Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File:                     e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier:          4VuIzi/9sOFE+4A5GAQjggmYELSk+ZA7njOr4iwwAN8=
Subject key identifier:   8F:97:23:F3:D8:04:F3:D6:19:3E:6A:52:4F:FD:85:8E:41:6E:1E:1C
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer:       /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial:       098A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number:          097A
Signing time:             Wed 22 Jul 2026 20:31:17 +0000
Manifest this update:     Wed 22 Jul 2026 20:31:17 +0000
Manifest next update:     Wed 29 Jul 2026 20:31:17 +0000
Files and hashes:         1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: /21VNN03Kkj8Isau5ib5/wmV1WL2hpj1eaGzqIeqKLg=)
                          2: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: OFe6pYT5si7P735ls7Y5SGcQNrbPBZR9CsKE32oRmEA=)
                          3: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: X+eBxovvqzHyCJboQeyc2wo6Qm3l7D8nVBLA57hyGZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
        Validity
            Not Before: Jul 22 20:31:17 2026 GMT
            Not After : Jul 29 20:31:17 2026 GMT
        Subject: CN=6a612895-bbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:96:3c:18:89:9b:8e:86:1d:93:35:aa:bb:
                    f9:cc:64:f0:3e:19:0e:3d:13:2e:8c:46:a6:93:87:
                    c3:73:e5:7a:b6:2a:14:7e:db:f7:ad:0b:3f:91:8a:
                    54:a1:7c:52:f4:16:1f:bd:95:b8:30:3b:dc:d5:f9:
                    0d:21:1a:b4:ef:17:37:75:ad:5d:ce:33:3f:19:a1:
                    47:af:2e:b1:a3:b6:ff:df:b8:c4:80:83:00:56:fe:
                    c0:f2:33:dd:49:e3:28:a6:bf:36:66:4e:37:f3:2a:
                    d2:2b:e9:bb:ee:6e:0c:14:1a:dd:f6:18:2a:b3:e2:
                    c2:0b:fb:6e:fc:5a:0f:c4:55:c6:43:92:6a:32:e6:
                    e6:32:33:c2:02:c3:7b:ac:f1:c5:34:64:20:1e:56:
                    11:d2:23:ea:98:fd:76:2f:7a:b4:1e:e6:fa:2e:cf:
                    25:98:85:b9:79:dd:17:39:1a:8f:99:75:d7:bf:17:
                    ee:0b:76:0e:e5:94:91:48:da:33:f6:a6:3a:7d:7a:
                    4a:2e:aa:02:17:74:4b:f6:f0:4a:54:e5:10:e0:9a:
                    10:5a:4d:d2:bf:ad:7e:7a:e2:11:f5:1f:bc:42:d5:
                    31:1d:8a:7c:19:9e:a5:1e:c3:96:3d:32:f5:c2:56:
                    38:10:fa:2b:21:ba:b0:f6:d1:c4:34:77:cf:9a:67:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:97:23:F3:D8:04:F3:D6:19:3E:6A:52:4F:FD:85:8E:41:6E:1E:1C
            X509v3 Authority Key Identifier:
                keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:4b:1d:1c:41:c2:fc:01:98:d7:1e:33:a3:49:ba:28:9f:
         1d:6f:21:31:49:85:10:83:77:50:ac:ba:c4:c3:f8:07:9d:43:
         c8:45:92:0f:cc:2f:ec:3f:be:85:47:70:83:98:db:4a:9f:12:
         8e:48:c2:ba:0a:ff:d9:88:52:30:d1:90:d2:2e:97:be:c5:12:
         2f:2a:c9:2d:18:69:58:4f:c9:13:2a:a3:4e:ca:0c:c9:73:46:
         2c:00:5f:11:b8:e0:64:94:6e:24:2e:ae:18:ee:67:91:ef:75:
         91:99:dc:f3:11:e3:33:50:c1:16:16:a6:20:e3:3b:62:8d:b8:
         ff:be:01:bb:af:7e:a8:3a:c7:8f:83:33:de:de:59:8e:de:2f:
         83:64:11:6a:de:5b:5b:83:4a:62:36:9a:bc:33:98:22:59:23:
         06:74:7f:1c:cb:e1:7c:a6:ee:b2:40:01:45:77:21:7c:95:8f:
         63:aa:29:8b:1f:ca:21:f1:90:77:b0:f0:f2:24:6b:74:0a:b3:
         86:b4:cc:63:d0:b9:1a:8e:79:a2:44:c5:3f:66:ef:86:20:b1:
         c4:cf:16:81:38:06:9e:5b:12:bb:3f:f4:e5:94:a5:04:39:25:
         c8:dc:a8:a2:68:81:5b:3c:d1:9c:8c:ba:95:7f:8f:85:7b:0e:
         5e:b6:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:05 2026 by rpki-client