Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
File:                     suPG96kEVKInRzewUsujXxn11aA.mft (raw, json)
Hash identifier:          E+3ivNSl4jwGUo8YPJ+ijoj7kecFXtlThc1jGATkw0o=
Subject key identifier:   B2:26:77:A2:94:5B:7D:78:6F:88:4D:DB:30:BB:50:76:1E:29:EC:45
Authority key identifier: B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0
Certificate issuer:       /CN=A91BFDE1/serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
Manifest number:          4C
Signing time:             Thu 23 Jul 2026 10:22:52 +0000
Manifest this update:     Thu 23 Jul 2026 10:22:52 +0000
Manifest next update:     Thu 30 Jul 2026 10:22:52 +0000
Files and hashes:         1: suPG96kEVKInRzewUsujXxn11aA.crl (hash: GxvB2p/lAfPDG39MbSM98pSMXkLaKriq1TWEOCEoMqI=)
                          2: 000FAEF0187D11F19A5CAFE7383D8C67.roa (hash: segqNYyes6EIoWSsGy8Pu8WgYVh2x3RfT/RKs6A99TE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl
                          rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0
        Validity
            Not Before: Jul 23 10:22:52 2026 GMT
            Not After : Jul 30 10:22:52 2026 GMT
        Subject: CN=6a61eb7c-149e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:30:e6:99:26:a0:d2:c2:05:8b:db:33:0d:
                    ca:65:a9:c5:84:83:a2:98:f8:e5:bb:5a:e5:78:72:
                    51:90:33:1d:46:07:cf:db:24:f8:0a:bc:5a:e1:e3:
                    1d:4e:16:66:2f:e2:de:81:47:80:8c:90:72:cc:4a:
                    34:02:7c:42:af:52:16:24:37:f2:ea:94:8d:51:49:
                    86:9c:f2:3e:99:b8:52:8c:81:8d:2e:42:2b:70:64:
                    9b:df:9c:69:d9:e9:fe:dd:f4:60:47:be:19:6c:d8:
                    01:c0:58:12:26:f1:9e:dc:e9:27:0c:0d:15:45:ed:
                    9f:61:91:98:32:c1:87:12:c9:02:12:b1:a2:ee:8c:
                    a1:67:5c:b0:48:ec:c9:5e:6e:95:62:b3:b0:3a:95:
                    b8:ab:4f:d9:b1:d2:b6:bf:c6:72:30:e1:43:a9:8f:
                    7d:7a:9e:78:fc:dc:1c:1d:06:c8:d6:4d:45:b7:d2:
                    88:f7:d9:5d:d5:06:a9:7d:ed:9f:21:7d:66:c5:a1:
                    5f:87:71:b9:9f:90:96:8c:a5:89:e7:dc:81:55:97:
                    18:d3:75:a4:0d:ff:96:f1:6f:7d:91:99:da:45:78:
                    ed:76:58:58:fa:e0:67:45:a5:b3:5c:94:e6:c4:56:
                    cf:f4:e4:fa:27:d7:9d:c0:41:89:38:ae:0d:75:59:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:26:77:A2:94:5B:7D:78:6F:88:4D:DB:30:BB:50:76:1E:29:EC:45
            X509v3 Authority Key Identifier:
                keyid:B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:49:94:82:0a:20:de:e2:f5:d3:57:f5:b6:1a:9c:ae:15:91:
         00:d5:6d:4a:6b:bd:56:5d:df:df:db:c0:0e:62:64:39:76:93:
         c7:71:42:0c:21:0e:50:41:13:9e:54:4e:f4:94:91:88:a7:33:
         0d:ef:a7:ee:0d:47:70:58:db:f0:3b:00:d0:1c:88:ed:b5:73:
         09:4b:cc:85:7e:bd:68:ed:98:f1:1c:a1:7b:d3:53:06:1e:3f:
         cf:5c:c8:ec:18:ae:19:47:b7:a0:ad:b7:b7:e2:09:5a:71:64:
         fa:e5:dd:ec:c0:07:0f:db:29:1b:f6:e7:5e:23:60:44:23:90:
         06:f5:fc:12:23:63:5d:69:36:dc:d2:d3:dd:e0:c2:d7:fc:e2:
         9d:57:21:25:4f:a7:85:d1:81:90:0d:94:61:83:51:bd:2f:29:
         fb:4e:50:6a:ff:2b:05:70:45:ec:ef:75:88:3f:c6:cd:32:a2:
         2b:97:af:e2:8a:dd:cd:57:76:ce:4b:27:ed:38:13:24:85:f1:
         03:6a:e1:0b:05:38:45:18:f4:93:45:6f:e6:65:cc:70:e9:ce:
         f4:e3:dc:79:c3:52:48:12:a4:0f:41:99:e3:75:7c:5b:e0:42:
         74:32:a8:85:1e:4d:48:95:6f:65:3b:6c:cc:f0:ad:48:4c:33:
         79:c9:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:56:01 2026 by rpki-client