2:88:32:48:
                    a8:58:b3:1b:f7:82:70:1c:09:cd:ea:cf:6c:3f:0e:
                    ce:e2:d4:01:56:8d:1c:2e:2f:34:14:9e:b8:a1:42:
                    20:0d:d4:97:32:a8:99:66:4a:a9:4f:ba:94:20:39:
                    b6:a9:c9:a2:dd:4c:83:89:39:5f:9b:aa:70:1a:90:
                    3e:bf:ef:8a:92:01:47:e7:d8:22:2e:06:d1:fd:c4:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:96:DA:D7:E9:7A:85:74:4D:5E:E7:0E:94:6B:06:DE:9A:D0:5F:62
            X509v3 Authority Key Identifier:
                keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:d6:1a:f4:15:8a:38:d3:b0:05:b8:9d:c2:83:b1:b6:f2:
         6f:b5:0c:f3:21:ff:e5:f5:34:eb:77:0e:15:c2:02:87:9a:dd:
         fa:a1:fe:99:b5:23:18:9e:8f:0d:e7:7c:7f:52:af:43:51:a0:
         a0:1f:db:ae:1d:49:af:fe:fa:75:13:ce:9e:6b:b4:ed:5f:13:
         0d:e0:8f:d3:f5:19:23:a2:0a:c1:70:63:72:57:cf:85:aa:c0:
         b6:e0:e3:f9:ab:64:54:95:e7:04:02:24:41:b2:85:10:14:c5:
         a3:2b:58:c9:95:35:07:fa:32:be:1e:31:12:a2:65:39:d3:6c:
         d4:f1:9e:17:ee:0d:73:40:41:e0:4b:f7:a2:fd:85:9e:73:3f:
         1c:fb:c4:54:d8:c6:66:a1:9e:47:d7:96:2b:5e:99:5c:74:40:
         99:3a:f0:8b:31:39:bc:91:cf:99:65:f3:74:45:4d:bb:75:0c:
         b4:b6:f5:ca:c2:d0:21:10:28:23:24:3b:c4:9c:ce:f0:27:db:
         f2:ca:9b:0b:c5:99:69:b9:00:89:5b:ad:36:3a:48:e4:5d:1d:
         53:bc:68:62:02:e2:30:9b:75:77:6f:0e:83:8b:81:a2:25:76:
         9b:f2:c4:be:11:29:a8:3c:60:77:50:44:61:ce:ab:c0:52:f5:
         d4:aa:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:29 2026 by rpki-client