Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
File:                     RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json)
Hash identifier:          mxTsp6qnp5MuizTJL8BOW3W410OOf/FuepPc70Y2enY=
Subject key identifier:   1F:9F:7D:66:B4:B4:EA:6C:2B:47:15:DA:05:94:79:B0:2C:8C:82:0A
Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
Certificate issuer:       /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Certificate serial:       0C5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
Manifest number:          0C35
Signing time:             Wed 22 Jul 2026 19:07:51 +0000
Manifest this update:     Wed 22 Jul 2026 19:07:51 +0000
Manifest next update:     Wed 29 Jul 2026 19:07:51 +0000
Files and hashes:         1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: FGicmY1b3N2ihSasoF5uQk5QgqCpKO0et7jcVWEx1lE=)
                          2: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: XsMoMWlR8dOzT9d+9n8LNpIjHk3wP8ck0r6vfuxsHZY=)
                          3: CAB386681C3311F19EABC196373D8C67.roa (hash: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y=)
                          4: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3166 (0xc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
        Validity
            Not Before: Jul 22 19:07:51 2026 GMT
            Not After : Jul 29 19:07:51 2026 GMT
        Subject: CN=6a611507-95b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:cc:b1:35:28:3b:c1:a2:f1:4c:68:53:13:
                    0e:9c:4e:17:b7:bb:87:ca:92:9e:ee:08:26:0b:b5:
                    1f:da:63:8a:f2:05:17:0f:5c:da:50:60:05:57:9e:
                    a1:0b:36:9c:f0:5f:32:4f:72:ad:2c:db:b6:1d:7b:
                    63:84:60:ca:1f:33:14:85:2f:0c:69:e3:cd:1e:94:
                    74:ee:d1:4d:b1:5c:8c:b2:3e:bd:7f:fb:57:4d:3c:
                    be:32:09:62:11:c1:7a:8e:96:ee:0b:60:da:32:b0:
                    c6:58:58:c5:97:b1:6c:18:c1:99:26:84:89:c5:c2:
                    71:08:d6:74:31:41:d6:6f:bf:5e:a0:77:52:50:49:
                    b2:0d:c3:2a:26:e1:84:7f:e2:cc:07:6e:04:40:37:
                    b5:cb:21:2a:cb:5b:60:95:3d:bb:8b:f0:70:be:56:
                    62:4f:e9:d3:e1:44:8a:bb:54:6c:a1:1b:b8:a8:5f:
                    6d:44:3b:34:08:69:58:c7:f0:cc:90:2a:8f:84:ea:
                    32:ad:40:3e:fb:fc:de:93:f4:6b:24:6d:74:77:78:
                    e4:b1:16:d3:7c:fb:aa:ca:df:2d:fa:23:0d:a3:1c:
                    52:8d:02:5c:e4:3b:3d:b8:d2:36:e7:c9:83:35:98:
                    05:9b:9d:1a:93:54:09:88:ec:95:03:98:a5:57:a9:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9F:7D:66:B4:B4:EA:6C:2B:47:15:DA:05:94:79:B0:2C:8C:82:0A
            X509v3 Authority Key Identifier:
                keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:f6:61:5f:b4:52:d4:ac:68:7b:05:54:85:21:71:b8:4b:
         be:1a:d8:81:9e:c8:1f:c8:b6:f2:f6:8c:be:1e:a7:67:f4:f4:
         fb:f9:b1:d6:2c:fa:4b:e5:45:2f:de:c6:d0:e1:46:2f:dd:78:
         78:31:21:ab:ce:88:fb:80:e5:50:fd:92:78:73:7c:8e:99:e6:
         d6:29:07:a0:be:74:c4:54:90:5f:d3:2e:ce:a3:68:04:90:75:
         7c:6b:10:b0:9e:a4:ee:96:11:7b:2f:36:78:2e:1a:08:b4:fc:
         a1:2f:df:3b:98:e7:b1:94:01:42:43:5f:0a:28:fc:92:0a:34:
         3b:0f:cd:19:e1:a7:ad:2a:fd:36:96:93:77:6e:fe:e4:f8:d3:
         66:37:f7:b0:a6:9a:94:45:a9:95:f3:49:cc:ed:af:f3:47:8c:
         68:49:21:55:dc:29:59:a9:cc:18:f3:c7:56:70:93:36:ab:26:
         62:19:ac:d6:53:a8:77:3a:2b:7b:51:88:16:ed:90:03:b3:33:
         9c:67:22:fc:ca:a2:19:5e:90:d8:a9:13:de:63:c0:b0:64:8c:
         cb:92:54:50:69:51:9e:86:b2:72:06:88:78:35:8a:9a:87:94:
         1d:2d:b9:4b:ed:ae:e5:50:93:55:22:85:98:a1:54:98:ad:f9:
         3e:3c:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:19:49 2026 by rpki-client