Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
File:                     52ijbgWHwyVfmjLZGP7HEPoEZRw.mft (raw, json)
Hash identifier:          kztsyWpxT6IxD+Oxvw+wq0bhMU5/SUfH/fNPN7BKWbI=
Subject key identifier:   5F:90:BF:EE:7B:26:DD:C8:79:64:18:EC:90:66:09:ED:5F:99:F9:12
Authority key identifier: E7:68:A3:6E:05:87:C3:25:5F:9A:32:D9:18:FE:C7:10:FA:04:65:1C
Certificate issuer:       /CN=A91C5911/serialNumber=E768A36E0587C3255F9A32D918FEC710FA04651C
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/52ijbgWHwyVfmjLZGP7HEPoEZRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
Manifest number:          2F
Signing time:             Thu 23 Jul 2026 10:40:50 +0000
Manifest this update:     Thu 23 Jul 2026 10:40:50 +0000
Manifest next update:     Thu 30 Jul 2026 10:40:50 +0000
Files and hashes:         1: 52ijbgWHwyVfmjLZGP7HEPoEZRw.crl (hash: 9rrOZBusp4lS5KnmJEHRWAt6k+//Wuym8r+FFsWrxt8=)
                          2: A50B29AE3E0511F19E528F9BA6833773.roa (hash: nGeSRfbe7avEFpwg3ASNJxBKGhA5xKxjZ0T8pfJRU/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.crl
                          rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/52ijbgWHwyVfmjLZGP7HEPoEZRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5911, serialNumber=E768A36E0587C3255F9A32D918FEC710FA04651C
        Validity
            Not Before: Jul 23 10:40:50 2026 GMT
            Not After : Jul 30 10:40:50 2026 GMT
        Subject: CN=6a61efb2-02fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:09:34:a8:f3:43:1f:cd:c6:c3:2a:23:49:
                    43:84:f2:09:ba:bf:3a:57:01:bd:ce:fc:95:42:f3:
                    a0:f8:f5:49:10:d9:ce:7d:36:ab:0f:3a:cf:28:f6:
                    48:1b:56:86:4a:a8:dc:d9:40:b3:b9:f2:fd:62:4c:
                    42:e3:7e:f9:23:ba:07:ad:c9:d5:18:dd:1f:96:da:
                    ac:75:af:26:cb:69:34:86:89:d2:84:52:87:59:1d:
                    fe:a2:c2:5a:ea:35:03:0e:9b:86:63:1c:bf:d5:c6:
                    41:ac:36:e1:5f:72:bd:3d:85:83:50:0d:ff:cf:68:
                    63:f7:f1:c1:b1:10:2d:7c:38:be:db:ae:fb:e3:ac:
                    3c:5b:3f:ab:80:2a:02:1e:30:e2:79:29:f7:e9:32:
                    5b:7f:67:9c:6c:14:1e:12:cd:68:20:20:3e:8a:e6:
                    ad:c3:d8:a4:8a:e6:c7:b6:34:a3:3a:dd:97:18:5b:
                    b9:70:16:a8:18:e3:2a:39:ff:4c:a8:40:49:3d:87:
                    85:af:59:65:75:7a:f7:a2:5a:d1:c3:5c:0c:cc:62:
                    d7:8c:af:ac:16:b0:00:fa:a6:a4:69:83:6b:00:df:
                    d1:c1:fd:52:fe:82:b4:24:c0:12:68:4a:6d:b3:9b:
                    78:2d:da:b2:98:18:64:ac:d9:46:50:99:f8:48:6e:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:90:BF:EE:7B:26:DD:C8:79:64:18:EC:90:66:09:ED:5F:99:F9:12
            X509v3 Authority Key Identifier:
                keyid:E7:68:A3:6E:05:87:C3:25:5F:9A:32:D9:18:FE:C7:10:FA:04:65:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/52ijbgWHwyVfmjLZGP7HEPoEZRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5911/BA1A2BE83E0411F1871F0B19A6833773/52ijbgWHwyVfmjLZGP7HEPoEZRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:32:b4:5f:6c:4b:8c:dd:fa:50:35:4e:76:d0:60:45:85:
         af:da:14:1c:84:4d:5a:75:ee:1b:71:7b:74:dc:dd:bf:4b:c7:
         4c:95:32:93:df:16:48:9e:d5:72:6b:4f:7f:4f:d9:5e:fd:63:
         6d:45:8e:1e:68:fa:89:e9:ce:c3:13:36:84:80:cf:f6:21:7a:
         cd:40:58:5b:22:e4:25:47:1f:e5:56:53:be:f1:55:0a:78:ac:
         84:87:3c:96:db:22:fa:c9:a8:91:67:24:7d:b9:cb:22:3c:2f:
         1a:22:f9:6f:a1:38:fb:2a:7f:d5:0e:43:46:da:f5:04:8e:7f:
         c7:64:a8:ab:5d:45:49:36:ab:e7:67:02:71:bb:4a:63:e0:ff:
         8f:06:37:be:b6:34:19:77:95:bd:d5:46:b8:74:06:a5:13:51:
         42:39:be:f6:2a:b5:94:48:73:35:50:d0:3d:04:1b:52:dd:8b:
         dd:66:f9:88:58:83:a3:96:32:5f:cf:24:a1:61:3f:c4:79:c5:
         95:dd:0e:89:f0:a7:ad:0a:0b:8d:1f:ed:fe:71:43:76:e0:59:
         a9:37:7d:0f:05:aa:52:82:1a:e5:e2:bf:cf:41:13:ad:40:96:
         d0:ff:2a:80:7f:cb:d4:75:58:de:9c:cd:27:d8:93:69:ca:bf:
         18:fd:2c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:06 2026 by rpki-client