Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File:                     cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier:          8PqR2CM82mbS/5XIysgr6Z98IVotO5CyzFCWXJKO1Sc=
Subject key identifier:   72:BC:5C:82:8B:ED:CD:E2:4B:79:97:ED:15:EE:79:81:10:4C:98:8C
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer:       /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number:          0202
Signing time:             Thu 23 Jul 2026 04:24:49 +0000
Manifest this update:     Thu 23 Jul 2026 04:24:49 +0000
Manifest next update:     Thu 30 Jul 2026 04:24:49 +0000
Files and hashes:         1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: K5+mFMVHGZ5kTaq6Qa9d2zwpCq0EHR5NyqMTblA5A2g=)
                          2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
                          3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
                          rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
        Validity
            Not Before: Jul 23 04:24:49 2026 GMT
            Not After : Jul 30 04:24:49 2026 GMT
        Subject: CN=6a619791-5237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:68:c1:42:2d:55:31:e5:51:24:0a:ca:e9:
                    c5:a3:95:8c:5d:d6:81:d8:da:d5:62:64:d5:c7:ea:
                    fe:d8:cf:79:34:4a:60:3c:a4:42:cb:03:33:0b:eb:
                    6f:2b:86:3d:9c:3a:be:30:eb:9c:2a:fa:d5:61:36:
                    df:9b:ed:84:24:e7:06:a4:1d:5b:b8:48:a0:1d:f8:
                    72:c6:86:c3:19:a3:95:b8:b9:c2:cb:9a:8b:cd:0c:
                    bd:fc:28:da:38:4a:82:07:72:60:34:dc:e1:1a:d7:
                    42:5c:fc:17:47:fa:70:e2:57:e7:07:ec:93:7e:53:
                    6b:3d:cb:dc:78:8b:eb:a6:a1:04:88:90:bd:75:9e:
                    96:89:34:37:b6:43:a0:a9:64:b3:d3:dd:ae:8f:67:
                    6d:1a:08:ef:45:b8:34:c1:07:80:c0:4f:59:b8:c6:
                    ba:df:f0:aa:82:f7:6e:59:06:8e:11:f3:ae:5e:40:
                    66:33:62:80:26:be:89:f0:c5:99:26:9e:44:72:d6:
                    e7:6d:c1:61:14:29:53:3b:8a:be:fe:32:c0:9e:aa:
                    0a:cd:0e:78:ed:0f:3a:fc:22:0e:1a:09:65:d2:6f:
                    09:2a:08:25:85:99:86:9e:d9:fe:5e:c3:73:74:43:
                    a5:58:55:b4:ff:ac:96:cc:c4:45:88:cd:8f:af:92:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BC:5C:82:8B:ED:CD:E2:4B:79:97:ED:15:EE:79:81:10:4C:98:8C
            X509v3 Authority Key Identifier:
                keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:73:f5:ad:8d:5a:6a:a3:ca:3f:fc:d3:ae:39:d5:d1:fe:9f:
         78:6e:ec:77:21:d8:37:e7:c0:f3:16:d1:70:e8:d5:c8:c4:7a:
         f5:36:2e:41:e5:94:5b:e4:79:3e:1d:40:d8:28:66:45:cd:ff:
         9d:3e:2f:86:32:03:3f:d3:84:e1:03:b6:8a:a9:49:52:61:23:
         dd:f0:4f:bf:17:2f:d9:c1:cf:03:fb:fb:fb:e2:ab:53:29:17:
         d5:2c:65:c7:31:1b:ee:14:05:99:79:0c:24:1b:27:69:90:ab:
         09:77:d7:44:ef:be:b6:db:48:32:dc:58:58:2f:e9:5c:22:55:
         e2:71:3f:ed:9d:6e:cb:4c:b1:5a:1f:a1:f3:08:b6:a0:b4:42:
         36:74:56:f0:20:de:cc:71:0a:84:03:34:56:39:9b:ca:18:76:
         dd:fb:c7:72:8c:fb:3a:e2:27:1d:d3:0e:be:8e:70:e7:35:8a:
         9a:55:9b:c9:c6:de:9a:ad:9d:9c:0e:49:33:fc:b3:1c:e9:35:
         32:e3:3c:f6:50:57:e3:cf:03:96:c5:0e:36:e2:5d:ff:24:12:
         62:81:25:17:1a:fc:10:a1:a0:22:1f:76:59:af:62:9e:9a:b8:
         66:2a:bb:60:91:15:f1:96:e0:fb:25:49:7f:b0:ea:d5:21:6f:
         79:f2:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:57 2026 by rpki-client