Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
File:                     bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json)
Hash identifier:          XHX90RULFFNzbQMGANbqNXbxKCLSNHwauX6tLuf8caw=
Subject key identifier:   3B:E2:E9:2C:AF:EA:35:18:1B:B4:C0:5F:FB:63:45:4A:1F:73:33:89
Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
Certificate issuer:       /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
Manifest number:          011A
Signing time:             Thu 23 Jul 2026 07:33:43 +0000
Manifest this update:     Thu 23 Jul 2026 07:33:43 +0000
Manifest next update:     Thu 30 Jul 2026 07:33:43 +0000
Files and hashes:         1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: X6ugOsh6vsAZeBdAUbmMZVeEloc0yq8QojfW9yjNKAg=)
                          2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
                          rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
        Validity
            Not Before: Jul 23 07:33:43 2026 GMT
            Not After : Jul 30 07:33:43 2026 GMT
        Subject: CN=6a61c3d7-1aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:85:24:69:10:df:e3:9c:26:c6:fc:ca:0c:
                    5f:8b:44:75:a5:0f:6d:28:88:e2:6a:c3:ba:5a:68:
                    e8:28:98:cc:db:b9:17:39:34:51:ff:77:a3:4e:d5:
                    a5:54:de:0b:b6:03:53:be:6b:53:2c:13:01:75:ed:
                    c8:a9:1c:b2:4c:57:85:04:98:4f:c8:2c:24:83:68:
                    4d:ac:97:5a:a8:bd:95:dd:3f:51:2a:2a:48:6e:89:
                    a5:c0:8e:d3:8f:18:16:a5:c2:13:a8:82:84:9f:17:
                    a9:b6:2e:78:8c:20:a3:a4:00:76:54:13:3e:dc:a5:
                    85:6b:02:86:67:13:50:e9:53:68:80:2a:6d:e9:15:
                    f5:a4:98:4b:05:4f:56:af:ab:27:d4:b8:d7:8d:f6:
                    90:2f:9c:32:6f:27:05:d2:1f:7f:16:32:bc:5f:65:
                    b8:c6:b0:b4:aa:30:da:98:f6:b8:85:87:7e:bc:e1:
                    97:c4:74:af:60:88:5c:cd:e2:45:21:a8:b0:eb:e5:
                    d0:3b:2f:8f:76:38:5e:1f:a8:a9:33:b8:06:10:f9:
                    64:0b:5e:54:eb:e5:bb:ef:a0:57:c1:21:d6:f9:62:
                    12:8f:1b:59:34:76:a6:98:39:bb:b5:ac:bc:77:8b:
                    75:1a:6a:d9:b1:30:c5:30:77:86:f8:19:2c:91:2e:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E2:E9:2C:AF:EA:35:18:1B:B4:C0:5F:FB:63:45:4A:1F:73:33:89
            X509v3 Authority Key Identifier:
                keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:16:d8:fc:22:4d:22:3d:92:f1:9e:ca:02:12:4e:aa:ae:1b:
         76:8f:c4:5f:7c:6a:a0:12:9f:97:8d:41:66:69:8c:70:ca:7f:
         c1:e9:2e:1b:72:87:b9:7e:72:60:06:13:ea:e8:f4:98:00:06:
         8b:e8:1b:8d:cc:13:99:73:65:6c:42:c9:f2:28:47:16:44:ae:
         d0:19:f0:ee:4a:c2:39:b5:79:c4:2c:44:db:1b:9a:ca:38:56:
         a3:ed:c0:f4:c1:23:e1:56:a0:23:04:88:95:9e:e2:d8:9b:5a:
         62:a0:c1:5d:9a:d8:f7:d1:65:94:49:9a:3a:9e:1c:75:a9:54:
         37:d0:74:6c:5f:24:fe:cc:c5:8b:b5:cd:82:f6:86:51:39:d2:
         4d:d6:60:7f:85:3f:be:78:76:12:1f:55:1b:f4:09:4e:4c:2e:
         cb:0c:c5:c0:2a:a7:cc:5c:68:3f:5d:de:b9:36:41:63:67:3c:
         95:b2:3c:40:0b:39:d2:3d:ca:db:fe:80:6a:7d:e0:a5:14:c5:
         54:1f:96:26:4d:b9:10:e3:78:5a:01:a7:ea:b9:5b:84:3f:84:
         94:df:bb:ba:ed:13:ec:70:45:3d:ba:f0:71:3a:e3:b8:1f:99:
         44:cd:44:df:4c:80:49:12:57:c3:30:60:6a:90:10:b7:21:de:
         69:f1:50:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:04 2026 by rpki-client