Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
File:                     FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json)
Hash identifier:          wBMyQfFC2xmW/6Euo9G2CTC5GYD2O8TZV9652+YHKdY=
Subject key identifier:   42:4B:8E:C1:49:9D:7F:77:CB:2C:B0:16:BA:25:88:1B:3C:A0:69:04
Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B
Certificate issuer:       /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
Certificate serial:       0657
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
Manifest number:          064A
Signing time:             Wed 22 Jul 2026 23:27:49 +0000
Manifest this update:     Wed 22 Jul 2026 23:27:49 +0000
Manifest next update:     Wed 29 Jul 2026 23:27:49 +0000
Files and hashes:         1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: kWCexihz7vKu3BWFiIDm5mjGBAO0C2ECckhvL0XGJdo=)
                          2: 2A52AB54138811F0BA2C056DC4F9AE02.roa (hash: +IpWmHn21lv1JDCd0DfT+m1o2uccKHiSqsImB3ZiiSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623 (0x657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5323, serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
        Validity
            Not Before: Jul 22 23:27:49 2026 GMT
            Not After : Jul 29 23:27:49 2026 GMT
        Subject: CN=6a6151f5-e5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:1c:6d:8f:e0:b3:66:bf:6c:52:f9:8c:ce:
                    14:2c:31:b7:67:66:cf:62:08:87:9a:ce:13:8e:ee:
                    47:5c:5a:92:eb:da:2d:2b:93:f4:d6:f8:33:4b:c1:
                    e5:d2:b3:fd:02:d9:18:67:ce:c3:29:eb:e2:fd:56:
                    9b:8a:09:9d:ca:8a:bc:6e:95:2a:98:cb:5b:fc:75:
                    46:81:d0:0a:80:1b:eb:93:91:72:d6:76:87:c5:41:
                    97:1e:b2:6f:ef:85:c9:2d:ab:20:ba:da:b4:40:1a:
                    31:f9:7a:6e:ef:73:2a:bf:10:9f:71:cb:f5:17:95:
                    ad:4e:f3:e8:44:9f:15:3f:87:eb:9a:bf:01:6b:54:
                    fb:b4:ae:b6:98:d7:90:d6:3c:f3:27:a5:36:85:61:
                    1b:72:38:5e:8a:e7:ed:89:4b:d3:05:fd:23:82:93:
                    7e:34:89:0c:db:77:a6:d9:11:ad:e0:38:3c:e7:ad:
                    fe:4b:02:6e:e7:bd:b6:71:ae:fb:db:bb:d0:8d:a4:
                    94:a5:0b:df:0c:6b:50:98:3d:a8:da:a2:5a:4b:9c:
                    7e:1e:f3:d3:05:1b:a0:10:ee:e8:a2:0d:9d:97:a2:
                    8a:9a:46:42:92:82:5a:64:1d:93:ea:45:68:ef:ba:
                    bb:77:9c:8f:b8:09:0c:89:a9:4f:7a:70:7b:a5:2d:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4B:8E:C1:49:9D:7F:77:CB:2C:B0:16:BA:25:88:1B:3C:A0:69:04
            X509v3 Authority Key Identifier:
                keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:de:aa:78:37:57:37:53:dd:a3:9f:dc:48:2e:bd:00:ff:
         4a:23:af:61:03:b5:23:03:83:f4:89:76:e1:ed:8a:b9:1d:23:
         f2:9c:c9:17:29:ff:49:79:74:7f:9a:a1:48:a2:06:e2:78:1d:
         ec:4e:67:88:74:87:cf:70:99:ea:eb:b1:41:50:e6:93:5f:e5:
         3e:9d:1b:9c:4b:86:3f:95:a2:2c:da:e8:ea:36:8a:49:3b:8b:
         de:3d:7a:4e:3f:4b:c6:05:d0:44:9c:f5:44:96:aa:e8:b9:cd:
         ae:d8:1a:12:28:e3:08:46:6f:28:a9:6d:88:e6:fc:aa:8b:49:
         2c:99:30:24:56:96:98:ac:8e:f8:b4:5f:ab:26:da:44:ed:11:
         16:3d:d1:ea:8b:25:d0:f6:86:85:91:f7:a5:c0:40:93:1b:9b:
         c7:4b:b6:03:18:7c:69:f2:87:0d:96:a5:e7:7d:86:e3:5d:07:
         67:70:d6:e0:6e:60:f3:80:d2:1f:d1:1a:86:0c:b2:6e:ed:96:
         0b:13:ac:a5:e9:16:20:e3:e1:16:c5:84:12:e0:f9:53:20:35:
         c5:26:99:02:1d:10:73:1f:6c:2b:f3:d5:58:60:3f:a9:7a:da:
         d7:7e:59:87:89:4d:56:f2:5d:15:15:12:4b:da:c0:25:c8:b8:
         10:bf:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:00 2026 by rpki-client