Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
File:                     CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json)
Hash identifier:          bP3JtMf+1yNipckQFGoJA+h67KEQ5lcSP0Pz2WNvN5w=
Subject key identifier:   D1:B0:D0:78:38:20:7E:50:D7:5F:57:37:C4:19:0E:B0:BE:AD:B2:A7
Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
Certificate issuer:       /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Certificate serial:       05CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
Manifest number:          05BC
Signing time:             Wed 22 Jul 2026 23:51:36 +0000
Manifest this update:     Wed 22 Jul 2026 23:51:36 +0000
Manifest next update:     Wed 29 Jul 2026 23:51:36 +0000
Files and hashes:         1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: Zz3yhxo/OUY52JecsV9T+evzZEsPczNd16xxC/QqvcI=)
                          2: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 6Zu4L1ezgqlBaAtZaZeJDXKxjpiSp79xQrfuVaBXNZ8=)
                          3: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: mFoBkWfLh0LGrOinTzXA38KoXXGaCtnMvz2q3N7gfu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1487 (0x5cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
        Validity
            Not Before: Jul 22 23:51:36 2026 GMT
            Not After : Jul 29 23:51:36 2026 GMT
        Subject: CN=6a615788-0667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:96:11:d7:b4:7a:de:54:c0:31:26:82:8c:
                    34:c6:39:81:b7:73:89:35:d3:bd:2f:15:a6:bd:77:
                    b1:fe:6d:9f:f0:9c:0d:d9:8c:71:47:d9:61:a8:25:
                    97:0e:3f:7e:63:76:d2:68:31:47:f8:cd:7e:de:83:
                    f0:10:f6:db:84:a8:de:92:d8:9c:88:d5:85:fb:f9:
                    86:a6:2c:39:b1:c2:38:b8:0e:9b:f7:83:75:d4:55:
                    b2:aa:23:4f:29:06:7a:d9:5f:2d:e5:82:6c:a1:f3:
                    9c:53:a3:22:12:c4:7f:d5:89:94:49:63:f9:8a:8d:
                    26:db:3c:91:07:52:7e:34:54:92:66:f5:e0:62:27:
                    e2:8c:7e:ca:03:a3:b6:30:e9:5b:d8:fd:68:35:11:
                    ae:23:a8:3c:4a:07:80:30:74:6a:92:a2:13:d8:0f:
                    e1:7f:46:20:11:c8:7d:1b:cd:a0:ab:0f:93:99:a2:
                    31:30:14:57:bb:08:ae:c0:cc:97:e9:63:78:38:14:
                    96:cb:23:e4:3e:d0:2d:cc:30:3a:e7:38:cd:8b:90:
                    ec:cf:bf:3c:cc:99:5a:89:25:88:27:4c:37:c0:43:
                    75:79:2f:a6:52:2e:27:fe:81:86:a7:a1:c5:80:2f:
                    4a:27:20:5c:2d:33:0c:a2:c4:ed:8b:4c:43:21:21:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:D0:78:38:20:7E:50:D7:5F:57:37:C4:19:0E:B0:BE:AD:B2:A7
            X509v3 Authority Key Identifier:
                keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2e:bb:78:a7:37:15:73:d1:f8:d2:ec:8a:ab:ea:e2:ad:94:
         49:3f:7b:34:00:32:c2:45:bd:6d:fd:ff:46:43:97:05:90:c1:
         a9:30:59:d9:f3:29:99:d0:7c:23:cd:52:d8:19:3c:47:96:e8:
         74:a2:61:f9:43:3e:7f:dc:7c:71:35:2e:e4:6f:02:70:1c:de:
         c6:98:59:0f:1a:e4:d7:b0:02:f2:2a:59:24:36:bf:9d:c5:3b:
         ea:44:fb:49:0d:49:66:91:89:c9:e2:fe:a2:4e:3d:53:2a:a7:
         97:7e:3d:08:c4:56:61:25:95:00:86:f7:ad:91:32:2e:d2:ae:
         6e:78:cf:fa:f0:dc:23:0c:7f:7a:b9:9b:60:2f:17:57:0a:64:
         aa:58:d1:2c:b3:4e:69:f9:e4:0d:39:76:6f:cd:e0:19:b1:47:
         1c:bc:b0:a3:b1:43:f8:9a:49:80:e2:81:9d:a1:46:fb:64:a2:
         bc:95:ae:92:eb:fa:98:0c:cd:5a:97:71:a2:1b:a7:73:8e:93:
         1e:1d:0d:bc:be:0c:55:45:b1:23:07:0c:fe:cd:bc:e4:92:a7:
         f7:db:02:46:8a:a6:a0:84:1c:71:30:01:88:88:8d:c3:65:1b:
         a2:39:63:a8:af:7f:d3:19:5a:4b:16:ba:52:c5:9e:23:6f:ba:
         16:0c:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:58 2026 by rpki-client